Privacy Policy
Last updated: 23 July 2026. This document is an operational privacy notice for KAUMA Foundation Uganda. It will be reviewed with legal counsel as the organisation grows and does not replace formal legal advice.
1. Who we are
The data controller for this website and related contact channels is Kids of Africa Under Motherless Action Foundation (KAUMA), also operating as KAUMA Foundation Uganda Limited (limited by guarantee without share capital).
- Community Based Organisation (CBO) registered with Jinja District Local Government - Registration No. JDLG/04/2023/CBO/140
- Permit to Operate a CBO No. 1287 (Non-Governmental Organisations Act, 2016) - activities in health, education and nurturing children in Buyengo Town Council, Jinja District
- Uganda Registration Services Bureau Certificate of Incorporation - Registration No. 80034015105296 (27 February 2025)
Contact: kaumafoundationuganda1998@gmail.com · Uganda: +256774359647, +256704043388
Location: Nakagyo - Nakajjo Village, Iziru Ward, Buyengo Town Council, Jinja District, Uganda
Registration documents are published on our Governance and Transparency page.
2. Scope
This notice covers personal data processed through our public website, contact and involvement forms, email and phone enquiries, donation-related correspondence, donor accounts (if you create one), and content we publish about our programmes (including stories and photos where consent has been obtained).
3. Data we collect
- Contact and involvement forms: name, email address, phone number (optional), message content, and your consent to this privacy policy
- Technical data: IP address and server logs, session cookies needed to operate the site, and cached pages for performance
- Donations: if you give by bank transfer, your bank processes payment details; we may receive your name, reference and amount for thank-you and accounting purposes
- Programme stories and photos: images and personal stories of children or families only where appropriate consent has been recorded; we minimise identifying details where possible
- Staff / admin accounts: login credentials and role permissions for people authorised to manage the website
We do not intentionally collect children’s personal data through public website forms. Our public forms are intended for adults (parents, guardians, donors, partners and volunteers).
4. Purposes and legal bases
We process personal data to:
- respond to enquiries and partnership or volunteer requests
- administer donations and keep basic accounting records
- operate, secure and improve the website
- publish consented stories that explain our work
- comply with legal and regulatory duties in Uganda
Depending on the context, we rely on: your consent (for example form checkbox or media consent); legitimate interests (running a charity website and answering messages); contract or steps prior to contract (partnership discussions); and legal obligation (financial and organisational record-keeping). For visitors in the European Union / European Economic Area and Poland, we apply these purposes in a manner consistent with the GDPR. In Uganda we also respect the Data Protection and Privacy Act, 2019.
5. Children and images
Protecting children is central to our mission. We only publish photos or stories involving children when consent has been obtained from a parent or guardian (or other appropriate authority) and when publication does not put a child at risk. See also our Safeguarding Policy.
6. Sharing
We do not sell personal data. We share data only when necessary with trusted service providers (for example website hosting, email delivery) or with banks/payment channels you choose, or when required by law. Anyone processing data on our behalf must protect it appropriately.
7. International transfers
Our organisation and primary operations are in Uganda. If you contact us from Poland or elsewhere in the EU/EEA, your information will be transferred to and processed in Uganda. We take reasonable steps to keep transferred data secure and limited to what is needed.
8. Retention
- Contact messages: typically up to 24 months after the last meaningful reply, unless a longer period is needed for an ongoing matter
- Donation and accounting records: as required by applicable financial rules (often several years)
- Media consents and published stories: for as long as the content remains published, or until consent is withdrawn where applicable
- Technical logs: for a short period needed for security and troubleshooting
9. Security
We use access controls, password-protected admin accounts and role-based permissions for the CMS. No online transmission is perfectly secure; please avoid sending highly sensitive documents through the public contact form.
10. Your rights
Subject to applicable law, you may request access to your personal data, correction, deletion, restriction of processing, objection to certain processing, and withdrawal of consent where processing is based on consent. To exercise these rights, email kaumafoundationuganda1998@gmail.com.
You may also lodge a complaint with the Personal Data Protection Office in Uganda, or - if you are in the EU/EEA - with your local supervisory authority (in Poland: Urząd Ochrony Danych Osobowych).
11. Cookies
We use cookies and similar technologies that are necessary for the site to function (for example session and security). For more detail see our Cookies Policy.
12. Changes
We may update this notice from time to time. The “Last updated” date at the top will change when we do. Continued use of the website after changes means you have read the revised notice.
Questions: Contact us.
