Legal
Privacy policy
This policy explains what data Sanga collects, why, how long it is kept and how to exercise your rights. It applies to the sanga-event.com website, the web application and the Android app.
Version of 7 October 2026 · replaces the June 2025 version
01Data controller
Elokan Consulting & Solutions (ElokanCS), a limited liability company incorporated under Cameroonian law, registered office in Akwa, Douala, publisher of Sanga. Contact: [email protected].
02Data collected
Account: first name, last name, email address, encrypted password, organisation.
Ticket purchases: name, email, Mobile Money phone number. No bank card data is stored on our servers.
Events: tickets purchased, invitations, RSVPs, attendance (entry scans).
Contact form: name, email, phone, organisation, event type, message, and a hashed fingerprint of your IP address used only to limit abuse.
Audience measurement, only if you accept it: page viewed, referring page, device type and a random identifier stored on your device.
03Purposes and legal bases
Performance of contract: account management, ticket sales and delivery, payments, check-in, sending tickets and confirmations.
Legitimate interest: security, fraud and abuse prevention, replying to contact requests.
Consent: website audience measurement and marketing communications. You can withdraw consent at any time.
Legal obligation: keeping accounting records.
04Retention periods
Account data: until account deletion, plus one year.
Payment data: five years (accounting obligations).
Contact requests: three years after the last exchange.
Audience measurement: thirteen months maximum. Your consent choice is kept for six months.
Connection logs: twelve months.
05Recipients and processors
Supabase: database hosting (European Union).
Vercel: website and application hosting (United States).
PawaPay and PayPal: payment processing.
Resend: transactional emails (tickets, confirmations).
Brevo: receiving and following up contact requests (European Union).
No data is sold. Transfers outside the European Union are covered by the European Commission's standard contractual clauses.
06Cookies and local storage
The website uses no advertising cookies or third-party trackers.
Strictly necessary storage, without consent: light or dark theme preference (sanga-theme), your consent choice (sanga-consent), login session in the application.
Subject to consent: audience measurement identifier (elokan_vid). It is only created after you click “Accept”, and deleted if you later refuse.
You can change your choice at any time with the “Manage cookies” link at the bottom of every page.
07Security
Traffic is encrypted (HTTPS/TLS). Data is stored in databases protected by row-level access rules (Row Level Security). Payment keys are never stored in code.
08Your rights
You have the right of access, rectification, erasure, portability, restriction and objection, and the right to withdraw consent.
To exercise them: [email protected]. Reply within thirty days.
To delete your account: the “Delete my account” page, linked in the footer.
If you believe your rights have not been respected after contacting us, you may lodge a complaint with the competent supervisory authority in the Republic of Cameroon, or with a European supervisory authority if you live in the European Union (for example the CNIL in France).