Privacy notice

This notice covers the website, the request-a-quote and buyer-compliance forms in every language, email to info@ugandagoldreport.com and server logs.

Who is responsible for your data. The controller is Simon Peter, trading as Uganda Gold Report, who operates the business from Uganda. Contact: info@ugandagoldreport.com. Postal address: P.O. Box 8353, Mukalazi Zone, Kampala, Uganda.

What we collect through our forms. When you send a form, we collect:

• your name, company (if you buy for a business), email, phone number (if you give it), country, company website and your role;
• your buyer type;
• the gold specification and commercial terms you enter, including your preferred payment arrangement;
• your answers to the confirmations;
• how you found us;
• anything you write in the message fields.

With each submission we also record:

• the date and time;
• the language of the page;
• the page you visited just before the form, as sent by your browser (for pages on other websites, only the website's name);
• your browser type;
• a one-way scrambled (hashed) version of your network address, used only to limit abuse of the forms.

Giving us your information. No law requires you to give it. Fields marked optional are optional; without the required fields we cannot review or reply to your request.

Why we use it, and on what basis. We use it to:

• review your request and reply to it;
• keep a record of our correspondence;
• screen enquiries against sanctions lists;
• protect the forms from abuse;
• understand which pages bring buyers to the site.

We process it with the consent you give when you send a form, and where it is necessary to take steps you ask for before a contract or to comply with legal obligations, including anti-money-laundering and sanctions law. If an enquiry moves towards a contract, we process identity and company documents for the same reasons. We do not sell your data, send newsletters or make automated calls, and we make no decisions about you by automated means.

How long we keep it.

• Enquiries that do not lead to identity checks or a contract: 24 months after our last contact, then deleted.
• Enquiries that lead to identity checks, a contract or a transaction, with the related documents and screening records: the life of the relationship plus 5 years.
• Records used to limit form abuse: 1 hour.
• Backup copies: rotated, so deleted data is removed from backups within about 14 days.

When you visit the website. Our host records basic technical information about each request to keep the site running and secure: your IP address, the date and time, the page requested, your browser type and the referring page. Hostinger keeps these logs for the period it sets; its published access-log view covers the last 7 days. We look at them only to keep the site working and secure.

Cookies and similar technology.

• No tracking. Public pages set no tracking or advertising cookies, and we store nothing else on your device.
• Form cookie. The quote and compliance forms use one strictly necessary session cookie that protects the form against forged submissions.
• Editor cookie. One further cookie is set only when an editor logs in to the content-management system.

Who else handles your data, and where. The website, its content-delivery network and our email are hosted by Hostinger under its data processing agreement, which forms part of its terms of service. Your information is stored outside Uganda, on Hostinger servers in the United Kingdom. You consent to this storage when you send a form (Data Protection and Privacy Act 2019, section 19). Hostinger uses sub-processors listed in its agreement. Backup copies of the website's content and enquiry records are also kept on the operator's own computer. If you proceed towards a transaction, we will tell you which other parties need your documents (for example a licensed exporter, refinery or bank) before we share anything.

Your rights. You can ask for a copy of your data, or ask us to correct it, delete it, restrict its use, or stop using it. You can also object to how we use it, and withdraw your consent at any time. Email info@ugandagoldreport.com. We reply within one month.

Complaints. Email info@ugandagoldreport.com with "Data complaint" in the subject line. You can also complain to Uganda's Personal Data Protection Office (pdpo.go.ug). If you are in another country, such as the United Kingdom or a European Union member state, you can also contact your local data protection authority.