Privacy Policy

Effective Date: January 6, 2025

Ibabaza Media Limited (“Ibabaza Media”, “we”, “us”, or “our”) is committed to protecting the privacy and personal data of our website visitors, clients, partners, and users. This Privacy Policy explains how we collect, use, disclose, and safeguard personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable data protection laws in the jurisdictions where we operate.

This policy applies to:

  • Ibabaza Media Ltd, registered in Uganda
  • Ibabaza Media Rwanda Ltd, registered in Rwanda

Collectively referred to as “Ibabaza Media”.

1. Scope of This Policy

This Privacy Policy applies to personal data collected through:

  • Our websites and digital platforms
  • Client engagements and contractual relationships
  • Marketing and business development activities
  • Events, consultations, and communications
  • Software, applications, and digital solutions we develop, host, or maintain

2. Definitions

  • Personal Data: Any information relating to an identified or identifiable natural person.
  • Data Subject: The individual whose personal data is processed.
  • Processing: Any operation performed on personal data, including collection, storage, use, disclosure, or deletion.
  • Controller: The entity determining the purposes and means of processing personal data.
  • Processor: An entity processing personal data on behalf of the controller.

3. Data Controller

For GDPR and applicable data protection laws, the Data Controller is:

Ibabaza Media Limited
Email: digital@ibabazamedia.com
Website: www.ibabazamedia.com

Where required, a specific group entity will act as controller depending on the contractual or operational context.

4. Personal Data We Collect

We may collect and process the following categories of personal data:

a) Identification & Contact Data

  • Full name
  • Email address
  • Phone number
  • Organisation and job title

b) Business & Contractual Data

  • Client and vendor information
  • Contractual and billing details
  • Project communications

c) Technical & Usage Data

  • IP address
  • Browser type and version
  • Device identifiers
  • Website usage and analytics data

d) Marketing & Communication Data

  • Newsletter subscriptions
  • Event registrations
  • Marketing preferences

5. Lawful Basis for Processing

We process personal data based on one or more of the following lawful grounds under GDPR:

  • Consent – where you have explicitly agreed
  • Contractual necessity – to perform a contract or pre-contractual steps
  • Legal obligation – compliance with applicable laws
  • Legitimate interests – business operations, service improvement, and security, provided these do not override your rights

6. Purpose of Processing

We process personal data to:

  • Deliver and manage our digital services and solutions
  • Communicate with clients, partners, and stakeholders
  • Respond to inquiries and support requests
  • Fulfil contractual and legal obligations
  • Improve our websites, systems, and user experience
  • Conduct marketing and business development activities

7. Data Sharing and Disclosure

We do not sell personal data.

Personal data may be shared with:

  • Authorised employees and contractors
  • Technology service providers (hosting, cloud, analytics, email services)
  • Professional advisers (legal, financial, audit)
  • Regulatory or law enforcement authorities, where required by law

All third parties are contractually bound to process data securely and in compliance with GDPR.

8. International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA), Uganda, or Rwanda, we ensure appropriate safeguards, including:

  • Standard Contractual Clauses (SCCs)
  • Data Processing Agreements (DPAs)
  • Adequate security and confidentiality measures

9. Data Retention

Personal data is retained only for as long as necessary to:

  • Fulfil the purposes for which it was collected
  • Comply with legal, contractual, and regulatory obligations
  • Resolve disputes and enforce agreements

When no longer required, data is securely deleted or anonymised.

10. Data Subject Rights

Under GDPR, you have the right to:

  • Access your personal data
  • Rectify inaccurate or incomplete data
  • Erase your data (“right to be forgotten”)
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time
  • Complain with a relevant data protection authority

Requests may be submitted to digital@ibabazamedia.com.

11. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to:

  • Enable core functionality
  • Analyze website traffic
  • Improve user experience

You may control cookies through your browser settings. Detailed cookie information may be provided in a separate Cookie Policy.

12. Data Security

We implement appropriate technical and organizational measures to protect personal data, including:

  • Secure hosting environments
  • Access controls and authentication
  • Encryption where appropriate
  • Regular system monitoring and updates

13. Children’s Privacy

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.

15. Contact Us

For any questions, concerns, or requests regarding this Privacy Policy or personal data processing, please contact:

Ibabaza Media Limited
Email: digital@ibabazamedia.com
Website: www.ibabazamedia.com