Privacy Policy

1. Data Controller

Mwesigwa Rukutana & Co. Advocates ("the firm", "we", "us") is the data controller responsible for your personal data. We are registered under the laws of Uganda and our principal place of business is MR Chambers, Levels 2 & 3, Plot 960/961, Najjanankumbi, Entebbe Road, Kampala, Uganda.

If you have questions about how we handle your personal data, please contact us at info@mrcoadvocates.co.ug or by post to the address above.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

• Contact and enquiry data: Name, email address, phone number, and the content of any message you submit through our contact or careers forms.
• Technical data: IP address, browser type, device type, pages visited, and time of visit — collected automatically when you use our website.
• Server log data: Web server logs recording each request made to the site, retained for security and diagnostic purposes.

We do not collect sensitive personal data (such as health, financial account, or criminal record information) through this website.

3. Lawful Bases for Processing

We process your personal data on the following lawful bases under Uganda's Data Protection and Privacy Act, 2019:

• Consent: Where you have given clear consent for us to process your data for a specific purpose (e.g., submitting a contact form or careers application).
• Contract: Where processing is necessary to take steps at your request prior to entering a contract, or to perform a contract with you.
• Legitimate interests: Where processing is necessary for our legitimate interests (e.g., improving the security of our website, responding to your enquiries) and those interests are not overridden by your rights.

4. How We Use Your Data

We use the personal data we collect to:

• Respond to your enquiries or applications
• Improve and secure our website
• Comply with our legal and regulatory obligations
• Detect and prevent fraud or unauthorised access

We do not use your personal data for automated decision-making or profiling.

5. Third-Party Processors

We may share your data with third-party service providers acting as processors on our behalf, including:

• Hosting provider: Our website is hosted by a third-party provider. Server data may be processed in their data centres, which may be located outside Uganda.
• Email service provider: We use a third-party email service to receive and send emails. Content of email communications may be processed by that provider.
• Analytics: We may use privacy-respecting analytics tools to understand how our website is used. See our Cookie Policy for details.

We do not sell, rent, or trade your personal data with third parties for their own marketing purposes.

6. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law:

• Contact and enquiry form submissions: up to 24 months from the date of submission.
• Careers applications: up to 12 months after the conclusion of any recruitment process, unless you request earlier deletion.
• Server logs: up to 90 days, unless required for longer in connection with an active security incident or legal proceedings.

7. Your Rights

Under Uganda's Data Protection and Privacy Act, 2019, you have the following rights in relation to your personal data:

• Access: You may request a copy of the personal data we hold about you.
• Rectification: You may request that inaccurate or incomplete data be corrected.
• Erasure: You may request that we delete your personal data where there is no legitimate reason for us to continue processing it.
• Objection: You may object to processing based on our legitimate interests.
• Withdrawal of consent: Where processing is based on consent, you may withdraw that consent at any time.

To exercise any of these rights, please contact us at info@mrcoadvocates.co.ug. We will respond within 30 days.

8. Cookies

We use cookies on this website. Please see our Cookie Policy for detailed information about the cookies we use and how to manage them.

9. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the date of the most recent revision. Material changes will be notified by posting a prominent notice on this website.

10. Contact Us

If you have concerns about how we handle your personal data, please contact us at info@mrcoadvocates.co.ug. You may also lodge a complaint with the relevant data protection authority in Uganda.