Association of Real Estate Agents — Uganda
    AREA Uganda Logo

    Privacy Policy

    Last updated: March 2026

    1. Introduction

    The Association of Real Estate Agents Uganda ("AREA Uganda", "we", "our", or "us") is committed to protecting your personal data in accordance with the Uganda Data Protection and Privacy Act, 2019 (administered by the National Information Technology Authority — NITA-Uganda) and the EU General Data Protection Regulation (GDPR) where applicable. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and services.

    2. Data Controller

    AREA Uganda is the data controller responsible for your personal data. For any data protection inquiries, contact us at:

    3. Personal Data We Collect

    We may collect the following categories of personal data:

    • Identity Data: Full name, professional title, company name
    • Contact Data: Email address, phone number, physical address
    • Professional Data: Years of experience, specialization, professional certifications
    • Financial Data: Mobile money phone number and payment provider (we do not store mobile money PINs or account balances)
    • Technical Data: IP address, browser type, device information, cookies
    • Usage Data: Pages visited, features used, interaction patterns
    • Profile Data: Profile photo, bio, membership preferences

    4. Lawful Basis for Processing

    Under the Data Protection and Privacy Act, 2019 (Section 9) and GDPR Article 6, we process your personal data on the following lawful bases:

    • Consent: When you register for membership, subscribe to newsletters, or submit contact forms
    • Contractual Necessity: To fulfil our membership obligations and provide services you have requested
    • Legitimate Interest: To improve our services, maintain security, and communicate relevant professional updates
    • Legal Obligation: To comply with applicable laws and regulatory requirements in Uganda

    5. How We Use Your Data

    Your personal data is used to:

    • Process and manage your membership application and renewal
    • Process payments via IOTEC Pay (MTN Mobile Money and Airtel Money)
    • Maintain and display the member directory (with your consent)
    • Send membership-related communications and announcements
    • Register you for events and programs
    • Improve our website and services
    • Comply with legal and regulatory obligations

    6. Data Sharing and Third Parties

    We may share your data with:

    • Payment Processors: IOTEC Pay for processing mobile money transactions — subject to their own privacy policy
    • Cloud Infrastructure: Our hosting and database providers for secure data storage
    • Regulatory Bodies: When required by law or regulation under Ugandan legislation

    We do not sell, trade, or rent your personal data to third parties for marketing purposes. Where data is transferred outside Uganda, we ensure adequate safeguards are in place as required by Section 19 of the Data Protection and Privacy Act, 2019.

    7. Data Retention

    We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Membership records are retained for the duration of your membership and for a period of 7 years thereafter for regulatory compliance. You may request early deletion subject to our legal obligations.

    8. Your Rights

    Under the Data Protection and Privacy Act, 2019 (Part IV) and GDPR, you have the right to:

    • Access: Request a copy of the personal data we hold about you
    • Rectification: Request correction of inaccurate or incomplete data
    • Erasure: Request deletion of your personal data ("right to be forgotten")
    • Restriction: Request restriction of processing in certain circumstances
    • Data Portability: Receive your data in a structured, machine-readable format
    • Objection: Object to processing based on legitimate interests
    • Withdraw Consent: Withdraw consent at any time where processing is based on consent

    To exercise any of these rights, contact us at ceo@areauganda.org. We will respond within 30 days.

    9. Data Security

    We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption in transit and at rest, access controls, regular security assessments, and secure authentication mechanisms. In the event of a data breach, we will notify NITA-Uganda and affected individuals as required under Section 24 of the Act within 48 hours of becoming aware.

    10. Cookies

    Our website uses essential cookies for authentication and session management. We do not use third-party tracking cookies. By using our website, you consent to the use of essential cookies necessary for the functioning of the site.

    11. Children's Data

    Our services are not directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If we learn that we have collected data from a child, we will delete it promptly.

    12. Complaints

    If you believe your data protection rights have been violated, you have the right to lodge a complaint with the National Information Technology Authority — Uganda (NITA-U), the supervisory authority for data protection in Uganda. For EU/EEA residents, you may also lodge a complaint with your local supervisory authority.

    13. Changes to This Policy

    We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.