Legal
Privacy Notice
Effective 5 September 2026
Extractive Insight LLC, a Delaware limited liability company, operates and publishes Extractives Directory and is the controller of personal data collected through this website. Questions and privacy requests may be sent to directory@extractiveinsight.com.
Information we collect
Organisation submissions may include a contact name, work email, phone number, role, organisation details, evidence and information supplied for publication. Curator accounts may include account identifiers, names, work emails and access roles. We also process limited technical, security and usage information generated when the service is used, such as request data, authentication events and error logs.
Why we use it
We use personal data to assess submissions, contact submitters, create, maintain and correct profiles, administer curator access, secure and improve the service, preserve source provenance, enforce our terms and meet legal obligations. Depending on the circumstances, we rely on consent, performance of a requested service, legitimate interests in operating an accurate and secure industry directory, or compliance with law.
Publication choices
Submission contact details are used for review and correspondence and are not published unless the person has expressly asked for them to appear on a profile. Information that a submitter marks for publication may be edited for accuracy, consistency, safety and style before it appears.
Affiliates, service providers and transfers
Authorised personnel, Extractive Insight affiliates and service providers may process information where needed to host, secure, authenticate, communicate about and operate the directory. Extractive Insight operates through separate legal entities; an affiliate processing data for the directory does so for the purposes described in this notice. Information may be processed in the United States, Kenya, the United Kingdom and other countries in which service providers operate. Where required, we use appropriate contractual, organisational and technical safeguards for cross-border transfers.
Cookies and sign-in
The public directory may use essential technical storage needed to deliver and protect the site. Curator sign-in uses ChatGPT authentication and associated cookies or similar technologies. The authentication provider may process account and device information under its own privacy terms. We do not use curator identity information to publish a profile unless separately authorised.
Retention
Declined or withdrawn submission contact records are deleted or anonymised within 24 months. Provenance records supporting a published listing are retained while that listing is active and for up to 24 months afterwards. Security logs are generally retained for up to 12 months, unless a longer period is reasonably needed to investigate an incident, resolve a dispute, preserve legal claims or comply with law.
Security
We use reasonable technical and organisational measures intended to protect personal data. No internet service can guarantee absolute security, and users should avoid submitting confidential, privileged or unnecessary personal information.
Your choices and rights
Subject to applicable law, you may ask what personal data we hold about you, request access or correction, object to or restrict certain uses, withdraw consent where processing relies on consent, or request deletion. Email us with enough information to identify the relevant record and request. You may also complain to the competent data-protection or privacy authority where that right is available.
Changes and contact
We may update this notice when the service, our practices or applicable requirements change. The effective date above identifies the current version. Privacy requests should be sent to directory@extractiveinsight.com. Our Africa headquarters is at Globe Trade Centre (GTC), Office Tower, Westlands, Nairobi, Kenya.