This policy explains what personal data Jinja Consolidated ("we", "us") collects through jinjaconsolidated.com, why, who we share it with and the rights you have under the Data Protection and Privacy Act, 2019 and its Regulations. We are the data collector and controller for the data described here.
1. What we collect
| When you… | We collect |
|---|---|
| Create an account | Name, email, phone number, password (stored only as a one-way hash), and which services you have switched on. |
| List property or request a valuation | Property details, photos, location, price, and documents you upload to prove ownership or authority. |
| Send messages | The messages you send. If a message contained contact details we removed, we keep the original text so staff can review it. |
| Sign an agreement | The name you typed, the time, your IP address and browser, and a fingerprint of the text you signed. |
| Pay or get paid | Amounts, references and status from PesaPal, and the mobile money or bank details you give for payouts. We do not receive or store card numbers or PINs. |
| Enter tax details | Your TIN, VAT status and any withholding-tax exemption certificate number. |
| Register a store, construction company or lending institution | Business details and the registration, licence, tax and authorisation documents you upload. These are kept in private storage and seen only by staff who verify them. |
| Register as a driver | Your name, phone, National Identification Number, driving licence details, vehicle details, payout account, and photos of your ID, licence, logbook, vehicle and face. These are kept in private storage and used only to check you and to pay you. While you are online or on a job, your phone's location every few minutes. |
| Book or carry out a move | Pickup and drop-off addresses, the items listed, photos of the load at both ends, and the location where each step was confirmed. The customer and driver see each other's name and phone number for the duration of the move. |
| Apply for a loan | The income, employment, deposit and property details on your application. |
| Book a site visit or short stay | Dates, the property, and who is attending. |
| Browse the site | IP address, device and browser type, pages visited, and cookies (see section 7). |
2. Why we use it
- To provide the services you asked for: accounts, listings, viewings, messages, agreements and escrow, payments, stores, tenders, loan applications and rental management.
- To keep users safe: verifying documents, removing contact details from messages, detecting fraud and deciding disputes.
- To meet legal duties, including keeping financial and tax records and responding to lawful requests from authorities.
- To improve the Platform, using statistics that do not identify you.
- To send news about listings or offers — only if you agree, and you can stop at any time.
3. Who we share it with
- The other side of your deal — for example the owner of a property you ask about, the store you order from, or the client of a project you bid on. We share only what is needed; phone numbers and emails are not shared through messages.
- Lenders — only the lender you apply to, and only after you tick the consent box on the application. The lender may check your record with a credit reference bureau.
- PesaPal, to process payments.
- Service providers that host the Platform, send email or provide maps and analytics, under contracts that require them to protect the data.
- Authorities such as URA, the police or a court, when the law requires it.
We do not sell personal data.
4. Message monitoring
Our staff can read conversations on the Platform, including agreements discussed in them, to prevent fraud, enforce our Terms and decide disputes. Staff access is limited to people who need it for that work.
5. How long we keep it
- Payment, escrow, agreement and tax records: at least 5 years after the transaction, as required by tax law, and longer if there is a dispute.
- Messages: for as long as your account is open and 2 years after, so disputes can be investigated.
- Verification documents: while you are verified and 2 years after.
- Everything else: until you ask us to delete it or close your account, unless the law requires us to keep it.
6. Security and storage
Data is sent over encrypted connections and stored on secured servers. Documents you upload for verification are kept in private storage that cannot be reached from the public website. Our hosting providers may store data outside Uganda; where they do, we use providers that apply protection at least equal to Ugandan law. If a breach puts your data at risk, we will inform the Personal Data Protection Office and you as the law requires.
7. Cookies
Essential cookies keep you signed in, remember your currency and saved properties, and protect forms. Analytics and advertising cookies are used only if you accept them in the cookie banner, and you can change your choice at any time by clearing cookies in your browser.
8. Your rights
You can ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct data that is wrong or incomplete — most of it you can edit in your account;
- delete your data or close your account, unless we must keep it by law or for an open dispute;
- stop using your data for marketing, or object to other uses.
We reply within 30 days. If you are not satisfied, you can complain to the Personal Data Protection Office of Uganda.
9. Children
The Platform is for people aged 18 and over. We do not knowingly collect data about children.
10. Changes
We may update this policy. The date at the top shows the current version, and we will tell account holders about important changes.
11. Contact
For privacy questions or requests, send us a message from your account, email contact@jinjaconsolidated.com with the subject "Privacy", or write to PO Box 109, Lubas, 56, Jinja, Uganda.