This Privacy Policy explains how Ukoo Love Foundation ("Ukoo Love", "we", "us") collects, uses, stores, and protects personal information when you visit ukoolove.org, donate, volunteer, partner with us, or otherwise interact with our humanitarian programs.
We are committed to handling data with dignity — the same way we serve the communities we support. We collect only what we need, use it for legitimate purposes, and protect it with appropriate safeguards.
1. Who we are
Data controller: Ukoo Love Foundation
Registered office: Ukoo Love Foundation, Kampala, Uganda
Coming soon: Utawala, Nairobi, Kenya
Contact: hello@ukoolove.org
We operate education, livelihood, and girl child support (period dignity) programs. Because our work involves children and vulnerable communities, we apply heightened care to sensitive data.
2. Information we collect
2.1 Information you provide
- Donors: name, email, billing address, payment details (processed by third-party payment providers — we do not store full card numbers), donation amount, designation, and communication preferences.
- Volunteers & applicants: name, email, phone, country, skills, availability, motivation statement, and résumé or documents you upload.
- Contact forms: name, email, subject, and message content.
- Newsletter: email address and subscription preferences.
- Partners & institutions: organisational contact details and correspondence.
2.2 Information collected automatically
- Device and browser type, IP address, pages visited, and approximate location (city/country level).
- Cookies and similar technologies — see our Cookie Policy.
- Language and currency preferences you select on our site.
2.3 Programme & beneficiary data
In the course of delivering programmes, local partners may share beneficiary information (e.g. school attendance, programme participation) under strict data-sharing agreements. We minimise identifiers and use data only for programme delivery, monitoring, and safeguarding.
3. How we use your information
We use personal information to:
- Process donations and issue receipts or acknowledgements.
- Respond to enquiries and provide supporter care.
- Manage volunteer applications and staff recruitment.
- Send updates you have opted into (you may unsubscribe at any time).
- Operate, improve, and secure our website and systems.
- Meet legal, regulatory, and audit obligations.
- Protect children, beneficiaries, staff, and volunteers through safeguarding processes.
- Report aggregated, non-identifiable impact statistics.
Legal bases (where applicable): consent, contractual necessity, legitimate interests in running a non-profit humanitarian organisation, and legal obligation.
4. When we share information
We do not sell personal information. We may share data with:
- Service providers: payment processors (e.g. Stripe, PayPal), email services, website hosting, translation widgets, and analytics — bound by confidentiality and data-processing terms.
- Programme partners: vetted local NGOs, schools, and community organisations, only as needed to deliver services.
- Authorities: when required by law or to prevent serious harm (including safeguarding disclosures).
- Professional advisers: auditors, lawyers, or insurers under duty of confidentiality.
International transfers may occur (e.g. cloud hosting outside Uganda). Where required, we use appropriate safeguards such as standard contractual clauses or equivalent mechanisms.
5. Retention
We keep information only as long as necessary:
- Donation records: typically 7 years for accounting and tax purposes.
- Volunteer applications: up to 24 months unless you become active staff or volunteer.
- Marketing contacts: until you unsubscribe or ask us to delete your data.
- Website logs: generally up to 12 months.
6. Your rights
Depending on your location, you may have the right to access, correct, delete, restrict, or object to processing of your personal data, and to data portability or withdrawal of consent. Residents of Kenya may contact the Office of the Data Protection Commissioner (ODPC). EU/UK residents may have additional rights under GDPR/UK GDPR.
To exercise your rights, email hello@ukoolove.org. We will respond within 30 days where practicable.
7. Children's privacy
Our website is not directed at children under 16 for independent registration. Programme data about children is handled by partners under safeguarding protocols — see our Safeguarding Policy. If you believe a child has provided personal data to us online without appropriate consent, contact hello@ukoolove.org.
8. Security
We use administrative, technical, and organisational measures including access controls, encryption in transit (HTTPS), and staff training. No method of transmission over the internet is 100% secure; we encourage strong passwords and caution when sharing sensitive information by email.
9. Changes to this policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top will change, and material changes may be highlighted on our website.
Questions? Contact us at hello@ukoolove.org.