Privacy Policy

Effective Date: 2026

CrowdFund Uganda ("we", "our", "us") is committed to protecting your personal information in accordance with the Uganda Data Protection and Privacy Act, 2019 (PDPA) and the Uganda Data Protection and Privacy Regulations, 2021. By using our platform you consent to the practices described in this policy.

1. Information We Collect

Account data: Full name, email address, phone number, National ID / Passport number (for KYC verification).
Campaign data: Title, description, images, target amounts, and progress updates.
Transaction data: Contribution amounts, mobile money references (MTN MoMo / Airtel Money).
Usage data: IP address, browser type, pages visited, and timestamps.

2. How We Use Your Information

To verify your identity and comply with Know-Your-Customer (KYC) requirements.
To process contributions and disburse funds to campaign creators.
To send transaction confirmations and platform notifications via email and SMS.
To improve the platform and prevent fraud.

3. Legal Basis for Processing

We process your data on the basis of your consent, fulfilment of a contract (your account agreement), and our legitimate interests in operating a safe and compliant platform under Ugandan law.

4. Sharing of Information

We do not sell your personal data. We may share information with:

Mobile money operators (MTN Uganda, Airtel Uganda) for payment processing.
Africa's Talking or similar providers for SMS delivery.
Ugandan regulatory authorities (e.g., UCC, Bank of Uganda, NITA-U) when legally required.

5. Data Retention

We retain account data for as long as your account is active and for a minimum of five (5) years after closure as required by Ugandan financial regulations. Transaction records are kept for seven (7) years in line with the Evidence Act Cap 6.

6. Your Rights

Under the PDPA you have the right to access, correct, or delete your personal data. Submit requests to info@example.com. We will respond within 21 days as required by law.

7. Cookies

We use session cookies necessary for authentication. We do not use third-party tracking cookies without your consent.

8. Security

We implement industry-standard encryption (HTTPS/TLS), hashed passwords, and access controls. No system is 100% secure; please notify us immediately at info@example.com if you suspect a breach.

9. Changes to This Policy

We may update this policy from time to time. The revised version will be posted on this page with an updated effective date. Continued use of the platform constitutes acceptance.

10. Contact

For privacy enquiries contact us at info@example.com.