Legal drawer · Privacy

Your data is correspondence.

File 008.02  ·  Republic of Uganda  ·  Revision 00.01

— Preamble

The full privacy policy is being drafted by outside counsel and will be published here on completion. Until then, the four principles below describe how we handle personal data today. They are binding on the desk, not aspirational. If the final policy contradicts anything on this page, we will publish both, a changelog, and the rationale.

— Four principles

What we do with your data.

  1. 01

    We collect as little as we can get away with.

    Name, email, company, and the message you write. Nothing about your browsing. Nothing about your device beyond what is needed to deliver the site.

  2. 02

    We do not sell, rent, or share data.

    Not to advertisers, not to brokers, not to analytics networks. Your message arrives at the desk you addressed it to. That is its entire lifecycle.

  3. 03

    We keep records for as long as the law requires.

    Correspondence with buyers is kept for the duration of the commercial relationship plus the statutory retention period. Then it is deleted.

  4. 04

    You can ask to see, correct, or delete your data.

    Write to the desk. We respond within one business day. If the request is clear and lawful, we act on it within the statutory window.

— The full list

Every field we record.

  • Your name, as you enter it on the contact form.
  • Your email address, so we can reply.
  • Your company or organisation, if you choose to provide it.
  • The content of your message.
  • The date and time the message was received.
  • Server logs retained for thirty days, then deleted.

— Verification desk

Questions, audits, or documentation requests.

If your compliance team needs to verify a registration, audit a claim, or request documentation that is not yet on this page, write directly to the desk. A reply lands in your inbox by this time tomorrow.