Last Updated: October 2025

The Harvy Foundation is committed to empowering youth and respects the privacy of all individuals who interact with us. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information in accordance with Uganda’s Data Protection and Privacy Act, 2019.

By using our website or providing your information to us, you consent to the practices described in this policy.

1. Information We Collect

We collect information that identifies you as an individual. In compliance with the DPPA, this includes:

• Personal Data: Your name, email address, telephone number, and other contact details you provide when you contact us, sign up for our newsletter, or apply for our programs.

• Technical Data: Your IP address, browser type, and information about your visit to our website, collected via cookies and similar technologies.

• Sensitive Data: We do not routinely collect sensitive personal data. Should the need arise for specific programs, we will obtain your explicit prior consent as required by law.

2. How We Use Your Information

We use your personal data for the following purposes:

• To respond to your inquiries and provide you with requested information.

• To manage your application for our youth empowerment programs.

• To send you updates about our activities, which you can opt out of at any time.

• To improve our website and services.

• To comply with our legal obligations under Ugandan law.

3. Legal Basis for Processing

We process your personal data based on one or more of the following legal grounds:

• Your voluntary, specific, and informed consent.

• The necessity for the performance of a contract or to take steps at your request.

• The necessity for compliance with a legal obligation.

4. Sharing Your Information

We do not sell or rent your personal data. We may share your information only in the following circumstances:

• With your explicit consent.

• With our trusted partners and data processors who assist us in our work, under strict contractual terms that ensure they provide an adequate level of protection.

• If required by law or to protect our rights.

5. Cross-Border Data Transfers

In line with the DPPO’s guidance, we ensure that any transfer of your personal data outside of Uganda only occurs if the recipient country has data protection laws deemed adequate or with appropriate safeguards in place. We maintain records of the legal basis and security measures for all such transfers.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction.

7. Your Rights

Under the DPPA, you have the right to:

• Access the personal data we hold about you.

• Rectify inaccurate or incomplete data.

• Request the erasure of your personal data.

• Withdraw your consent at any time, where processing is based on consent.

• Object to certain types of processing.

To exercise these rights, please contact us using the details below.

8. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by Ugandan law.

9. Changes to This Policy

We may update this policy periodically. The updated version will be posted on our website with a revised “Last Updated” date.

10. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact our designated Data Protection Officer at:

Email: office@harvyfoundation.org