Privacy Policy

National Organisation of Trade Unions (NOTU)

Effective Date: 13th December 2026
Last Updated: 13th December 2026

1. Introduction

The National Organisation of Trade Unions (NOTU) is committed to protecting the privacy and personal data of users of its website.

This Privacy Policy explains how NOTU collects, uses, stores, shares, and protects personal data in accordance with the Data Protection and Privacy Act, 2019 of Uganda, and applicable regulations.

By accessing or using NOTU’s website or digital platforms, you agree to the practices described in this Privacy Policy.

2. Data Controller

For purposes of data protection laws, the National Organisation of Trade Unions (NOTU) is the Data Controller.

Contact details:
National Organisation of Trade Unions (NOTU)
Head Office: NOTU House, Kyaliwajjala–Namugongo Road, Plot 38B, Namugongo, Wakiso District, Uganda
Telephone: +256 414 256295
Email: info@notuuganda.org
Website: www.notuuganda.org

3. Personal Data We Collect

NOTU may collect the following categories of personal data:

3.1 Professional and Registration Information
  • Full name
  • Tax Identification Number (TIN)
  • Professional affiliations
  • Qualifications and training history
  • Membership information
3.2 Account and Contact Information
  • Email address
  • Telephone number
  • Username and encrypted password
  • Physical address
3.3 System and Technical Information
  • IP address
  • Browser type and version
  • Device information
  • Login activity and audit logs
3.4 Uploaded Documents
  • Academic certificates
  • Identification documents
  • Supporting registration or official documentation

4. Purpose of Data Collection

NOTU collects and processes personal data for the following purposes:

  • Communication with users, including notifications, OTP verification, and reminders
  • Compliance with statutory and regulatory obligations
  • Website and system administration, security, and continuous improvement

5. Legal Basis for Processing

NOTU processes personal data based on one or more of the following lawful bases:

  • Performance of a statutory or constitutional function
  • Compliance with legal and regulatory obligations
  • Consent provided by the data subject, where applicable

6. Public Disclosure of Information

Certain organizational and membership-related information, such as name, affiliation status, registration details, and validity, may be made publicly accessible by NOTU, strictly in accordance with applicable data protection laws and Personal Data Protection Office (PDPO) guidelines.

Sensitive personal data is not disclosed to the public.

7. Data Sharing and Disclosure

NOTU does not sell, trade, or commercially exploit personal data.

Personal data may be shared only with:

  • Authorized NOTU staff and system administrators for official and operational purposes
  • Government authorities or regulatory bodies where disclosure is required by law
  • Service providers supporting system hosting, maintenance, or security under strict confidentiality agreements
  • Development partners or affiliated organizations within approved project scopes and data protection agreements

8. Data Storage and Security

NOTU implements appropriate technical and organizational security measures, including:

  • Secure cloud hosting
  • Encrypted passwords and authentication mechanisms
  • Role-based access controls
  • Secure backups and disaster recovery procedures
  • Audit logs and system monitoring

Personal data is stored only for as long as necessary to fulfill its intended purpose or as required by law.

9. Cookies and Analytics

The NOTU website may use cookies and similar technologies to:

  • Improve website functionality
  • Enhance user experience
  • Collect anonymous usage statistics

Users can manage cookie preferences through their browser settings.

10. Data Subject Rights

In accordance with the Data Protection and Privacy Act, 2019, data subjects have the right to:

  • Access their personal data
  • Request correction of inaccurate or incomplete data
  • Object to processing in certain circumstances
  • Request deletion of personal data where legally permissible
  • Withdraw consent where processing is based on consent

Requests may be submitted using the contact details provided above.

11. Data Retention

NOTU retains personal data:

  • For as long as membership or affiliation remains active
  • To meet statutory, audit, or regulatory obligations
  • In line with approved records retention schedules

12. Third-Party Links

The NOTU website may contain links to third-party websites. NOTU is not responsible for the privacy practices or content of such external sites.

13. Changes to This Privacy Policy

NOTU may update this Privacy Policy from time to time. Any changes will be published on the website with a revised effective date. Users are encouraged to review this policy periodically.

14. Contact Us

For questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact:

National Organisation of Trade Unions (NOTU)
Head Office: NOTU House, Kyaliwajjala–Namugongo Road, Plot 38B, Namugongo, Wakiso District, Uganda
Telephone: +256 414 256295
Email: info@notuuganda.org
Website: www.notuuganda.org