Our Privacy Policy Your Data, Your Control

Depending on how you interact with us, we may collect the following categories of information:

Information you provide to us

• Contact details: name, email address, phone number, company or organisation name, and the content of messages you send through our contact form or email
• Appointment requests: preferred date, time, and information you include when booking a demo or consultation
• Newsletter subscriptions: email address when you subscribe to blog or update emails
• Job applications: name, contact details, CV or résumé, cover letter, and other information you submit when applying for a role
• Communications: any other information you choose to provide when you write to us or speak with our team

Information collected automatically

• Usage and device data: pages viewed, referring URLs, approximate location (derived from IP address), browser type, operating system, and device identifiers
• Cookie and analytics data: preferences stored in cookies and similar technologies, as described in our Cookie Policy
• Security logs: IP address, timestamps, and technical events related to site security and abuse prevention

We do not intentionally collect sensitive personal data (such as health, biometric, or government ID numbers) through this website unless you voluntarily include them in a message or application and we have a lawful basis to process them.

We use the information we collect for purposes that include:

• Operating, maintaining, and improving our website and digital services
• Responding to enquiries, support requests, and appointment bookings
• Sending blog updates or other communications you have requested (you may unsubscribe at any time)
• Reviewing and managing job applications
• Understanding how visitors use our site so we can improve content and user experience
• Protecting the security and integrity of our systems, preventing fraud and abuse
• Complying with applicable laws, regulations, and lawful requests from authorities
• Establishing, exercising, or defending legal claims where necessary

We process your information only where we have a valid legal basis, such as your consent, performance of a contract or steps prior to entering a contract, our legitimate interests (balanced against your rights), or a legal obligation.

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

We may share information in these circumstances:

• Service providers: hosting, email delivery, analytics, security (including spam/bot protection), and IT support partners who process data on our instructions and under appropriate safeguards
• Professional advisers: lawyers, auditors, or insurers where reasonably necessary
• Business transfers: in connection with a merger, acquisition, reorganisation, or sale of assets, subject to confidentiality obligations
• Legal and safety: when required by law, court order, or government request, or when we believe disclosure is necessary to protect rights, safety, or property
• With your direction: when you ask us to share information or otherwise give explicit consent

Third-party services embedded on our site (for example, maps or security verification tools) may collect information according to their own policies. We encourage you to review those policies where relevant.

We implement measures designed to protect personal information against unauthorised access, alteration, disclosure, or destruction, including:

• Secure hosting and encrypted connections (HTTPS) where supported
• Access controls limiting who within our organisation can access personal data
• Regular review of our systems and security practices
• Use of reputable providers for email, hosting, and security services

No method of transmission over the Internet or electronic storage is completely secure. While we strive to protect your information, we cannot guarantee absolute security.

If you believe your interaction with us is no longer secure, please contact us immediately using the details below.

Subject to applicable law (including data protection laws in Uganda, the East African Community, the EU/UK GDPR where relevant, and other jurisdictions), you may have the right to:

• Access the personal information we hold about you
• Correct inaccurate or incomplete information
• Delete your information in certain circumstances
• Restrict or object to certain processing
• Withdraw consent where processing is based on consent (without affecting prior lawful processing)
• Complain to a supervisory authority if you believe our processing violates applicable law

To exercise these rights, contact us using the information in the "Contact Us" section. We may need to verify your identity before responding. We will respond within a reasonable period as required by law.

We use cookies, local storage, and similar technologies to remember preferences, measure site traffic, and improve our website. Some cookies are essential for the site to function; others require your consent where required by law.

For detailed information about the types of cookies we use and how to manage them, please read our Cookie Policy. You can also adjust preferences through our cookie banner when shown on the site.

Our website may include content or tools provided by third parties, such as:

• Map services on our contact page
• Security and anti-abuse verification (for example, reCAPTCHA)
• Content delivery networks and font or icon libraries
• Links to social networks, partners, or external resources

These third parties may collect information about you according to their own privacy policies. We do not control their practices and are not responsible for their websites or services. We recommend reviewing their policies when you leave our site or interact with their tools.

We retain personal information for as long as necessary to fulfil the purposes for which it was collected, including:

• Enquiries and correspondence: typically up to three years after our last interaction, unless a longer period is needed for legal or business purposes
• Newsletter subscriptions: until you unsubscribe or we remove inactive subscribers
• Job applications: for the duration of the recruitment process and a reasonable period thereafter for talent records, unless you ask us to delete sooner or law requires otherwise
• Analytics and logs: for periods aligned with our analytics and security needs, often aggregated or anonymised over time

When information is no longer required, we will delete it or anonymise it in a secure manner, subject to legal retention obligations.

MME Impact Lab is based in Uganda. If you access our website from another country, your information may be transferred to and processed in Uganda or in other countries where our service providers operate.

Those countries may have data protection laws that differ from those in your jurisdiction. Where required, we implement appropriate safeguards (such as contractual protections) to help ensure your information remains protected in line with this Privacy Policy.

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will take steps to delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will post the updated policy on this page and revise the "Last Updated" date at the top.

Where appropriate, we may also notify you by email or through a notice on our website. We encourage you to review this page periodically. Continued use of the website after changes become effective constitutes acceptance of the updated policy, to the extent permitted by law.

If you have questions, concerns, or requests regarding this Privacy Policy or our handling of personal information, please contact us:

• Organisation: MME Impact Lab
• Email: info@mmeimpactlab.com
• Address: Kampala, Uganda
• Website: mmeimpactlab.com

You may also use our contact form for general enquiries. We will respond as soon as reasonably possible.