Privacy Policy

Introduction

Kisibo Mugera Limited ("we", "us", "our", or "the Company") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you visit our website, engage our consultancy services, communicate with us, or otherwise interact with us.

We process personal data in accordance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our website and services, you acknowledge that you have read and understood this Privacy Policy.

Information We Collect

How We Use Your Information

We use personal information for the following purposes: responding to enquiries and requests; providing consultancy services; managing client relationships; delivering contracted services; processing payments and invoices; improving our website and services; maintaining website security; complying with legal and regulatory obligations; sending relevant business communications; managing recruitment or employment enquiries; and protecting our legal rights and interests.

We will only use personal information where we have a lawful basis to do so.

Legal Basis for Processing

Under UK GDPR, we rely on one or more of the following legal bases: Contract — where processing is necessary to perform a contract with you or take steps before entering into a contract. Legitimate Interests — where processing is necessary for our legitimate business interests, provided those interests do not override your rights and freedoms (examples include responding to enquiries, improving our services, website administration, business development, and fraud prevention). Legal Obligation — where processing is required to comply with legal, regulatory, or statutory obligations. Consent — where required by law, we will obtain your consent before processing your information. You may withdraw consent at any time.

Data Sharing and Disclosure

We do not sell personal information. We may share personal information with professional advisers, accountants and auditors, IT and website service providers, cloud storage providers, payment processors, regulatory authorities, and law enforcement agencies where legally required. All third parties are required to respect the security of personal data and process it lawfully.

International Transfers

Where personal information is transferred outside the United Kingdom, we will ensure appropriate safeguards are in place in accordance with applicable data protection laws. Such safeguards may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms recognised under UK GDPR.

Data Retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, taxation, and reporting requirements. Retention periods vary depending on the nature of the information, the purpose of processing, legal obligations, and business requirements. When information is no longer required, it will be securely deleted or anonymised.

Data Protection Rights

Under UK GDPR, you may have the following rights: right to be informed; right of access; right to rectification; right to erasure; right to restrict processing; right to data portability; right to object; and rights relating to automated decision-making and profiling. To exercise any of these rights, please contact us using the details provided below. We may request proof of identity before responding to requests.

Data Security

We implement appropriate technical and organisational measures designed to protect personal information from unauthorised access, loss, misuse, disclosure, alteration, and destruction. While we strive to protect personal information, no method of transmission over the internet or electronic storage is completely secure. Accordingly, we cannot guarantee absolute security.

Third-Party Services

Our website may contain links to third-party websites or use third-party services, including website hosting providers, analytics providers, email service providers, payment processors, and social media platforms. We are not responsible for the privacy practices or content of third-party websites. Users should review the privacy policies of those third parties.

Cookie Policy

Cookies are small text files stored on your device when you visit a website. We may use cookies to ensure website functionality, improve website performance, analyse visitor behaviour, enhance user experience, and remember user preferences. Types of cookies we may use include: Essential Cookies (required for the operation of the website); Performance and Analytics Cookies (help us understand how visitors use our website); Functional Cookies (remember preferences and settings); and Marketing Cookies (may be used to deliver relevant content and advertising where applicable). Most browsers allow you to control cookies through browser settings. You may disable cookies; however, doing so may affect website functionality.

Children's Privacy

Our website and services are intended for business and professional use and are not directed at children under the age of 18. We do not knowingly collect personal information from children. If we become aware that personal information has been collected from a child without appropriate consent, we will take steps to delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated revision date. We encourage users to review this policy periodically.

Contact Information

If you have questions about this Privacy Policy or how your personal information is handled, please contact: Eugene Ligale, Kisibo Mugera Limited, Company Number: 17279591. Email: [email protected]

Complaints

If you are dissatisfied with how we process your personal information, please contact us first so that we may attempt to resolve your concerns. You also have the right to lodge a complaint with the UK supervisory authority: Information Commissioner's Office (ICO), Website: https://ico.org.uk. The ICO is the independent authority responsible for upholding information rights in the United Kingdom.

Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of England and Wales. Any disputes arising in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the courts of England and Wales.