PRIVACY NOTICE

MCN Global Leadership Summit | Lagos, Nigeria | March 2027

Administered by Millennium Campus Network (MCN)

1. Introduction

Millennium Campus Network ("MCN," "we," "us," or "our") is organizing the MCN Global Leadership Summit (the "Summit"), a three-day convening in Lagos, Nigeria in collaboration with the Lagos State University. This Notice explains what personal data we collect through the Summit application and ticketing process, why we collect it, how long we keep it, where it is stored, and what rights you have as a participant.

Because the Summit draws participants from around the world, this Notice is designed to comply with the General Data Protection Regulation (GDPR) for individuals in the European Economic Area (EEA) and the United Kingdom, the California Consumer Privacy Act (CCPA/CPRA), and the Nigeria Data Protection Act (NDPA) 2023. It supplements the official MCN Privacy Policy, and where the two overlap, this Notice governs personal data collected for the Summit.

2. Who We Are (Data Controller)

The data controller responsible for your personal information is Millennium Campus Network (MCN). The Summit is open to individuals 18 years of age and older, and we do not knowingly collect personal data from anyone under 18.

Privacy Contact: privacy@mcnpartners.org /

Event Contact: events@mcnpartners.org

3. Personal Data We Collect

We collect personal data in two stages, and we do not ask for travel or identity documents until you have been accepted and are completing registration.

3.1 Stage One - Application

Identity and contact information: Full name, email address, phone number, and country of residence
Academic and professional background: University or organisation, role or title, year of study, and Millennium Fellowship affiliation where applicable
Demographic information: Age range, gender, and nationality, used for delegate composition and impact reporting
Application materials: Essays, written responses, statements of motivation, and any other content you submit, including optional social media handles

3.2 Stage Two - Registration and Ticketing

If your application is successful, we collect the following. Some of it is required by the Federal Government of Nigeria, the hosts - Lagos State University, or our travel partners, and is collected for those purposes only.

Passport and travel documents: Full name as it appears on your passport, passport number, nationality, country of issue, and dates of issue and expiry, plus a scanned copy of your biodata page where a visa invitation letter is required.
Travel details: Arrival and departure dates, flight details, port of entry, and accommodation preferences.
Emergency contact: Name, relationship, and contact number of a person we may contact in an emergency during the Summit
Dietary and accessibility requirements: Dietary requirements and any accessibility adjustments you ask us to make. You are not required to disclose the underlying reason, and we ask you not to. Where this reveals health or religious information, we process it only with your explicit consent and share it only with the caterer or venue staff who need it.
Ticketing and payment: Ticket type, registration status, transaction reference, billing name and country, and receipts. Card and payment credentials go directly to our payment processor and are never received or stored by MCN.
Badge and accreditation data: Name and photograph for delegate badges, accreditation, and on-site identity verification
3.3 Automatically Collected and On-Site Data

We collect website usage data through Google Analytics and similar tools, and record session check-ins and badge scans for capacity management and reporting. The Summit is photographed and filmed, and you may appear in footage captured in shared and public areas of the venue. You may ask our on-site team not to be individually photographed, and we will seek consent separately before featuring your name, image, or story.

4. Why We Collect It and Our Legal Bases

We use your personal data for the purposes below and no others.

Application review and selection: To receive, review, and evaluate Summit applications.
Registration and ticketing: To confirm your place, issue tickets, process payment, and manage delegate lists
Visa letters and travel: To issue the invitation and supporting letters required for Nigerian visa applications, to correspond with consulates and immigration authorities, and to arrange accommodation and transfers where MCN coordinates these. Visa letters are the sole reason we ask for passport details.
On-site delivery and safety: To produce badges, verify identity, manage capacity, organise accommodation, meet venue security requirements, cater, and make accessibility adjustments.
Emergency response: To reach your nominated contact if a medical or security incident occurs [vital interests]
Communication: To send logistical updates, pre-arrival information, and post-Summit follow-up.
Impact reporting: To report on Summit reach and outcomes to our Board, partners, and funders, using aggregated or anonymised data wherever possible.

You may withdraw consent at any time where consent is the legal basis, without affecting the lawfulness of processing before withdrawal.

5. How We Share Your Personal Data

Host institution and venue: Delegate names, organisations, and accreditation details, as required for site access and security clearance
Government and immigration authorities: Where you request a visa invitation letter, we use your passport details to prepare it and to correspond with the relevant authorities. We share only what the authority requires
Third-party service providers: Our application and registration platforms, ticketing provider, payment processor, communications and data management platforms, travel partners, and media partners. These act as processors on our behalf and are contractually obligated to handle your data securely and only as directed by MCN. A list of named providers is available on request
Partners, sponsors, and funders: Aggregated statistics and reporting only. We do not share contact details or application materials with sponsors for their own marketing, and we do not provide delegate lists for commercial use

We do not sell, rent, or trade your personal data for commercial purposes, including for California residents under the CCPA/CPRA. We may disclose your information if required by law, legal process, or governmental authority, or to protect the rights, safety, or property of MCN, our delegates, or the public.

6. Where Your Data Is Stored and International Transfers

MCN is headquartered in the United States, and all Summit application, registration, and ticketing data is stored on servers in the United States. Limited operational data is accessed in Nigeria by our on-site team, the venue, and the host institution during the Summit, and by our venue partner where relevant.

These countries may not have data protection laws equivalent to those in your home country. For transfers from the EEA or UK to countries without an adequacy decision, we rely on safeguards such as Standard Contractual Clauses approved by the European Commission, or work with providers certified under applicable frameworks. Contact us for details.

7. Data Retention

Passport details and travel documents: Deleted no later than ninety (90) days after the Summit closes, or within thirty (30) days of your written request once your visa process is complete, whichever is earlier. Scanned passport pages are deleted within 30 days of the issuance of your as the invitation letter.
Emergency contact, dietary, and accessibility data: Deleted within ninety (90) days after the Summit closes
Application and registration data: Retained for up to twelve (18) months after the Summit to support follow-up and reporting, then anonymised or deleted
Payment and transaction records: Retained for the period required by applicable financial and tax record-keeping law
Photographs, video, and footage: Retained for as long as we use the material, subject to your right to object. Aggregated and anonymised statistics are retained indefinitely

If you would like your data deleted sooner, contact us at privacy@mcnpartners.org

8. Data Security

We implement reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure, including access controls, secure transmission, and limiting access to authorised personnel. Passport details and scanned travel documents are held in access-restricted storage available only to the staff responsible for visa letters, and are not circulated by email beyond that team. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If you become aware of any breach, please contact us immediately.

9. Your Privacy Rights

Regardless of your location, you may contact us to access the data we hold about you, correct it, request its deletion subject to our legal obligations, ask that your image not be used in Summit material, or unsubscribe from Summit updates.

If you are in the EEA or UK, you also have the right to data portability, to restrict or object to processing, to withdraw consent, and to lodge a complaint with your local data protection authority (list at edpb.europa.eu). California residents have the right to know what personal information we have collected, to request its deletion or correction, and to be free from discriminatory treatment for exercising those rights; we respond to verifiable requests within 45 days as required by law.

To exercise any of your rights, contact us at privacy@mcnpartners.org. We may need to verify your identity first, and we will respond within 30 days or within the timeframe required by applicable law.

10. Changes and Contact

We may update this Notice to reflect changes in our practices, legal requirements, or Summit logistics. When we make material changes, we will update the "Effective Date" above and, where appropriate, notify applicants and delegates by email or a notice on our Site.

For any questions relating to this Notice, contact MCN at privacy@mcnpartners.org / events@mcnpartners.org

MCN’s MAILING ADDRESS: 42 Fairfield Street Newton, MA, 02460