Privacy Policy

Introduction

Imuka ("we," "our," or "us") operates the website imuka.co and provides business development, mentorship, and investment facilitation services. We are committed to protecting your privacy and complying with applicable data protection laws, including the General Data Protection Regulation (GDPR), Uganda's Data Protection and Privacy Act, and other relevant legislation in the jurisdictions we operate.

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our services.

Information We Collect

Personal Information You Provide:

• Name, email address, phone number, and physical address
• Business information (company name, registration details, industry sector)
• Professional background and experience
• Financial information (for service payments and business assessments)
• Pitch decks, business plans, and proprietary business information
• Communications with our team and mentors
• Investment preferences and financial capacity (for investors)
• Government-issued identification for verification purposes

Information Collected Automatically:

• IP address, browser type, and device information
• Pages visited, time spent on pages, and navigation patterns
• Cookies and similar tracking technologies (see Cookie Policy)
• Location data (country/city level)
• Referral sources and campaign identifiers

Information from Third Parties:

• Social media profile information (if you connect accounts)
• Payment processor information
• Background verification data
• Publicly available business information

How We Use Your Information

We use your information for the following purposes:

Service Delivery:

• Providing business development, mentorship, and accelerator services
• Matching entrepreneurs with investors and partners
• Facilitating networking opportunities
• Delivering educational content and resources
• Processing payments for services

Business Operations:

• Communicating about services, programs, and opportunities
• Improving our services and user experience
• Conducting research and analytics
• Complying with legal obligations
• Preventing fraud and ensuring security

Marketing and Communications:

• Sending newsletters and program updates (with consent)
• Promoting relevant services and opportunities
• Conducting surveys and gathering feedback

Legal Basis for Processing (GDPR)

We process your personal data based on:

• Consent: When you provide explicit consent for specific processing activities
• Contract: To fulfill our contractual obligations to provide services
• Legitimate Interests: For business operations, fraud prevention, and service improvement
• Legal Obligation: To comply with applicable laws and regulations

Data Sharing and Disclosure

We may share your information with:

Service Providers:

• Payment processors and financial institutions
• Cloud hosting and data storage providers
• Email and communication platforms
• Analytics and marketing service providers
• Background verification services

Business Partners:

• Investors and funding organizations (with your consent)
• Strategic partners and accelerator program collaborators
• Mentors and coaches (for service delivery)

Legal Requirements:

• Government authorities when required by law
• Law enforcement in response to valid legal requests
• During mergers, acquisitions, or business transfers

We will never sell your personal information to third parties.

International Data Transfers

As we operate across multiple African countries and work with international partners, your data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses approved by regulatory authorities
• Adequacy decisions by data protection authorities
• Explicit consent where required

Data Retention

We retain your personal information for as long as:

• Your account is active
• Necessary to provide services
• Required by legal, tax, or accounting requirements
• Necessary for legitimate business purposes

Typically, we retain data for 7 years after account closure or final service delivery, unless a longer retention period is required by law.

Your Rights

Depending on your location, you may have the following rights:

• Access: Request copies of your personal information
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we use your data
• Data Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time (where processing is based on consent)
• Complain: Lodge a complaint with your local data protection authority

To exercise these rights, contact us at privacy@imuka.co.

Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Access controls and authentication mechanisms
• Regular security assessments and audits
• Staff training on data protection
• Incident response procedures

However, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware of such collection, we will delete the information promptly.

Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or prominent website notice. Continued use of our services after changes constitutes acceptance.

Contact Information

For privacy-related inquiries:

• Email: privacy@imuka.co
• Address: Matt 3rd Floor, Nairobi
• Phone: +254 745290180