Legal
Privacy policy
How we handle your personal information when you use Amdern Properties.
Who we are
AMDERN PROPERTIES SMC LIMITED is a Ugandan real-estate platform operating under the laws of the Republic of Uganda. For privacy-related matters you may contact our Data Protection Officer at dpo@amdernproperties.ug or by post at Plot 1, Kampala Road, Kampala, Uganda. This policy explains how we collect, use, store and protect your personal data in line with the Uganda Data Protection and Privacy Act, 2019 (the "Act").
Information we collect
We collect only the data necessary to operate the platform (Article 6 — Data minimisation). This includes: • Identity data: your name, email address, and phone number when you register or contact an agent. • Profile data: your role (seeker, owner, agent, developer), avatar, and saved properties/alerts. • Property data: listings you submit (including photos, location, and price). • Usage data: pages visited, searches performed, and property views (via cookie identifiers, never directly tied to your identity unless you are signed in). • Transaction data: any payments processed through our partners.
How we use your information
We process your personal data only where we have lawful basis under the Act: • Contract performance (Article 5): to create and manage your account, match you with listings, and deliver services you request. • Legitimate interests (Article 6): to improve the platform, prevent fraud, and send you service-related notifications. • Legal obligation (Article 7): to comply with Ugandan tax, anti-money-laundering, and dispute-resolution laws. • Consent (Article 9): to send you marketing communications, which you can withdraw at any time. We retain data only as long as necessary for the purposes above and in accordance with legal retention periods (typically 7 years for financial records).
Sharing your data
We do NOT sell your personal information. We share it only with: • Property agents and developers when you explicitly contact them about a listing — they receive only the details necessary to respond to your enquiry. • Trusted service providers (payment processors, email delivery, cloud hosting) who are bound by confidentiality agreements and process data only on our instructions. • Authorities when required by law — e.g., court orders, tax authorities, or law-enforcement requests, but only to the extent legally required.
Cookies and tracking
We use only essential cookies: a session cookie to keep you logged in, a cookie to remember your currency and language preferences, and a cookie to track your recently viewed properties (stored locally on your device). We do not use advertising-tracking or third-party profiling cookies. You can clear or block cookies in your browser, though this may affect site functionality.
Your rights under the Act
You have rights under the Uganda Data Protection and Privacy Act, 2019: • Right to be informed — this policy explains what we do. • Right of access (Article 10) — request a copy of your personal data via GET /api/user/me/data. • Right to rectification — update inaccurate data in your account settings. • Right to erasure (Article 12) — request deletion or anonymisation via DELETE /api/user/me/data. • Right to data portability — receive your data in a structured, machine-readable format. • Right to object — opt out of marketing at any time. • Right to lodge a complaint — contact the Office of the Personal Data Protection Commissioner. To exercise any of these rights, contact us at dpo@amdernproperties.ug.
Data security and storage
Your data is stored on secure PostgreSQL servers hosted in data centres compliant with international security standards. Passwords are hashed with bcrypt (12 rounds). All traffic between your browser and our servers uses HTTPS/TLS. Access to personal data is restricted to authorised staff on a need-to-know basis. Where data is transferred outside Uganda (e.g., to cloud providers), we ensure equivalent protection through contractual safeguards.
Changes to this policy
We may update this policy to reflect changes in our practices or legal requirements. When we do, we will post the updated policy here with a revised 'Last updated' date. Significant changes will be notified to you via email or an in-site notice.