Youth Organisation for People Empowerment Limited (Limited by Guarantee), herein as yope, complies with its obligations under the Uganda’s data protection framework is primarily governed by the Data Protection and Privacy Act, 2019 (DPPA) and the Data Protection and Privacy Regulations, 2021. These laws regulate the collection, processing, use, storage, and disclosure of personal data within Uganda, and even for data collected or processed outside Uganda but pertaining to Ugandan citizens. General Data Protection Regulations and Data Protection Legislation help keep personal data up to date and only that which is necessary to provide a service, ensuring there is no unauthorised access or disclosure of information to people who do not need to know and by storing and disposing of personal information securely.
Youth Organisation for People Empowerment is a “data controller”. This means that we are responsible for deciding how we hold and use personal information about you.
Youth Organisation for People Empowerment collects, stores and processes personal data relating to people who use services to manage their expectations and support needs. The Company is committed to being clear and transparent about how it collects and uses that data and to meeting its data protection obligations.
You will be provided with an information leaflet called ‘How we use your information’ will have the specific contact details for the Youth Organisation for People Empowerment service you are using.
This privacy notice sets out how the Company collects and uses personal information about you during and after your relationship with us, how we keep it safe, and your rights about this.
The Company takes the security of your data seriously. The Company has internal policies and controls in place to prevent your data from being lost, accidentally destroyed, misused, or disclosed, and is not accessed except by its employees in the performance of their duties. Details of these measures are available on request.
When the Company engages third parties to process personal data on its behalf, they do so based on written instructions, are under a duty of confidentiality and are obliged to implement appropriate technical and organisational measures to ensure the security of data.
Youth Organisation for People Empowerment is required to process your information where it is necessary for compliance with a legal obligation or to provide you with a requested service, support, or information.
Youth Organisation for People Empowerment services operate within a legal framework supplemented by statutory guidance.
Service delivery and Information
We need to process your data when we provide you with information and services that you have requested from us. We do so because it is necessary for our legitimate interests and/or because it is necessary for the performance of a contract to which you are a party or to take steps at your request before entering into a contract.
If you request information via our website at https://www.yope-empowerment.org you can see the website also has a Privacy Statement detailing how information is obtained, used, stored, secured and destroyed; you can see this information here: https://www.yope-empowerment.org/privacy-policy
Marketing
When we send marketing communications to you, we do so because it is necessary for our legitimate interests. Our legitimate interests include highlighting relevant services in order to fulfil our vision to improve and deliver our services. You can request that we stop sending you marketing communications at any time (see ‘your rights’ below).
In respect of personal email addresses, we will only send you marketing with your explicit consent, and you can opt out at any time.
Partnership
We may need to process your personal data when we partner with an organisation to deliver services. This is necessary for the performance of a contract to which you are a party or in order to take steps to deliver a new contract, provide information or following a request before entering into a contract.
Surveys, Compliments and Complaints
If you participate in our satisfaction surveys, make a complaint, or offer a written compliment, we will only collect and process your personal information if it is provided. Many of our surveys allow anonymity. We do so because it is necessary for our legitimate interests in pursuing feedback. However, we follow ethical guidelines when conducting surveys and will always keep you informed of your rights. Should you feel the need to make a complaint, you may do so anonymously, although without your details, we will be unable to directly address any concerns you have raised with you.
Filming and photography at events
We (or a third party) sometimes carry out filming (including audio recordings) or photography at events as part of our publicity/marketing output or to show activities and engagement of best practices. We do so because it is necessary for our legitimate interests in promoting our work and making others aware of the services and standards we work to. We make Customers, Visitors and Service Users aware of this in advance and always ask for their signed consent before they participate.
Other bases for processing
We may need to process your personal data for compliance with our legal obligations where it is necessary for the prevention and detection or reporting of crime, or for the establishment, exercise or defence of legal claims (for example, to protect and defend our rights or property).
For the purposes referred to in this privacy notice and relying on the bases for processing as set out above, we may share your personal data with certain third parties. We may disclose limited personal data to a variety of recipients, including:
We often work with third parties to help us provide our services and products to you. For example, if you wanted to attend one of our events, we may use a third-party to manage the booking on our behalf.
We have contracts in place with all our third parties to make sure they protect and respect your information with the same commitment as we do. For further information, please contact us at admin@yope-empowerment.org
We will retain your personal data no longer than is necessary for the purposes for which it is processed. This purpose is set out in the ‘How do we use your personal information?’ section above. For example, it may be kept for the duration of a service or product you receive from us or as part of our legal obligations. A full list of Data retention timeframes is included within our Confidentiality, Data Protection and Disclosure Policy, which can be requested at admin@yope-empowerment.org
Under data protection legislation you have several rights concerning your personal data.
You can:
If you would like to exercise any of these rights, or you have any questions about the privacy notice, please contact the Data Protection Officer at admin@yope-empowerment.org
If you believe that the Company has not complied with your data protection rights, you have the right to make a complaint regarding any breaches of the Data Protection and Privacy Act and General Data Protection Regulations should be directed to the Personal Data Protection Office (PDPO), which operates under the National Information Technology Authority – Uganda (NITA-U).. The above rights are not absolute, and we may be entitled to refuse requests where exceptions apply, for example, if we have reason to believe the personal data we hold is accurate or we can show our processing is necessary for a lawful purpose set out in this notice.
Where our processing of your data relies on your consent, and where you then withdraw that consent, we may not be able to provide all or some aspects of our services to you and/or it may affect the provision of those services. If you have given your consent and you wish to withdraw it, please contact us at admin@yope-empowerment.org
You can find out more about your rights under data protection legislation at Data Protection and Privacy Act and General Data Protection Regulations should be directed to the Personal Data Protection Office (PDPO), which operates under the National Information Technology Authority – Uganda (NITA-U). If you are not satisfied with how we are processing your data, you can make a complaint to the Personal Data Protection Office (PDPO)
We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information.
Review of this document is recorded on the controlled index and reviewed annually as part of the management review process.
Policy Review
Issue no: 1 Date: June 2025
