Jambo African Innovation Hub ("we", "us", or "our") is a youth-led organization based in Uganda, focused on sustainable innovations in agriculture and technology. We are committed to protecting your privacy and handling your personal information with transparency and care.

This Privacy Policy outlines how we collect, use, disclose, and protect your personal information when you visit our website www.jambohub.org (the "Site") and use our services.

1. Information We Collect

We collect information that you provide directly and data collected automatically through your interaction with the Site.

A. Information You Provide

• Contact information (name, email address, phone number, company name)
• Professional information (credentials, areas of expertise)
• Project ideas, innovation submissions, feedback, or inquiries
• Payment information when applicable (processed securely through third-party processors)
• Any other information you voluntarily provide through forms or correspondence

B. Information Collected Automatically

• Technical data (IP address, browser type, device information, operating system)
• Usage data (pages visited, time spent, navigation paths)
• Cookies and similar tracking technologies (see Section 6 for details)

2. How We Use Your Information

We use your personal data for the following purposes:

• To respond to your inquiries and provide requested support
• To evaluate and collaborate on innovation proposals and projects
• To improve our website content, services, and user experience
• To process payments and manage financial transactions
• To send important notices and administrative information
• To comply with legal obligations and protect our legal rights
• For internal research and analysis to enhance our programs

3. Sharing of Information

We do not sell or rent your personal data to third parties. We may share information in the following circumstances:

• With authorized team members who need the information to collaborate on projects
• With third-party service providers (e.g., cloud hosting, email platforms, payment processors) under strict confidentiality agreements
• For legal compliance when required by law or to respond to valid legal processes
• During organizational transitions such as mergers or acquisitions (with appropriate privacy protections)

We require all third parties to respect the security of your personal data and to treat it in accordance with the law.

4. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.

To determine the appropriate retention period, we consider:

• The amount, nature, and sensitivity of the personal data
• The potential risk of harm from unauthorized use or disclosure
• The purposes for which we process your data
• Applicable legal requirements

When no longer required, we will securely delete or anonymize your personal information.

5. Your Rights

Depending on your location and applicable law, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data under certain circumstances
• Restriction: Request restriction of processing your personal data
• Objection: Object to processing of your personal data
• Portability: Request transfer of your data to another organization
• Withdraw Consent: Withdraw consent at any time where we rely on consent to process your data
• Lodge a Complaint: File a complaint with a data protection authority

To exercise any of these rights, please contact us using the details in Section 9.

6. Cookies and Tracking Technologies

Our Site uses cookies and similar tracking technologies to:

• Ensure proper functionality of the website
• Remember your preferences
• Analyze how users interact with our Site
• Improve our services and user experience

You can manage cookies through your browser settings. However, disabling certain cookies may affect the functionality of our Site.

We use Google Analytics to help analyze how users use the Site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

• Encryption of sensitive data in transit and at rest
• Strict access controls and authentication procedures
• Secure hosting environments with regular security updates
• Regular staff training on data protection
• Incident response plans for potential breaches

While we strive to protect your personal data, no transmission over the Internet or electronic storage method is 100% secure. We cannot guarantee absolute security but we commit to promptly notify you and relevant authorities of any data breaches as required by law.

8. International Data Transfers

As an organization operating in Uganda with potential international collaborations, we may transfer, store, and process your information in countries other than your own. We will ensure appropriate safeguards are in place for these transfers as required by applicable laws.

9. Changes to This Policy

We may update this Privacy Policy periodically. When we make changes, we will:

• Post the updated policy on this page with a new "Effective Date"
• Notify users of significant changes through email or website notices when appropriate

We encourage you to review this Privacy Policy regularly to stay informed about our information practices.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact our Data Protection Officer at:

Jambo African Innovation Hub Ltd
Email: support@jambohub.org
Phone: +256-774314857
Address: 1 Jambo Close, Mukono, Uganda
Hours: Monday-Friday, 9:00 AM - 5:00 PM EAT

Data Protection Policy

1. Purpose

This policy ensures that Jambo African Innovation Hub Ltd protects personal data of clients, partners, and visitors in accordance with applicable data protection laws including Uganda's Data Protection and Privacy Act, 2019 and, where applicable, the EU General Data Protection Regulation (GDPR).

2. Scope

This policy applies to all employees, contractors, volunteers, and service providers handling personal data through our innovation platform and related services.

3. Principles

We commit to the following data protection principles:

• Lawfulness, fairness, and transparency: Process data lawfully, fairly, and in a transparent manner
• Purpose limitation: Collect data for specified, explicit, and legitimate purposes
• Data minimization: Only collect data that is adequate, relevant, and limited to what is necessary
• Accuracy: Keep personal data accurate and up to date
• Storage limitation: Retain data only as long as necessary
• Integrity and confidentiality: Process data securely using appropriate technical and organizational measures
• Accountability: Demonstrate compliance with all data protection principles

4. Roles and Responsibilities

• Data Controller: Jambo African Innovation Hub Ltd determines the purposes and means of processing personal data
• Data Protection Officer: Oversees compliance with data protection laws (contact details in Section 10)
• All Staff: Responsible for implementing this policy in their daily operations

5. Data Handling Procedures

• Collection: Only collect what is necessary for our innovation services with clear consent when required
• Storage: Secure, encrypted databases with role-based access controls
• Transfer: Encrypted transfers including SSL/TLS for web interactions
• Access: Strict role-based access for authorized personnel only
• Disposal: Secure deletion methods when data is no longer needed

6. Data Breach Protocol

In case of a suspected or confirmed data breach:

1. Contain the breach immediately to prevent further data loss
2. Assess the risk and nature of the breach
3. Notify affected individuals and relevant authorities within 72 hours if required by law
4. Document all details of the breach and corrective actions taken
5. Review and update security measures to prevent future breaches

7. Training & Awareness

All staff handling personal data receive:

• Initial data protection training during onboarding
• Annual refresher training on policies and procedures
• Updates whenever significant changes to data protection laws occur

8. Policy Review

This policy is reviewed:

• Annually as part of our compliance program
• Whenever significant changes to data protection laws occur
• Following any data breach or security incident