LEGAL & COMPLIANCE | DROHA UGANDA

Protecting Your Privacy and Safeguarding Community Data

Our commitment to legal transparency, data security, beneficiary protection, and compliance with the Uganda Data Protection and Privacy Act.

View Data Rights

Contact Data Protection Officer

PRIVACY COMMITMENT

Accountable Leadership and Protection of Vulnerable Communities

At Droha Uganda, we treat data privacy as a fundamental human right. Whether you are an international donor, institutional partner, job applicant, website visitor, or community beneficiary participating in our SWIPIC savings clubs, we collect and process personal data with strict confidentiality and legal integrity.

Our Privacy Policy complies with the Uganda Data Protection and Privacy Act (2019), international NGO data governance standards, and global privacy principles. We collect only necessary information, store data securely under encryption, obtain explicit consent prior to field photography or profile publishing, and never sell or monetize personal information.

DATA PRIVACY HIGHLIGHTS

Full Statutory Compliance

Aligned with Uganda Data Protection & Privacy Act (2019)

Zero Data Monetization

Personal details are never sold, rented, or commercialized

Beneficiary Protection

Mandatory informed consent for all field media & stories

CORE PRINCIPLES

Four Foundations of Our Data Policy

Informed Consent & Transparency

We collect personal data including field survey information and photos only with prior, documented, and explicit consent from beneficiaries and website users.

Purpose Limitation & Data Minimization

We gather only the specific data necessary to execute our programs, process donations, verify SWIPIC membership, or fulfill legal MEAL reporting.

Individual Data Rights

Users and community beneficiaries retain the absolute right to access, rectify, update, or request the deletion of their personal information at any time.

Whistleblower & Grievance Channels

Providing confidential, safe reporting channels for community members, staff, and partners to report misconduct or policy breaches.

POLICY BREAKDOWN

Specific Handling Protocols

Website Visitors & Cookies

We use basic security and analytical cookies to optimize website performance. No personal tracking data is shared with third-party advertisers.

Beneficiary & Field Media Safeguarding

Photographs and field interviews of community members (especially children and vulnerable adults) are published only after written consent is secured, prioritizing safety and dignity.

Donor & Financial Transaction Security

Donation records and banking details processed for SWIPIC sponsorships or institutional grants are encrypted and maintained solely for statutory financial auditing.

REQUEST WORKFLOW

How We Process Your Privacy Requests

STEP 1

Request Submitted

Data access, correction, or deletion requests are submitted online or via email.

STEP 2

Identity Check

Our Data Protection Lead verifies requester identity to protect user privacy.

STEP 3

14-Day Audit

Databases are audited, and requested adjustments or deletions are executed within 14 days.

STEP 4

Confirmation

An official written confirmation report is issued detailing all actions taken.

Have Questions About Your Data Privacy Rights?

Contact our dedicated Data Protection Desk at our Bugembe, Jinja headquarters for privacy inquiries or data removal requests.

Contact Governance Desk