Data Protection (DPPA 2019)
Wanguza is designed around Uganda's Data Protection & Privacy Act, 2019 — not bolted on afterwards.
Last updated: Draft — pending legal review and NITA-U registration
Note: This statement describes Wanguza’s data-protection posture. Registration with the Personal Data Protection Office (PDPO) at NITA-U and review with counsel are to be completed before public launch.
Controller and processor roles
For parent and pupil data collected through Wanguza, the school is the data controllerand Wanguza is a data processor acting on the school’s documented instructions. We provide a data-processing arrangement to schools on request.
Principles we follow
- Consent-first: granular, unbundled opt-in captured at the point of collection; parents choose exactly what they agree to.
- Purpose limitation: data is used only for the enrollment purposes the parent consented to.
- Data minimisation: we collect only what a school needs to manage enrollment.
- Security: encryption in transit, per-school isolation, access control, and audit logging.
- Rights: access, correction, and deletion are supported, including self-service tools.
Parents’ rights
Parents may withdraw consent at any time (e.g. reply STOP to messages), request a copy of their data, ask for corrections, or request deletion. Schools using Wanguza offer self-service “manage my data” and “delete my data” options on their microsites.
Payments
Payment details are handled by a licensed payment processor and settle directly to the school. Wanguza does not store card or mobile-money credentials.
Contact
Data-protection enquiries: hello@wanguza.com. See also our Privacy Policy.