Privacy Policy

Last updated: October 2026

Kanzu Code Foundation ("we", "us", "our") is an independent Ugandan nonprofit organisation. We are committed to protecting the personal information you share with us and being transparent about how we use it.

This policy explains what information we collect when you use our website at kanzucodefoundation.org, why we collect it, and what your rights are.

1. Who is responsible for your data?

Kanzu Code Foundation is the data controller for personal information collected through this website.

Address: Grace Courts, Salimbey Road, Ntinda, Kampala, Uganda
Email: hi@kanzucodefoundation.org

2. What information we collect and why

We only collect information you actively provide to us through one of our two website forms. We do not collect any information passively — no analytics, no tracking pixels, no advertising tools.

Contact form

When you use our Contact Us form, we collect your name, email address, a subject line, and your message. We use this solely to read and respond to your enquiry.

Project enquiry form

When you use our Start a Project form, we collect your name, organisation name, and email address (required), and optionally your phone number, project type, project description, existing website, budget range, preferred timeline, and preferred contact method.

We use this information to review your enquiry, assess whether it is a good fit, and get in touch to discuss next steps.

3. Our legal basis for processing your information

We process your information under the Uganda Data Protection and Privacy Act 2019 (DPPA). For visitors from the European Union or United Kingdom, we also comply with the General Data Protection Regulation (GDPR).

Our legal basis is legitimate interests — specifically, our legitimate interest in receiving and responding to communications from people who have chosen to contact us. For project enquiries, processing is also necessary to take pre-contractual steps at your request.

We have assessed that this processing does not override your rights, because you initiate contact voluntarily, we only collect what is necessary to respond, we do not use your information for unrelated purposes, and we do not share it with third parties for marketing.

4. How we store your information

Form submissions are stored in a secured database on our website server. A notification email is sent to our team so we can respond promptly. We do not transfer your personal data to any third party for their own use. The only external handling is through our hosting provider and email infrastructure, which process data on our behalf under appropriate data protection obligations.

We do not sell, rent, or share your personal information with any third party for marketing, advertising, or any other commercial purpose.

5. How long we keep your information

We retain form submissions for as long as is reasonably necessary to fulfil the purpose for which they were submitted — typically until the enquiry or conversation has concluded. We periodically review stored submissions and delete those no longer needed. If you would like your information deleted sooner, please contact us and we will action your request promptly.

6. Cookies

Our website uses only technically necessary session cookies — standard cookies that WordPress sets to enable the site to function. These do not track you, do not identify you personally, and are deleted when you close your browser. We do not use analytics cookies, advertising cookies, or any other tracking technology.

7. Your rights

Under the Uganda Data Protection and Privacy Act 2019 and, where applicable, the GDPR, you have the right to:

• Access — request a copy of the personal information we hold about you
• Correction — ask us to correct inaccurate or incomplete information
• Deletion — ask us to delete your personal information where there is no compelling reason to continue holding it
• Objection — object to our processing where we rely on legitimate interests
• Restriction — ask us to restrict how we use your information while a request is resolved

We will respond to any request within 30 days at no charge. If you are in the EU or UK and are not satisfied with our response, you may lodge a complaint with your local data protection authority. In Uganda, the supervising authority is the Personal Data Protection Office under NITA-U.

8. Contact us

If you have any questions about this policy, want to exercise any of your rights, or want to raise a concern about how we have handled your personal information, please contact us:

Kanzu Code Foundation
Grace Courts, Salimbey Road, Ntinda
Kampala, Uganda
hi@kanzucodefoundation.org

9. Changes to this policy

We may update this policy from time to time. When we make material changes we will update the "Last updated" date at the top of this page.