Legal
Privacy notice
What we collect, why we collect it, how long we keep it, and what you can ask us to do about it. Written to be read rather than to be technically compliant and unreadable.
Last reviewed . We review these pages annually, and whenever something material changes.
1.Who we are
River Rwizi Charity Conservation is a non-profit organisation registered in Uganda, with its office at Biharwe, Mbarara City. In this notice, "we" and "us" mean that organisation.
We are the data controller for information collected through riverrwizicharityconservation.org. If you want to reach us about anything on this page, write to info@riverrwizicharityconservation.org or call +256 781 013 376.
2.What we collect, and why
We collect only what a specific task needs. There is no advertising tracking on this site, no third-party analytics that profiles you across other websites, and no data sold to anybody for any reason.
| When you… | We store | Because |
|---|---|---|
| Send us a message | Name, email, phone if given, organisation if given, your message, which page you sent it from | So we can reply, and so we know what people are asking about |
| Subscribe to the newsletter | Email, name if given, confirmation status | To send the newsletter, and to prove you asked for it |
| Make a donation | Name, email, phone, country, amount, currency, reference, designation | To process the gift, issue a receipt, and meet accounting obligations |
| Apply to volunteer | Name, contact details, district, availability, skills, motivation | To place you on suitable activities and stay in touch about them |
| Join as a member | Name, contact details, membership tier, payment history | To administer your membership and renewals |
| Simply read the site | Nothing that identifies you | Pages are served without setting tracking cookies |
3.Payment information
We never see or store your card number, PIN, or mobile money credentials. Payments are handled entirely by the payment provider you choose, and they hold that data under their own terms.
What we keep is the outcome: the amount, the currency, the reference, and whether it succeeded. That is what a receipt and an audit require.
5.How long we keep things
- Enquiries: three years from your last contact, then deleted.
- Newsletter subscriptions: until you unsubscribe, plus a record of the unsubscribe so we do not email you again by mistake.
- Donation records: seven years, because Ugandan accounting and audit rules require it.
- Volunteer applications: two years if not taken forward, or for the duration of your involvement plus two years.
- Server logs: 30 days.
6.Who else sees your information
Our staff and trustees, only where their role requires it. Beyond that, we share data with a small number of service providers who process it on our behalf and only on our instructions:
- The payment provider you select, to take the payment.
- Our email delivery provider, to send receipts, confirmations and the newsletter.
- Our hosting provider, which stores the database.
- Our auditor, for the financial records they are required to inspect.
7.Your rights
Under Uganda's Data Protection and Privacy Act, 2019, you may ask us to show you the personal data we hold about you, correct it if it is wrong, delete it where we have no continuing obligation to keep it, or stop using it for a particular purpose.
Ask by email and we will respond within 30 days. We will not charge you for it, and we will not make it difficult.
8.Keeping it safe
The site is served over HTTPS. Administrator accounts require a password and support two-factor authentication. Passwords are stored hashed, never in readable form. Access to the database is limited to the people who need it.
No system is perfect. If we ever discover a breach affecting your data, we will tell you and the relevant authority rather than hoping it goes unnoticed.
9.Children
Our school programmes involve children, but this website is not aimed at them and we do not knowingly collect data from anyone under 18 through it. Volunteer applications require applicants to be 14 or over, and under-18s need a parent or guardian's consent, which we ask for separately and offline.
Questions about this page
If anything here is unclear, or you want to see, correct or delete the data we hold about you, write to us. We will respond within 30 days and we will not charge you for it.
Contact us