[Template – review before launch] This text is a starting point written for a Ugandan Rotary club. Have the club board (and, if possible, a lawyer) confirm it matches what the club actually does with personal data.
Last updated: 6 November 2026
The Rotary Club of Bweyogerere Central (“the Club”, “we”, “us”) respects your privacy. This policy explains what personal data we collect through this website and in our club activities, why we collect it, and your rights under the Data Protection and Privacy Act, 2019 of Uganda and its Regulations of 2021.
Who we are
We are a Rotary club chartered under Rotary International, District 9213. For the purposes of the Act, the Club is the data controller for personal data collected through this website. You can contact us at:
Rotary Club of Bweyogerere Central
Bweyogerere, Wakiso District, Uganda
Email: rcbweyogererecentral@gmail.com
Phone: +256 700 000 000
What personal data we collect
- Contact and enquiry details – your name, email address, phone number and message when you contact us, ask to join, or volunteer.
- Membership information – for members and prospective members: name, contact details, profession/classification, photo and Rotary ID.
- Donation information – your name, contact details, amount and payment reference (for example a mobile money or bank transaction ID). We do not store card numbers on this website.
- Comments – the name, email address and website you enter, your comment, and your IP address and browser details (used to detect spam).
- Event participation – registrations, and photos or videos taken at public club events.
- Technical data – IP address, browser type, pages visited and cookies, as described in our Cookie Policy.
Why we use your data and our legal basis
| Purpose | Legal basis |
|---|---|
| Replying to enquiries and membership requests | Your consent / steps you ask us to take |
| Managing membership, meetings and dues | Our agreement with you as a member |
| Processing and acknowledging donations, keeping financial records | Legal obligation and our legitimate interest |
| Publishing comments, event photos and project news | Your consent |
| Sending club newsletters and event invitations | Your consent (you can unsubscribe at any time) |
| Website security, spam prevention and statistics | Our legitimate interest / your cookie consent |
Who we share it with
We never sell your personal data. We share it only where needed with:
- Rotary International and District 9213, for membership records and reporting;
- service providers who help us run the club and this website (web hosting, email, mobile money and banking providers), under confidentiality obligations;
- embedded services you choose to load, such as YouTube, Google Maps, Facebook and X;
- authorities, where the law requires it.
Some of these providers (for example Rotary International, Google and website hosting) may store data outside Uganda. Where this happens we rely on the safeguards permitted by section 19 of the Act, including the provider’s data protection commitments.
Children
Our website is not directed at children under 18. Where our projects (such as Interact clubs or school programmes) involve children, we only collect or publish their personal data or photographs with the consent of a parent or guardian.
How long we keep it
- Enquiries: up to 2 years after our last contact.
- Membership records: while you are a member and up to 7 years afterwards.
- Donation and financial records: 7 years, as required for accounting.
- Comments: until you ask us to remove them or the post is deleted.
- Cookie choices: 180 days.
Your rights
Under the Data Protection and Privacy Act, 2019 you have the right to:
- be informed about how your data is used;
- access the personal data we hold about you and receive a copy;
- ask us to correct inaccurate data, or to delete data we no longer need;
- object to, or withdraw consent for, processing – including direct marketing – at any time;
- not be subject to decisions based solely on automated processing;
- complain to the Personal Data Protection Office (PDPO) at the National Information Technology Authority – Uganda (NITA-U).
To use any of these rights, email rcbweyogererecentral@gmail.com. We will respond within 30 days. You can also request an export or erasure of the data this website holds about you; we will verify your identity first.
Security
We use reasonable technical and organisational measures to protect personal data, including encrypted connections (HTTPS), limited access to member records, strong passwords and regular updates to this website. If a data breach is likely to affect you, we will notify you and the PDPO as the Act requires.
Cookies
This website uses cookies. You can accept, reject or choose which cookies to allow using the banner shown on your first visit, or the Cookie Settings link at the bottom of every page. See our Cookie Policy for details.
Changes to this policy
We may update this policy from time to time. The latest version will always be on this page, with the date it was last updated.