Privacy & Data Policy

How OpGal Africa collects, stores, protects, and provides access to registry data.

Last reviewed: May 2026

1. Who We Are

The OpGal Africa Registry is operated by OpGal Africa, the designated Registry Authority for OGI camera operator certification records across Africa. Field audit and certification assessment is conducted by Alfa Design, the Field Audit Authority.

Together, OpGal Africa and Alfa Design form the dual-authority framework that governs the certification and public listing of OGI camera operators.

2. What Data We Hold

We hold two categories of data:

Public Registry Data
  • Registry ID
  • Display name (first name + last initial)
  • Certification level and status
  • Certification expiry date
  • Country of operation
  • Employing company name
  • Audit compliance status
Restricted Internal Data
  • Full legal name
  • Email address
  • Phone number
  • Date of birth
  • Photo
  • Internal audit notes
  • Document attachments

Restricted data is never exposed on public pages, the public API, or in verification letters. It is accessible only to authorised OpGal Africa staff.

3. Data Hosting & Infrastructure
Note: The specific cloud provider, server region, and backup schedule below are placeholders. The OpGal Africa team must confirm and insert the correct details before this page is published.
Cloud Provider
[To be confirmed by OpGal Africa]
Server Region
[To be confirmed — e.g. Africa (Cape Town) / Europe (Frankfurt)]
Data Residency
[To be confirmed — primary storage location]
Backup Frequency
[To be confirmed — e.g. daily automated snapshots, 30-day retention]
Uptime Target
[To be confirmed — e.g. 99.9% monthly availability]
4. Security Measures
Encryption in Transit
All traffic is served over HTTPS/TLS. Unencrypted HTTP connections are rejected.
Access Control
Role-based access restricts internal data to authorised staff. Operator portal and regulator portal are separately gated.
Password Security
All passwords are stored as salted cryptographic hashes. Plain-text passwords are never stored or transmitted.
Automated Backups
Database backups run automatically on a scheduled basis. Backup restoration is tested periodically.
CSRF Protection
All state-changing requests are protected against cross-site request forgery using Django's built-in CSRF tokens.
Public Privacy Enforcement
PII (email, phone, date of birth, photo) is never rendered on public pages or returned by the public API.
5. Data Retention

Operator records are retained for as long as the operator remains in the registry or as required by applicable regulations. Specifically:

  • Active operators: Records are kept current and publicly visible as long as certification is valid and the operator remains active.
  • Expired or lapsed operators: Records are retained in the system for audit and compliance history purposes but marked accordingly in public search.
  • Removed operators: Following a confirmed removal request, public-facing data is suppressed. A compliance history record may be retained for regulatory purposes.
  • Audit and assessment records: Retained indefinitely as part of the operator's compliance history.
6. Your Rights & Data Access

Operators listed on the registry have the following rights regarding their data:

Right to View
Log in to the Operator Portal to view all your certification records, audit history, and public profile data.
Right to Correct
Update your contact information directly in the portal. For corrections to certification or audit data, contact a Registry Admin.
Right to Export
Download your official Verification Letter as a PDF at any time from the Operator Portal.
Right to Remove
Submit a Removal Request from the portal. Requests are reviewed and actioned by a Registry Admin.

For any data access request that cannot be fulfilled through the portal, contact us using the details below.

7. Accessibility

The OpGal Africa Registry is committed to making the registry accessible to all users.

  • The public registry search and certificate verification tool require no account or login.
  • Pages are built with semantic HTML and Bootstrap 5, supporting screen readers and keyboard navigation.
  • All pages are served over HTTPS with no requirement to install additional software.
  • If you experience accessibility barriers, please contact us so we can assist.
Contact for Data Enquiries

For data access requests, corrections, or privacy concerns, contact the OpGal Africa Registry team:

  • Organisation: OpGal Africa
  • Email: [To be confirmed by OpGal Africa]
  • Response time: Within 5 business days for data requests.