Privacy Policy
How Wanguza handles personal data on the platform.
Last updated: Draft — pending legal review before public launch
Note: This is a working draft to be reviewed and finalised with qualified Ugandan counsel before public launch. It describes Wanguza’s intended practices.
Who we are
Wanguza (“we”, “us”) provides enrollment and marketing software to schools. For data a school collects about parents and pupils through Wanguza, the school is the data controller and Wanguza acts as a data processor on the school’s instructions. For account data we collect directly from school staff, Wanguza is the controller.
Information we process
- Account data: name, email, phone, role, school, and login credentials (stored hashed).
- School-provided contact data: parent/pupil names, phone numbers, source, pipeline stage, consent records, and messages.
- Usage and security data: log-in activity, device/IP, and audit logs used to keep accounts secure.
- Payment data: handled by our licensed payment processor; Wanguza does not store card or mobile-money credentials.
How we use it
- To provide the service: capture leads, run consented messaging, manage the enrollment pipeline, and process school payments.
- To secure accounts: authentication, lockout protection, and audit trails.
- To support and improve the product, and to communicate with account holders.
Consent & lawful basis
Marketing messages to parents are sent only on the basis of granular, unbundled consent captured at the point of lead collection, consistent with Uganda’s Data Protection & Privacy Act, 2019. Parents can withdraw consent at any time (for example by replying STOP) and exercise their data rights.
Data sharing
We share data only with sub-processors needed to run the service (e.g. hosting, SMS/WhatsApp delivery, and payment processing) under appropriate agreements, and where required by law. We do not sell personal data.
Security & retention
Data is encrypted in transit, isolated per school (multi-tenant), and access-controlled. We retain personal data for as long as needed to provide the service and meet legal obligations, then delete or anonymise it.
Your rights
Parents and users may request access, correction, or deletion of their data. School-collected data is also manageable through each school’s self-service tools. Contact hello@wanguza.com for any privacy request.
Contact
Questions about this policy: hello@wanguza.com. See also our Data Protection (DPPA) statement.