Privacy & Protection
Detailed disclosures regarding data collection, processing, and storage for Not Alone Ministries Uganda (NAMU) Outreach and E-Commerce operations.
Introduction & Legal Scope
Not Alone Ministries Uganda ("NAMU", "the Ministry", "we", "us", or "our") operates as a non-profit organization dedicated to community empowerment in Bugiri District, Uganda. We recognize that your privacy is a fundamental right. This Comprehensive Privacy Policy is designed to comply with the Data Protection and Privacy Act (2019) of Uganda, while also adhering to global best practices including the General Data Protection Regulation (GDPR) for our international supporters.
This document governs your access to and use of our web platform, including any content, functionality, and services offered on or through the site, whether as a guest or a registered user, and specifically covers our integrated E-Commerce retail store.
Information Architecture
A. Personal Identifiable Information (PII)
We collect information that identifies you as an individual, which may include:
- Full Name & Legal Alias
- Verified Email Addresses
- Mobile & Primary Phone Lines
- Billing & Shipping Addresses
B. Non-Identifiable Information
This includes technical metadata collected automatically through our systems:
- Browser Type & Device Model
- Geo-location Data (City/Country)
- Page View Duration & Click-stream
- Anonymized IP Addresses
E-Commerce & Financials
Our online store facilitates the sale of local Bugiri crafts and ministry resources. The processing of these transactions requires specific data handling protocols to ensure fiscal safety.
Payment Processing
We utilize Level 1 PCI-compliant payment processors. Your full credit card or mobile money PIN never touches our internal database. We only store transaction "tokens" and the last four digits for record verification.
Logistics Data
Shipping information is shared only with verified courier partners. This is strictly limited to the name, destination address, and a contact number for delivery coordination.
Refund Policy Data
Data related to returns or failed payments is kept for 7 years as required by Ugandan financial reporting laws to prevent money laundering and ensure organizational accountability.
Cookie & Tracking Disclosure
| Cookie Type | Purpose | Duration |
|---|---|---|
| Essential | Login sessions and shopping cart persistence. | End of session |
| Analytical | Measuring unique visitors and site performance. | 2 Years |
| Commerce | Fraud prevention and currency localization. | 30 Days |
| Security | Cross-Site Request Forgery (CSRF) protection. | 1 Hour |
Your Rights as a Data Subject
Right to Access
You have the right to request a digital copy of all personal data we hold about your person.
Right to Rectify
You may update or correct any inaccurate data through your profile settings or by contacting us.
Right to Erasure
The "Right to be Forgotten." You can request a total purge of your records from our systems.
Data Retention Protocols
We do not store data longer than necessary for the purpose it was collected.
E-Commerce Records
Maintained for 7 fiscal years to comply with Ugandan tax audits and accountability measures.
Communication History
General inquiries are purged after 2 years if no further interaction occurs.
Unsubscribed Emails
Retained on a suppression list for 3 years to ensure we respect your wish not to be contacted.
Security Infrastructure
Encryption at Rest
All database records containing PII are encrypted using AES-256 standard, the same grade used by financial institutions globally.
TLS/SSL Transmission
Data in transit is protected by Transport Layer Security (TLS) 1.3, ensuring that your data cannot be intercepted during site navigation.
Staff Access Control
Only NAMU directors and core IT staff with signed non-disclosure agreements can access identifying data, and only when necessary for ministry operations.
Penetration Testing
Our platform undergoes periodic security audits to identify and patch vulnerabilities before they can be exploited.
Third-Party Sub-Processors
We work with selected third-party service providers who assist us in fulfilling our mission. We ensure each partner has a robust Data Processing Agreement (DPA) in place.
Stripe / Flutterwave
Payment Gateway
Mailchimp
Email Automation
Google Analytics
Site Performance
DigitalOcean
Cloud Hosting
Children's Privacy
NAMU works extensively with children in Bugiri; however, our website is intended for adults and legal guardians. We do not knowingly collect PII from children under the age of 18 through our web portal without verified parental consent. If we discover that a child has provided us with personal information, we will delete this from our servers immediately.
Legal Mandates & Disclosure
We may disclose your personal information if required to do so by law or in the good faith belief that such action is necessary to:
- Comply with a legal obligation or lawful government request in Uganda.
- Protect and defend the rights or property of Not Alone Ministries Uganda.
- Act in urgent circumstances to protect the personal safety of users of the service or the public in Bugiri.
- Protect against legal liability or investigative proceedings.
© 2026 Not Alone Ministries Uganda • Bugiri District Office