Privacy Policy

The Central Organisation of Free Trade Unions (COFTU)

Effective Date: 13th December 2026
Last Updated: 13th December 2026

1. Introduction

The Central Organisation of Free Trade Unions (COFTU) is committed to protecting the privacy and personal data of users of its website (www.coftu.ug).

This Privacy Policy explains how COFTU collects, uses, stores, shares, and protects personal data in accordance with the Data Protection and Privacy Act, 2019 of Uganda, and applicable regulations.

By accessing or using COFTU’s website or portal, you agree to the practices described in this Privacy Policy.

2. Data Controller

For purposes of data protection laws, the Central Organisation of Free Trade Unions is the Data Controller.

Contact details:
Central Organisation of Free Trade Unions
Plot 49, Ntinda Road, Ntinda, Kampala.
P.O. Box 11215, Kampala.
Email: info@coftu.ug
Website: www.coftu.ug

3. Personal Data We Collect

COFTU may collect the following categories of personal data:

3.1 Professional and Registration Information

  • Full name
  • TIN
  • Professional Affiliates
  • Qualifications and training history
  • Membership

3.2 Account and Contact Information

  • Email address
  • Telephone number
  • Username and password (encrypted)
  • Physical address

3.3 System and Technical Information

  • IP address
  • Browser type and version
  • Device information
  • Login activity and audit logs

3.4 Uploaded Documents

  • Academic certificates
  • Identification documents
  • Supporting registration or licensing documentation
4. Purpose of Data Collection

COFTU collects and processes personal data for the following purposes:

  • Communication with users (notifications, OTP verification, reminders)
  • Compliance with statutory and regulatory obligations
  • Website and system administration, security, and improvement
5. Legal Basis for Processing

COFTU processes personal data based on one or more of the following lawful bases:

  • Performance of a statutory function under the Act
  • Compliance with legal and regulatory obligations
  • Consent provided by the data subject (where applicable)
6. Public Disclosure of Information

Certain organizational and professional information (such as name, registration details, affiliation status, and validity) may be made publicly accessible under the Central Organization of Free Trade Unions (COTFU), strictly in accordance with applicable data protection laws and Personal Data Protection Office (PDPO) guidelines.

Sensitive personal data is not disclosed to the public.

7. Data Sharing and Disclosure

COTFU does not sell, trade, or commercially exploit personal data.

Personal data may be shared only with the following parties:

  • Authorized COTFU staff and system administrators, solely for official and operational purposes
  • Government authorities or regulatory bodies, where disclosure is required by law
  • Service providers engaged to support system hosting, maintenance, or security, under strict confidentiality and data protection agreements
  • Development partners or affiliated organizations, strictly within the scope of projects and in accordance with applicable agreements and data protection guidelines
8. Data Storage and Security

COFTU implements appropriate technical and organizational security measures, including:

  • Secure cloud hosting
  • Encrypted passwords and authentication mechanisms
  • Role-based access controls
  • Secure backups and disaster recovery procedures
  • Audit logs and monitoring

Personal data is stored only for as long as necessary to fulfill its intended purpose or as required by law.

9. Cookies and Analytics

The COFTU website may use cookies and similar technologies to:

  • Improve website functionality
  • Enhance user experience
  • Collect anonymous usage statistics

Users may control cookies through their browser settings.

10. Data Subject Rights

In accordance with the Data Protection and Privacy Act, 2019, data subjects have the right to:

  • Access their personal data
  • Request correction of inaccurate or incomplete data
  • Object to processing in certain circumstances
  • Request deletion of personal data where legally permissible
  • Withdraw consent where processing is based on consent

Requests may be submitted to COFTU using the contact details provided above.

11. Data Retention

COTFU retains personal data:

  • For as long as a professional or facility remains registered or licensed
  • As required to meet statutory, audit, or regulatory obligations
  • In accordance with approved records retention schedules
12. Third-Party Links

The COFTU website may contain links to third-party websites. COFTU is not responsible for the privacy practices or content of such external sites.

13. Changes to This Privacy Policy

COFTU may update this Privacy Policy from time to time. Any changes will be published on the website with an updated effective date.

Users are encouraged to review this policy periodically.

14. Contact Us

For questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact:

The Central Organisation of Free Trade Unions (COFTU)
Email: info@coftu.ug
Website: www.coftu.ug