PRIVACY POLICY
PRIVACY POLICY EFFECTIVE DATE: 18 AUGUST 2026
We take your privacy seriously. This Privacy Policy explains what personal information we collect, how we collect it, how we use it, who we may share it with, how long we keep it and the rights available to you.
We encourage you to read this Privacy Policy carefully.
1. IMPORTANT INFORMATION AND WHO WE ARE
In this Privacy Policy, references to we, us and our mean Montgomery Events East Africa Limited, the Montgomery Group company that processes your personal data and interacts with you in connection with Propak East Africa.
Montgomery Events East Africa Limited is part of the Montgomery Group.
The UK-based Montgomery Group companies include:
- Angus Montgomery Limited - Company Number: 00576440
- Montgomery Events Limited - Company Number: 03801163
- Montgomery Group Ltd - Company Number: 00529362
- Fit Events Ltd - Company Number: 07809752
- Exhibition Consultants Limited - Company Number: 00571453
- Montgomery Exhibitions Limited - Company Number: 01242502
- Creo Arts Group Ltd - Company Number: 05704470
- OTSA Limited - Company Number: 01090321
- Halldale Media Limited - Company Number: 02734812
- Montgomery International Limited - Company Number: 01632599
This website is operated in connection with Propak East Africa by Montgomery Events East Africa Limited. Technical data collected through this website is therefore primarily processed in connection with the operation of Propak East Africa within the Montgomery Group.
The Montgomery Group has its corporate headquarters at:
9 Manchester Square
London
W1U 3PL
United Kingdom
The Montgomery Group also has operational locations including Johannesburg, Nairobi, Nigeria and Singapore.
You can find out more about Montgomery Group, including a list of subsidiaries, joint ventures and associate companies, at www.montgomerygroup.com.
We have appointed a Data Protection Officer, referred to as the DPO, who is responsible for overseeing questions relating to this Privacy Policy.
If you have any questions about this Privacy Policy, including requests to exercise your legal rights, please contact the DPO at:
Email: [email protected]
2. THE TYPES OF PERSONAL DATA WE COLLECT ABOUT YOU
Personal data or personal information means any information about an individual from which that person can be identified.
We may collect, use, store and transfer different kinds of personal data about you, which we have grouped together as follows:
- Identity Data includes first name, last name, any previous names, username or similar identifier, marital status, title, date of birth, gender and information detailed on passports and/or driving licences.
- Contact Data includes billing address, delivery address, email address and telephone numbers.
- Employment Data includes your employment details, email address, role or position.
- Financial Data includes bank account and payment card details.
- Transaction Data includes details about payments to and from you and other details of products, services and events you have attended or purchased from us.
- Technical Data includes internet protocol address, also known as an IP address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, device ID and other technology on the devices you use to access this website.
- Usage Data includes information about how you interact with and use our website, products and services.
- Event Data includes details of events you attend, have attended in the past or are interested in, together with information about your business activity and interests in connection with those events.
- Marketing and Communications Data includes your preferences in receiving marketing from us and from third parties, together with your communication preferences.
- Image Data includes your image, photographs and video footage that includes you.
- Recruitment Data includes your CV or cover letter, named referees and employment references, results of any checks undertaken, information provided at interview, your race, ethnicity, health information and information relating to criminal convictions and offences.
Special Category Data and Criminal Convictions
We do not routinely collect special category data or information relating to criminal convictions.
However, depending on the services we provide to you, we may need to collect this information.
For example:
- If you attend one of our events, we may need to collect information about dietary or accessibility requirements.
- If you apply for a role with us, we may, where legally permitted and appropriate for the role, carry out criminal record checks.
We will only collect information about criminal convictions where it is appropriate given the nature of the role and where we are legally entitled to do so.
We may also collect, use and share aggregated data, such as statistical or demographic data.
Aggregated data is not personal data where it does not directly or indirectly reveal your identity.
For example, we may aggregate Usage Data to calculate the percentage of users accessing a particular website feature in order to analyse general trends, understand how users interact with our website and improve our services.
3. PERSONAL DATA OF OTHERS
If you provide personal data to us about another person, you must ensure that you are entitled to disclose that personal data to us.
Without taking additional steps to verify this, we may collect, use and disclose that personal data as described in this Privacy Policy.
It is your responsibility to make the individual concerned aware of this Privacy Policy.
4. HOW IS YOUR PERSONAL DATA COLLECTED?
We use different methods to collect personal data from and about you.
Your Interactions With Us
You may provide personal data to us by completing forms or corresponding with us by post, phone, email or otherwise.
This includes personal data you provide when you:
- Enquire about being an exhibitor or attending one of our events.
- Attend one of our events.
- Apply for our services.
- Subscribe to our publications.
- Request marketing to be sent to you.
- Apply for one of our vacancies.
- Enter a competition, promotion or survey.
- Give us feedback.
- Contact us.
Automated Technologies or Interactions
As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions and patterns.
We collect this personal data using cookies, server logs and similar technologies.
Please see our Cookie Policy for further details:
https://www.propakeastafrica.com/cookie-policy
Third Parties or Publicly Available Sources
We may receive personal data about you from third parties and publicly available sources.
This may include:
- Technical Data from analytics providers such as Google.
- Contact, Financial and Transaction Data from providers of technical, payment and delivery services.
- Identity and Contact Data from publicly available sources such as Companies House and the Electoral Register in the United Kingdom.
- Identity, Contact and Recruitment Data from recruiters and other third parties.
- Identity, Contact, Employment, Event, Transaction, Financial, Marketing and Communications Data from third-party event registration platforms.
5. HOW WE USE YOUR PERSONAL DATA
Legal Basis
The law requires us to have a legal basis for collecting and using your personal data.
We rely on one or more of the following legal bases.
Performance of a contract with you
We may use your personal data where we need to perform a contract that we are about to enter into or have entered into with you.
Legitimate interests
We may use your personal data where it is necessary to conduct our business and pursue our legitimate interests.
For example, we may process personal data to prevent fraud, improve our services and provide a secure customer experience.
We consider and balance any potential impact on you and your rights before processing personal data on the basis of legitimate interests.
We do not use your personal data for activities where our interests are overridden by the impact on you, unless we have your consent or are otherwise required or permitted to do so by law.
Legal obligation
We may use your personal data where it is necessary to comply with a legal obligation that applies to us.
Consent
We rely on consent where we have obtained your active agreement to use your personal data for a specified purpose.
For example, this may apply where you subscribe to an email newsletter or consent to specific data sharing.
Purposes for Which We Will Use Your Personal Data
We may use your personal data for the following purposes.
Registering You as a New or Returning Customer
We may use:
- Identity Data
- Contact Data
- Image Data
Legal basis: Performance of a contract with you.
Administering Our Events and Providing Products and Services
This may include:
- Managing payments, fees and charges.
- Collecting and recovering money owed to us.
- Granting you access to an event, exhibition or conference.
- Allowing you to participate in an event, exhibition or conference.
We may use:
- Identity Data
- Contact Data
- Financial Data
- Transaction Data
- Marketing and Communications Data
- Event Data
- Image Data
Legal basis: Performance of a contract with you and our legitimate interests, including recovering debts due to us.
Taking Images or Film at Our Events
We may use Image Data where photographs or video footage are taken at our events.
Legal basis: Our legitimate interests in creating content about our events.
Managing Our Relationship With You
This may include:
- Notifying you about changes to our products or services.
- Notifying you about changes to our terms or Privacy Policy.
- Dealing with your requests.
- Handling complaints.
- Responding to questions or queries.
We may use:
- Identity Data
- Contact Data
- Technical Data
- Usage Data
- Marketing and Communications Data
Legal basis: Performance of a contract, compliance with legal obligations and our legitimate interests in keeping our records updated and managing our relationship with you.
Using Tracking Technologies in Emails
We may use tracking technologies to understand whether emails are opened and what links are clicked.
We may use:
- Technical Data
- Usage Data
Legal basis: Our legitimate interests in improving our interactions and communications with you.
Sending Service Communications
We may contact you about changes to, or issues affecting, products, services or events.
We may use:
- Identity Data
- Contact Data
- Financial Data
- Transaction Data
- Marketing and Communications Data
Legal basis: Performance of a contract with you.
Confirming Your Identity and Authenticating Information
We may confirm your identity and authenticate information you provide for security purposes.
This may include checking registration information against information we already hold about you if you are a returning customer and, where appropriate, against publicly available information.
We may use:
- Identity Data
- Contact Data
- Technical Data
- Image Data
Legal basis: Our legitimate interests in running our business, providing administration and IT services, maintaining network security and preventing fraud.
Recruitment and Employment Checks
We may verify employment history, qualifications and suitability for a role that you have applied for.
We may use:
- Identity Data
- Contact Data
- Recruitment Data
Legal basis: Our legitimate interests.
We may also process Identity and Recruitment Data where necessary to comply with legal obligations and carry out required checks.
Providing Customer Support
We may use personal data to provide and improve customer support, including when you have questions or need assistance with login information.
We may use:
- Identity Data
- Contact Data
- Technical Data
Legal basis: Performance of a contract and our legitimate interests in understanding how customers use our products and services, developing those services, growing our business and informing our marketing strategy.
Improving Our Team's Knowledge and Customer Service
We may use personal data to help ensure our team has the knowledge and expertise necessary to provide a high standard of customer service.
We may use:
- Identity Data
- Contact Data
- Technical Data
Legal basis: Our legitimate interests in improving customer service.
Administering and Protecting Our Business and Website
This includes:
- Troubleshooting.
- Data analysis.
- Testing.
- System maintenance.
- Support.
- Reporting.
- Hosting data.
- Network security.
- Fraud prevention.
We may use:
- Identity Data
- Contact Data
- Technical Data
Legal basis: Our legitimate interests in running our business, providing administration and IT services, maintaining network security and preventing fraud, as well as compliance with legal obligations.
Providing Relevant Website Content and Online Advertising
We may use personal data to deliver relevant website content and online advertisements and to measure or understand the effectiveness of advertising.
We may use:
- Identity Data
- Contact Data
- Usage Data
Marketing and Communications Data
Technical Data
Legal basis: Our legitimate interests in understanding how customers use our products and services, developing our services, growing our business and informing our marketing strategy.
Enabling Access to Apps
Where we make event or service-related apps available, we may use personal data to enable you to access and use those apps.
We may use:
- Identity Data
- Contact Data
- Usage Data
Marketing and Communications Data
Technical Data
Legal basis: Performance of a contract with you.
Data Analytics
We may use data analytics to:
- Report on our services.
- Improve our website.
- Improve our products and services.
- Improve customer relationships and experiences.
- Measure the effectiveness of our communications and marketing.
We may use:
- Technical Data
- Usage Data
Legal basis: Our legitimate interests in defining types of customers for our products and services, keeping our website updated and relevant, developing our business and informing our marketing strategy.
Marketing and Personalised Recommendations
We may use personal data to send relevant marketing communications and make personalised suggestions and recommendations about goods, services or events that may be of interest to you.
We may use:
- Identity Data
- Contact Data
- Technical Data
- Usage Data
- Marketing and Communications Data
Legal basis: Our legitimate interests in carrying out direct marketing, developing our products and services and growing our business, or your consent where prior consent is required.
Market Research
We may use personal data in connection with your voluntary participation in market research or surveys.
We may use:
- Identity Data
- Contact Data
- Marketing and Communications Data
Legal basis: Our legitimate interests in understanding how customers use our products and services and improving and developing those products and services.
Prize Draws, Competitions and Promotional Activities
We may use personal data to enable you to participate in a prize draw, membership offer, competition or other promotional activity.
We may use:
- Identity Data
- Contact Data
- Usage Data
- Marketing and Communications Data
Legal basis: Performance of a contract with you and our legitimate interests in understanding how customers use our products and services, developing them and growing our business.
Sharing Registration Data With Third-Party Event Technology Providers
Where you have provided your prior consent, we may share registration information with third-party event technology providers.
This may be used to:
- Pre-populate your event profile.
- Support attendee and exhibitor matching.
- Help connect you with exhibitors, products or services relevant to your interests.
- Enhance your event experience.
We may use or share:
- Identity Data
- Contact Data
- Employment Data
- Financial Data
- Event Data
- Marketing and Communications Data
- Transaction Data
Legal basis: Consent.
We will only share personal data with these platforms for these purposes where you have provided the required prior consent.
Direct Marketing
You may receive marketing communications from us if you have requested information from us or purchased goods or services from us and have not opted out of receiving marketing.
We may analyse your Identity, Contact, Technical and Usage Data to form a view of which products, services, events and offers may be of interest to you so that we can send you relevant marketing communications.
Where you consent to the sharing of Contact, Employment, Identity, Transaction and Event Data with third-party event technology platforms, such as NuBreed where applicable, your data may be used to match you with relevant exhibitors and improve your event experience.
You can withdraw your consent to this type of data sharing at any time by contacting the relevant third-party platform provider.
Third-Party Marketing
Generally, we will obtain your express consent before sharing your personal data with any third party for that third party's own direct marketing purposes.
When attending an event, you may have the option to scan your badge at an exhibitor's stand.
If you choose to scan your badge, the exhibitor may directly receive personal information associated with your registration, which may include:
- Your name.
- Your job title.
- Your company name.
- Your email address.
- Your postal or business address.
- Your telephone number.
The exhibitor may then contact you following the event.
If you do not want an exhibitor to receive your personal data or contact you following the event, do not scan your badge at that exhibitor's stand.
Scanning your badge is treated as an opt-in to hear from that exhibitor.
We do not manage the exhibitor's subsequent use of that consent.
Opting Out of Marketing
You can ask us to stop sending you marketing communications at any time by:
Following the opt-out or unsubscribe links contained in marketing communications sent to you.
Contacting us at [email protected].
If you opt out of receiving marketing communications, you may still receive service-related communications that are necessary for administrative, operational or customer service purposes.
Cookies
The cookies we use are described in detail in our Cookie Policy.
Each website operated by us maintains its own Cookie Policy. The cookies used, their purposes and the choices available to you may therefore differ between websites.
For details of the cookies used on the Propak East Africa website and information about managing your cookie preferences, please visit:
https://www.propakeastafrica.com/cookie-policy
6. DISCLOSURES OF YOUR PERSONAL DATA
We may share your personal data where necessary with the following parties for the purposes described in this Privacy Policy.
Montgomery Group Entities
The Montgomery Group shares IT infrastructure, administration and support services.
We may therefore share your personal data with other entities within the Montgomery Group in connection with administration, support services or the products, services and events we provide.
Event Organisers, Event Suppliers, Event Security Providers and Venues
Where you attend one of our events, we may share information with relevant parties for operational, security or compliance purposes.
Catering, Hospitality, Travel and Accommodation Suppliers
We may share relevant information with these suppliers where necessary to provide services to you.
Sponsors, Event Organisers, Exhibitors, Speakers and Partners
We may share personal data where you attend an event and have consented to such sharing, or where you have shown an interest in attending or participating in an event.
Service Providers and Suppliers
We may share data with service providers and suppliers including:
- IT providers.
- Software providers.
- Hosting providers.
- Event registration service providers.
- Social sharing service providers.
- Consultants.
- Professional advisers.
- Event service providers such as ASP and LiveBuzz, where applicable.
These parties process information in connection with services they provide to us.
Third-Party Marketing Services
We may use third-party marketing service providers in connection with our marketing activities, including services such as:
- HubSpot.
- Adestra.
- Mailchimp.
Third-Party Payment Providers
We may share relevant information with payment providers in connection with processing payments.
Third-Party Event Technology Platforms
We may share data with third-party event technology platforms where you register for or attend one of our events and where the relevant legal basis, including consent where required, applies.
Recruitment Agencies
We may share or receive information from recruitment agencies in connection with job applications.
Business Transfers
We may share personal data with third parties to whom we choose to sell, transfer or merge parts of our business or assets.
We may also seek to acquire other businesses or merge with them.
If a change occurs to our business, new owners may use your personal data in the same way as set out in this Privacy Policy.
Requirements Applying to Third Parties
We require third parties that process personal data on our behalf to respect the security of your personal data and treat it in accordance with applicable law.
We do not allow third-party service providers acting on our behalf to use your personal data for their own purposes.
We only permit them to process personal data for specified purposes and in accordance with our instructions.
7. INTERNATIONAL TRANSFERS
We share personal data within the Montgomery Group.
This may involve transferring your personal data outside Kenya, including to the United Kingdom and European Union.
We may also transfer your personal data to service providers that perform certain functions on our behalf.
This may involve transferring personal data to countries that have laws that do not provide the same level of data protection as Kenya.
Whenever we transfer personal data to such locations, we take steps to ensure that a similar degree of protection is provided.
Depending on the circumstances, safeguards may include:
- Transferring personal data to countries that have been recognised as providing an adequate level of protection for personal data.
- Using appropriate contractual protections or standard contractual terms designed to provide transferred personal data with an appropriate level of protection.
8. DATA SECURITY
We have put appropriate security measures in place to help prevent your personal data from being accidentally lost, used, accessed in an unauthorised way, altered or disclosed.
We limit access to your personal data to employees, agents, contractors and other third parties that have a business need to know.
They will only process your personal data on our instructions and are subject to obligations of confidentiality where appropriate.
We have physical, electronic and procedural safeguards designed to protect your personal data.
We also have procedures to deal with suspected personal data breaches and will notify you and any applicable regulator of a breach where we are legally required to do so.
9. DATA RETENTION
How Long Will You Use My Personal Data For?
We will only retain personal data for as long as reasonably necessary to fulfil the purposes for which it was collected.
This includes satisfying any legal, regulatory, tax, accounting or reporting requirements.
We may retain personal data for longer where:
- A complaint has been made.
- We reasonably believe there is a prospect of litigation relating to our relationship with you.
- We are required to do so by applicable law.
We may keep some of your personal information for as long as necessary to provide and market products, services and events that you have signed up to or which may be of interest to you, subject to your marketing preferences and applicable law.
Our need to use personal information is reassessed regularly.
Information that is no longer required for any purpose will be securely disposed of or anonymised where appropriate.
When determining an appropriate retention period, we consider:
- The amount of personal data involved.
- The nature of the personal data.
- The sensitivity of the personal data.
- The potential risk of harm from unauthorised use or disclosure.
- The purposes for which we process the personal data.
- Whether those purposes can be achieved through other means.
- Applicable legal, regulatory, tax, accounting and reporting requirements.
In certain circumstances, you may ask us to delete your personal data. See Section 10 below.
In some circumstances, we may anonymise personal data so that it can no longer be associated with you.
We may use anonymised information indefinitely for research or statistical purposes without further notice to you.
10. YOUR LEGAL RIGHTS
You have a number of rights under applicable data protection laws in relation to your personal data.
Depending on the circumstances and applicable law, you may have the right to:
Request Access to Your Personal Data
You may request a copy of the personal data we hold about you and check that we are processing it lawfully.
Request Correction of Your Personal Data
You may ask us to correct incomplete or inaccurate personal data that we hold about you.
We may need to verify the accuracy of any new information you provide.
Request Erasure of Your Personal Data
You may ask us to delete or remove personal data in certain circumstances, including where:
- There is no good reason for us to continue processing it.
- You have successfully objected to processing.
- We may have processed your information unlawfully.
- We are required to erase personal data to comply with applicable law.
- We may not always be able to comply with an erasure request for specific legal reasons.
Where applicable, we will explain those reasons when responding to your request.
Object to Processing
You may object to the processing of your personal data where we rely on legitimate interests, including profiling based on legitimate interests.
In some cases, we may demonstrate that we have compelling legitimate grounds to continue processing your information that override your rights and interests.
Object to Direct Marketing
You have the right to object at any time to the processing of your personal data for direct marketing purposes.
You can do this by using the unsubscribe or opt-out options in our marketing communications or by contacting us at:
Request Restriction of Processing
You may ask us to suspend the processing of your personal data in certain circumstances, including where:
- You want us to establish the accuracy of the data.
- Our use of the data is unlawful but you do not want us to erase it.
- You need us to hold data that we no longer require because you need it to establish, exercise or defend legal claims.
- You have objected to our use of your data and we need to verify whether we have overriding legitimate grounds to continue using it.
Request Transfer of Your Personal Data
You may ask us to provide personal data to you or to a third party you have chosen in a structured, commonly used and machine-readable format.
This right generally applies to automated information that you initially provided to us where we rely on your consent or where we used the information to perform a contract with you.
Withdraw Consent
You may withdraw your consent at any time where we rely on consent to process your personal data.
Withdrawal of consent will not affect the lawfulness of processing carried out before your consent was withdrawn.
If you withdraw consent, we may not be able to provide certain products or services to you.
Where this applies, we will advise you at the time you withdraw your consent.
Exercising Your Rights
If you wish to exercise any of the rights described above, please contact:
No Fee Usually Required
You will not usually have to pay a fee to access your personal data or exercise your other rights.
However, where permitted by applicable law, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive.
Alternatively, we may be entitled to refuse to comply with a request in these circumstances.
What We May Need From You
We may request specific information from you to help us:
- Confirm your identity.
- Verify your right to access personal data.
- Verify your right to exercise another data protection right.
This is a security measure designed to ensure that personal data is not disclosed to someone who has no right to receive it.
We may also contact you to request further information in relation to your request where this may help us respond more efficiently.
Time Limit to Respond
We aim to respond to legitimate requests within one month.
It may take longer where a request is particularly complex or where you have made a number of requests.
If this happens, we will notify you and keep you updated.
11. CONTACT DETAILS
If you have any questions about this Privacy Policy, the use of your personal data or your privacy rights, please contact our DPO.
Email: [email protected]
Postal Address:
9 Manchester Square
London
W1U 3PL
United Kingdom
12. CHILDREN
This website is not intended for children and we do not knowingly collect personal data relating to children.
However, in very limited circumstances, we may be required to collect the names and dates of birth of dependants.
13. COMPLAINTS
You have the right to make a complaint to the relevant data protection supervisory authority.
As Propak East Africa is organised and operated in Kenya by Montgomery Events East Africa Limited, the primary supervisory authority is the Office of the Data Protection Commissioner of Kenya, ODPC.
Further information is available at:
https://www.odpc.go.ke
If you are based in the United Kingdom, you may also refer your complaint to the Information Commissioner's Office, ICO.
Further information is available at:
https://ico.org.uk
However, before contacting either supervisory authority, please contact us first if you have a concern about how we have handled your personal data.
Please contact us at:
The ODPC or ICO may expect you to have first raised your concern with us before reviewing your complaint.
14. CHANGES TO THIS PRIVACY POLICY AND YOUR DUTY TO INFORM US OF CHANGES
We keep this Privacy Policy under regular review.
This version was last updated on 18 August 2026.
It is important that the personal data we hold about you is accurate and current.
Please keep us informed if your personal data changes.
