Privacy Policy

1. Information We Collect

Totya Platform collects personal information when individuals interact with the Website or contact the organisation through available communication channels.

Information collected may include:

• Name
• Email address
• Phone number
• Location information
• Messages submitted through contact forms
• Information submitted through safeguarding or reporting forms
• Technical information such as IP address, browser type, or device information

2. How Information Is Used

Information collected through the Website is used for purposes including:

• responding to inquiries
• providing survivor support services
• reviewing safeguarding or misconduct reports
• improving organisational programs
• maintaining website security
• communicating with individuals who contact Totya Platform

3. Safeguarding and Sensitive Information

Individuals may voluntarily submit sensitive information through the Website, including disclosures related to sexual violence or safeguarding concerns.

Totya Platform treats such information with strict confidentiality and limits access to authorised personnel responsible for safeguarding and survivor support.

Where necessary to protect a child or vulnerable person from harm, Totya Platform may share relevant information with appropriate authorities in accordance with Ugandan law and safeguarding obligations.

3. Safeguarding and Sensitive Information

Individuals may voluntarily submit sensitive information through the Website, including disclosures related to sexual violence, abuse, or safeguarding concerns.

Totya Platform treats such information with strict confidentiality and limits access to authorised personnel responsible for safeguarding and survivor support.

Where necessary to protect a child or vulnerable person from harm, Totya Platform will share relevant information with appropriate authorities in accordance with Ugandan law and safeguarding obligations.

More information about how safeguarding reports are reviewed and handled is available in our Safeguarding Reporting Procedures.

5. Emergency Hotline and Support Services

Totya Platform operates an emergency hotline and may provide online support services to assist survivors seeking guidance or help.

Information shared through these services is treated confidentially and handled by authorised personnel trained in safeguarding and survivor support.

More information about emergency assistance is available on the Totya emergency hotline page.

6. Data Sharing

Totya Platform does not sell or trade personal information.

Information may be shared only when necessary to:

• protect a child or vulnerable person from harm
• comply with legal obligations
• cooperate with law enforcement authorities
• deliver survivor support services

7. Third-Party Services

Totya Platform uses third-party services to support the operation of its Website, communication systems, and data management infrastructure.

These services may include website hosting providers, communication platforms, secure data storage providers, analytics tools, or other technology services required to operate the organisation’s digital systems.

Totya Platform uses Microsoft 365 services, including Microsoft Forms, Outlook, SharePoint, and OneDrive, to manage communications, store information, and process certain submissions made through the Website.

Information submitted through the Website may therefore be processed or stored using Microsoft cloud infrastructure in accordance with Microsoft’s data protection and security standards.

More information about Microsoft’s privacy practices is available at Microsoft Privacy Statement .

Third-party providers process information in accordance with their own privacy policies and applicable data protection laws.

8. Data Security

Totya Platform implements appropriate administrative and technical measures to protect personal information from unauthorised access, disclosure, alteration, or misuse.

Sensitive safeguarding information is stored securely and access is restricted to authorised personnel only.

9. Data Retention

Personal information is retained only for as long as necessary to fulfil organisational, safeguarding, legal, or operational requirements.

Safeguarding records may be retained for longer periods where necessary to protect individuals or comply with legal obligations.

10. Your Rights

Under the Uganda Data Protection and Privacy Act, individuals have rights regarding their personal information.

These rights include:

• the right to request access to personal information
• the right to request correction of inaccurate data
• the right to request deletion where appropriate
• the right to object to certain data processing activities

11. Cookies

The Website uses cookies or similar technologies to improve user experience and analyse website traffic.

More information about cookies used on the Website is available in our Cookie Policy.

12. Children’s Privacy

Totya Platform is committed to protecting children and vulnerable individuals.

The Website is not intended to collect personal information from children without appropriate safeguarding procedures.

13. International Users

Although the Website may be accessed internationally, Totya Platform operates primarily within Uganda.

Information submitted through the Website is processed in accordance with Ugandan law.

14. Changes to this Policy

Totya Platform reviews and updates this Privacy Policy periodically to reflect legal, operational, or organisational changes.

Updated versions are published on this page with a revised effective date.

15. Contact Information