Last updated: 3 July 2026
JAMS Children's Foundation ("JAMS", "we", "us" or "our") is a Ugandan non-governmental organisation committed to protecting the privacy and personal data of the children, families, donors, volunteers, partners and website visitors we serve. This Privacy Policy explains how we handle personal data in accordance with the Data Protection and Privacy Act, 2019 of Uganda, the Data Protection and Privacy Regulations, 2021, and other applicable Ugandan laws.
1. Who we are (Data Controller)
The data controller is JAMS Children's Foundation, a non-profit organisation registered in Uganda with offices in Kampala. You can contact us at info@jamschildrensfoundation.org or by phone on +256 (0) 762 914 338 / +256 (0) 773 494 315.
2. Personal data we collect
Depending on how you interact with us, we may collect:
- Contact details, name, email address, phone number, postal address.
- Donation information, donation amount, payment method reference, and any dedication or message you provide. We do not store full card or mobile money PINs; these are handled by our regulated payment providers.
- Volunteer and partnership data, skills, availability, organisation, and any information you share in an application.
- Beneficiary data, limited information about children and families we support (such as name, age, village and needs assessment), collected with the informed consent of a parent or guardian.
- Website and communications data, IP address, browser type, pages visited, and email engagement, collected through cookies and similar technologies.
3. Lawful basis and purposes
We process personal data only where we have a lawful basis under section 7 of the Act, including:
- Consent, for marketing emails, photography, testimonials and storytelling about our work.
- Contract or agreement, to process a donation, deliver a receipt, or manage a volunteer engagement.
- Legal obligation, to meet tax, NGO Bureau, financial-reporting and anti-money-laundering requirements.
- Legitimate interest, to run and improve our programs, safeguard beneficiaries, and communicate with existing supporters.
- Vital interest, where processing is necessary to protect a child or vulnerable person from harm.
4. Children's data and safeguarding
Many of the people we serve are children. We collect and use children's information only for genuine programmatic purposes, always with the informed consent of a parent, guardian or authorised caregiver, and in line with our Child Protection and Safeguarding Policy. We do not publish a child's full name, home village or school in a way that could reasonably be used to identify or locate that child without explicit, documented consent.
5. How we share personal data
We do not sell personal data. We share it only with:
- Trusted service providers (payment processors, email delivery, hosting, analytics) bound by confidentiality and data-processing terms.
- Program partners and local authorities where necessary for the delivery or oversight of outreach activities.
- Regulators, auditors or law-enforcement agencies where required by Ugandan law.
Where a service provider is located outside Uganda, we transfer data only where the destination country provides adequate protection, or where appropriate contractual safeguards are in place, in line with section 19 of the Act.
6. Retention
We retain personal data only for as long as necessary for the purposes described above, or as required by law (for example, financial and donation records are typically retained for at least seven years to meet tax and audit obligations). Beneficiary records are retained for the duration of active support and reviewed periodically.
7. Security
We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss or disclosure, including access controls, encryption in transit, staff training and vetted third-party providers. In the event of a personal-data breach likely to result in risk to affected individuals, we will notify the Personal Data Protection Office and affected data subjects as required by the Act.
8. Your rights
Under the Data Protection and Privacy Act, 2019 you have the right to:
- Be informed about how your personal data is used;
- Access the personal data we hold about you;
- Request correction of inaccurate or incomplete data;
- Request deletion of data we no longer need to keep;
- Object to, or restrict, certain processing;
- Withdraw consent at any time, without affecting prior lawful processing;
- Lodge a complaint with the Personal Data Protection Office (PDPO) of Uganda.
To exercise any of these rights, email info@jamschildrensfoundation.org. We will respond within a reasonable time and, in any case, in line with the timelines set by the Act and its Regulations.
9. Cookies
Our website uses essential cookies to keep the site working, and may use limited analytics cookies to understand how visitors use our pages. You can control cookies through your browser settings.
10. Changes to this policy
We may update this policy from time to time. Material changes will be posted on this page with a revised "Last updated" date.
11. Contact and complaints
Questions, requests or complaints about this policy or our handling of personal data can be sent to info@jamschildrensfoundation.org. You also have the right to complain to Uganda's Personal Data Protection Office.