This is a clear starting-point policy for the public website. Before the organisation begins collecting participant, beneficiary, volunteer or donor information at scale, the policy and contact details should be reviewed and approved by a qualified Ugandan privacy professional.
1. Scope
This Privacy Policy applies to the Upnedy Foundation Limited website and to personal information that people choose to share with us through our public channels. Upnedy Foundation Limited is a Uganda-based company limited by guarantee without share capital, working for community benefit.
It is intended to be read alongside our Terms of Use and Cookie Policy.
2. Information we may receive
We aim to collect only information that is relevant to a clear purpose. Depending on how you interact with us, this may include:
- identity and contact details that you voluntarily provide when you ask to start a conversation, partner, volunteer or collaborate;
- information needed to understand a programme enquiry, partnership proposal or community request;
- basic participation, learning or support information where you knowingly provide it for an agreed programme purpose; and
- technical information such as browser type, device information and general visit logs that may be generated by hosting and security systems.
Please do not send sensitive personal information through a public channel unless we have specifically asked for it and explained why it is needed.
3. How we use information
We may use information to respond to enquiries, assess and coordinate partnerships, plan and deliver community programmes, improve our communications, protect the website and meet legal or accountability obligations.
Our approach to lawful processing
Where the Uganda Data Protection and Privacy Act applies, we aim to process personal information fairly, transparently and only for a specified purpose. The appropriate basis may include consent, steps requested before an agreement, a legitimate organisational interest, a legal obligation or another basis recognised by applicable law.
Sharing information
We do not sell personal information. We may share limited information with trusted service providers, programme partners or professional advisers only where needed for an agreed purpose, with appropriate safeguards, or where the law requires it. We expect partners who handle personal information for us to respect confidentiality and applicable data-protection duties.
4. Retention and security
We keep personal information only for as long as it is reasonably needed for the purpose for which it was collected, for programme accountability, or to meet legal requirements. Retention periods may vary by record type and programme.
We use reasonable organisational and technical safeguards to reduce the risk of unauthorised access, loss, misuse or disclosure. No online system can be guaranteed completely secure, so please use care when sharing information online.
5. Your choices and rights
Subject to applicable law and reasonable verification, you may have rights to:
- ask what personal information we hold about you and how it is used;
- request correction of information that is inaccurate or incomplete;
- withdraw consent where processing is based on consent;
- ask us to delete, restrict or stop using information in appropriate circumstances; and
- raise a concern with the Personal Data Protection Office of Uganda.
Requests should identify the information concerned and the action you are asking us to take. We may need to verify your identity before responding.
6. Children and vulnerable people
Our work may support children or vulnerable people through properly designed programmes. The public website is not intended to invite children to submit personal information directly. Programme teams should use appropriate safeguarding, consent and referral procedures before collecting or publishing information about a child or vulnerable person.
7. Changes to this policy
We may update this policy when our programmes, technology or legal obligations change. The latest version will be posted on this page with a revised date. If a change materially affects how information is used, we will seek any notice or consent required by law.
For the current legal framework, see the Uganda Data Protection and Privacy Act and the Personal Data Protection Office.
8. Contact about privacy
To ask a privacy question or make a data request, use the Get in touch page and clearly mark your message “Data Protection and Privacy”. The Foundation should add a dedicated monitored privacy email or postal contact before this policy is treated as final.
Return to the home page