Privacy notice

Who we are

This website is operated by 00Sec Limited (OOSEC), the organisation powering NESTCON through the Nexus for Ethical SecuriTy (NEST) initiative. Reiss Junction Road, North Legon - Accra, GM-070-4423. You can reach us at info@oosecgh.com or +233 59 933 0435.

What we collect, and when

We only collect what you type into a form. Nothing on this site collects personal data passively, with one exception: the background video on the festival page, described below.

• Attendee registration: your name, email address, phone number, occupation, organisation or school, and your shirt size.
• CTF and training registration: your name, email address, phone number, organisation or institution, which audience group best describes you, and, if you choose to give them, accessibility or dietary requirements. CTF registration may also include a team name and a self-described experience level. Training registration includes the tracks you select.
• Partnership and exhibitor enquiries: your company, your name, email address, phone number, the partnership types or product category you are interested in, and your message.
• Contact messages: your name, email address, optional organisation, the topic you select, and your message.
• Newsletter: your email address, and which part of the site you subscribed from.

Why we use it

To run the event and to talk to you about it: confirming your registration, sending you the venue, agenda and CTF details as they are confirmed, planning capacity for training tracks and accessibility requirements, and responding to enquiries. Shirt sizes are used only to order the right run of event shirts. We also use aggregate counts (how many people registered in each audience group) to plan the programme.

What we do not do

• We do not sell your personal data, and we do not pass it to sponsors, exhibitors or recruiters.
• We do not put personal data into our analytics. Analytics record that a registration happened, never who registered.
• We do not use advertising or cross-site tracking cookies. If that ever changes, a consent banner will appear before any such cookie is set.

The video on the festival page

The header of the festival page plays a short, silent clip hosted on YouTube. It is embedded through YouTube's no-cookie domain, so no cookies are set for advertising or profiling, but your browser does have to fetch the video from Google, and Google receives your IP address and the address of the page you are on. That is a request your browser makes directly; nothing about it reaches us, and we get no analytics from it.

The video is not loaded at all if your device asks for reduced motion, or if you are on a data-saving or 2G connection. The page works exactly the same without it.

Bot protection

To stop automated abuse, our forms include a hidden field that people never see, a check on how quickly the form was submitted, and a per-address submission limit. Where a CAPTCHA is enabled, your IP address is shared with Cloudflare solely to verify that the submission is human.

Where your data is stored

Form submissions are stored in the event database and emailed to the organising team's inbox. Some of the services we use to do this may process data outside Ghana.

How long we keep it

Registration and enquiry records are kept for the duration of the NESTCON edition they relate to and for a reasonable period afterwards so we can contact past attendees about the next edition. Newsletter subscriptions are kept until you unsubscribe.

Your rights

You can ask us what data we hold about you, ask us to correct it, or ask us to delete it. Every email we send includes an unsubscribe link. To make a request, email info@oosecgh.com.

Changes

If we change how we handle personal data, this notice is updated before the change takes effect.