Privacy

1. Introduction

iVenture Africa (“iVenture Africa,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, disclose, and protect personal data when you:

Visit www.iventureafrica.org;
Create an account or complete a form on our website;
Apply for our programmes, funding, competitions, or business-development services;
Attend our events, training sessions, innovation programmes, or investment activities;
Subscribe to our communications; or
Otherwise interact with iVenture Africa.

iVenture Africa provides business-development support, funding, investment readiness, entrepreneurial programmes, and related services for businesses and entrepreneurs, particularly women- and youth-led enterprises in Africa.

2. Data Controller

For purposes of applicable data-protection laws, iVenture Africa is the data controller responsible for determining how and why personal data collected through this website and our services is processed.

Organisation: iVenture Africa
Website: www.iventureafrica.org
Address: [Insert registered or principal office address]
Email: [Insert official privacy or general email address]
Telephone: +256 773 917 658

3. Personal Data We May Collect

Depending on how you interact with us, we may collect:

3.1 Identity and contact information

Full name;
Email address;
Telephone number;
Postal or physical address;
Country, city, or location;
Gender, age, or date of birth, where relevant;
National identification information, where legally required; and
Username and account details.

3.2 Business and professional information

Business or organisation name;
Job title and professional background;
Business sector and location;
Business-registration information;
Business plans, proposals, pitch decks, and company profiles;
Information about founders, directors, employees, and shareholders;
Revenue, funding, investment, and financial information; and
Information submitted when applying for funding, acceleration, incubation, training, or business-development support.

3.3 Programme and event information

Applications and registration details;
Attendance records;
Programme assessments and evaluation results;
Feedback, testimonials, photographs, video, or audio recordings;
Dietary, accessibility, or other participation requirements; and
Information about mentors, facilitators, partners, investors, and programme beneficiaries.

3.4 Communications

We may collect information contained in messages, enquiries, complaints, survey responses, emails, telephone calls, or other communications sent to us.

3.5 Payment and transaction information

Where payments are required, we may collect transaction references, billing details, payment status, and related records. Payments may be processed by banks, mobile-money operators, or other payment-service providers. We do not ordinarily store complete payment-card or mobile-money credentials.

3.6 Technical and usage information

When you use our website, we may automatically collect:

Internet Protocol address;
Browser type and version;
Device type and operating system;
Pages visited and time spent on the website;
Referring website;
Login and activity records;
General geographic location; and
Cookie and similar technology information.

4. How We Collect Personal Data

We may collect personal data:

Directly from you;
Through website forms and account registration;
Through programme, funding, competition, or event applications;
Through email, telephone, social media, or in-person communication;
From participating businesses, employers, partners, or referees;
From publicly available sources, including business websites and professional platforms;
Through authorised service providers; and
Automatically through cookies and website technologies.

Where you provide personal data relating to another person, you confirm that you have authority to provide it and have informed that person about the intended processing.

5. How We Use Personal Data

We may use personal data to:

Provide and administer our services;
Review programme, training, partnership, or funding applications;
Assess businesses and investment opportunities;
Create and manage website accounts;
Communicate with applicants, entrepreneurs, investors, partners, and other stakeholders;
Organise events, training, competitions, workshops, and mentoring programmes;
Conduct research, monitoring, evaluation, and impact reporting;
Process payments and maintain financial records;
Respond to questions, requests, or complaints;
Send newsletters, opportunities, invitations, and promotional communications where permitted;
Improve our website, programmes, and services;
Maintain the security of our website and information systems;
Prevent fraud, misconduct, and unauthorised access;
Comply with legal, regulatory, contractual, and reporting obligations; and
Establish, exercise, or defend legal claims.

We will not use personal data for a purpose that is materially different from the purpose for which it was collected without providing appropriate notice or obtaining consent where required.

6. Legal Grounds for Processing

Depending on the circumstances, we process personal data based on:

Your informed consent;
The performance of a contract or steps taken before entering into a contract;
Compliance with a legal or regulatory obligation;
Our legitimate interests in operating, protecting, and improving our organisation and services;
The protection of your vital interests or those of another person; or
Another lawful basis recognised under applicable law.

You may withdraw consent at any time. Withdrawal will not affect processing lawfully carried out before consent was withdrawn.

7. Marketing Communications

With your consent or where otherwise permitted by law, we may send information about programmes, events, funding opportunities, partnerships, and other services.

You may unsubscribe by:

Selecting the “unsubscribe” option in an email;
Following the instructions contained in the communication; or
Contacting us using the details in this Policy.

We will not sell your personal data to third parties for their independent marketing.

8. Cookies

Our website may use cookies and similar technologies to:

Enable essential website functions;
Remember user preferences;
Maintain account sessions;
Understand website traffic and performance;
Improve user experience; and
Support communications and marketing activities.

Where required, non-essential cookies will be used only after obtaining consent. You may control or delete cookies through your browser settings, although disabling certain cookies may affect website functionality.

9. Sharing Personal Data

We may share personal data with:

Employees, consultants, mentors, advisers, and authorised representatives;
Programme sponsors, funding partners, investors, and implementation partners;
Government ministries, regulators, or public authorities where required;
Banks, auditors, accountants, insurers, and professional advisers;
Website-hosting, cloud-storage, email, analytics, security, and IT providers;
Event organisers, venues, and logistics providers;
Research, monitoring, and evaluation partners;
Potential parties to a merger, restructuring, investment, or transfer of organisational assets; and
Law-enforcement bodies or courts where disclosure is legally required.

We require service providers handling personal data on our behalf to use it only for authorised purposes and to apply appropriate confidentiality and security safeguards.

10. International Data Transfers

Because iVenture Africa operates and collaborates across different countries, personal data may be transferred to or stored outside Uganda.

Where personal data is transferred internationally, we will take reasonable steps to ensure that:

The receiving country provides an adequate level of protection;
The recipient is contractually required to protect the information;
Appropriate technical and organisational safeguards are implemented; or
The data subject has provided valid consent where consent is required.

We will maintain appropriate records concerning the basis and safeguards used for international transfers.

11. Data Security

We maintain reasonable administrative, technical, and physical safeguards designed to protect personal data against:

Loss or accidental destruction;
Unauthorised access;
Unlawful processing;
Alteration;
Misuse; and
Unauthorised disclosure.

These measures may include access controls, passwords, encryption, backups, confidentiality obligations, staff training, and security monitoring. However, no internet-based system can be guaranteed to be completely secure.

Where a personal-data breach occurs, we will investigate it and notify affected persons and the relevant authorities where required by law.

12. Data Retention

We retain personal data only for as long as reasonably necessary to:

Fulfil the purpose for which it was collected;
Administer our programmes and contractual relationships;
Meet donor, investor, audit, tax, and reporting requirements;
Resolve complaints or disputes; and
Comply with legal and regulatory obligations.

Different categories of data may have different retention periods. When information is no longer required, we will securely delete, destroy, or anonymise it.

13. Children and Young People

Some iVenture Africa programmes may involve young people. We will process children’s personal data only where there is a lawful basis and appropriate safeguards.

Where required, we will obtain consent from a parent, guardian, or another person legally authorised to act for the child. We will not knowingly collect more information about a child than is reasonably necessary for the relevant programme or service.

Parents and guardians may contact us regarding personal data held about a child under their responsibility.

14. Photographs, Video, and Testimonials

We may take photographs or make audio or video recordings during events and programmes for documentation, reporting, publicity, and communication.

Where required, we will obtain consent before using identifiable images, recordings, or testimonials. You may raise concerns or withdraw consent for future use by contacting us, subject to legal, contractual, or legitimate archival requirements.

15. Your Rights

Subject to applicable law, you may have the right to:

Be informed about the collection and use of your personal data;
Request access to personal data held about you;
Request correction of inaccurate or incomplete information;
Request deletion of personal data where legally permissible;
Object to certain forms of processing, including direct marketing;
Request restriction of processing;
Withdraw consent;
Request a portable copy of your data where applicable;
Complain about the handling of your personal data; and
Seek available legal remedies where your rights have been violated.

We may request reasonable identification information before processing a rights request.

16. Third-Party Websites

Our website may contain links to external websites, platforms, or services. iVenture Africa does not control and is not responsible for the privacy practices, security, or content of those third-party services. Users should review the privacy policies of external websites before submitting personal information.

17. Changes to This Policy

We may update this Privacy Policy to reflect changes in our services, technology, practices, or legal obligations.

The revised version will be published on our website with an updated effective date. Where changes materially affect how we process personal data, we may provide additional notice.

18. Contact and Complaints

Questions, requests, or complaints concerning this Privacy Policy or the processing of personal data should be directed to:

Data Protection Contact
iVenture Africa
Address: [Insert physical or postal address]
Email: [Insert privacy email address]
Telephone: +256 773 917 658
Website: www.iventureafrica.org

You may also lodge a complaint with Uganda’s Personal Data Protection Office or another competent data-protection authority.