At Zoota Initiative for Development, we respect the right to privacy and are committed to protecting personal data in line with the Data Protection and Privacy Act, 2019 of Uganda. We recognise that personal data shared with us belongs to people and communities and we handle it with care, responsibility and respect.
This policy explains how we collect, use, store and protect personal data across our programmes, partnerships and operations. It applies to all Zoota staff, volunteers, contractors and partners who handle personal data on our behalf.
Lawful and fair data use
Zoota collects and processes personal data lawfully, fairly and transparently and only where it is necessary for legitimate purposes related to our work. These purposes include programme implementation, service delivery, safeguarding, monitoring and evaluation, reporting and learning.
We limit data collection to what is relevant and necessary and seek informed consent where required under Ugandan law.
Transparency and consent
We inform individuals about the following;
a) what data is being collected
b) why it is being collected
c) how it will be used
d) who it may be shared with
Information is provided in clear language and where possible, in ways that are appropriate to the local context.
Data security and protection
Zoota takes reasonable technical and organisational measures to protect personal data from unauthorised access, loss, misuse or disclosure. Access to personal data is limited to authorised persons only.
Where personal data is shared with partners, service providers or donors, we ensure that appropriate safeguards are in place and that data is handled in accordance with this policy and applicable law.
Data retention
Personal data is retained only for as long as necessary to fulfil the purpose for which it was collected unless a longer period is required by law or donor obligations. Data that is no longer needed is securely deleted or anonymised.
Individual rights under Ugandan law
In line with the Data Protection and Privacy Act, individuals whose data is processed by Zoota have the right to the following;
a) request confirmation that their data is being processed
b) access their personal data
c) request correction of inaccurate or incomplete data
d) object to or restrict the processing of their data in certain circumstances
e) lodge a complaint regarding misuse of their data
Requests can be submitted to zootainitiative@gmail.com. Zoota will respond within 30 days subject to legal and operational limitations.
Data Privacy Office
Zoota has a designated Data Privacy Office responsible for;
a) overseeing compliance with the Data Protection and Privacy Act
b) advising teams on privacy and data protection practices
c) handling data-related complaints and requests
d) reviewing and updating internal data protection procedures
Our commitment
Zoota is committed to respecting privacy as a matter of human dignity, trust and accountability. We continually review our data practices to ensure they remain lawful, ethical and appropriate for the communities we serve.
