Data Protection Statement
Compliance with Uganda Data Protection and Privacy Act, 2019
Our Commitment to Data Protection
At AfrikCap, we are committed to protecting your personal data in full compliance with the Uganda Data Protection and Privacy Act, 2019 and the Data Protection and Privacy Regulations, 2021.
1Legal Framework
AfrikCap operates as a Data Controller under the following legal framework:
- Data Protection and Privacy Act, 2019 (Uganda)
- Data Protection and Privacy Regulations, 2021
- NITA-U Data Controller Requirements and Guidelines
- Bank of Uganda Regulations (for financial data handling)
2Data Protection Principles
We adhere to the following data protection principles as required by Ugandan law:
Lawfulness, Fairness, and Transparency
We process data lawfully, fairly, and in a transparent manner, clearly informing you about how your data is used.
Purpose Limitation
Data is collected for specific, explicit, and legitimate purposes and not processed in ways incompatible with those purposes.
Data Minimization
We collect only the data that is necessary to connect you with licensed financial institutions.
Accuracy
We take reasonable steps to ensure personal data is accurate and kept up to date.
Storage Limitation
Data is retained only for as long as necessary for the purposes for which it was collected.
Integrity and Confidentiality
We implement appropriate security measures to protect against unauthorized access, loss, or damage.
3Security Measures
We protect your personal data through comprehensive security measures:
Data Encrypted in Transit
All communications secured via HTTPS/TLS encryption
Secure Data Storage
Data stored in encrypted databases with strong access controls
Restricted Access
Only authorized personnel can access personal data
Compliance with Uganda Laws
Full compliance with Data Protection and Privacy Act, 2019
4Your Data Subject Rights
Under the Uganda Data Protection and Privacy Act, 2019, you have the right to:
- Be informed about how your data is collected and processed
- Access your personal data that we hold
- Rectify inaccurate or incomplete data
- Erase your data (in certain circumstances)
- Object to processing of your data
- Data portability - receive your data in a structured format
- Withdraw consent for data processing
- Lodge a complaint with NITA-U
5Data Subject Request Contact
For data access, correction, deletion, or any other data subject requests, please contact:
Data Protection Contact
We will respond to your request within 30 days as required by law.
6Complaints
If you believe your data protection rights have been violated, you may lodge a complaint with:
National Information Technology Authority - Uganda (NITA-U)
NITA-U is the designated supervisory authority for data protection in Uganda under the Data Protection and Privacy Act, 2019.
Website: www.nita.go.ug
This Data Protection Statement was last updated in March 2026.