Privacy Policy

Afuelo Ltd is the data controller for personal data processed on the Platform. We are registered with Uganda's Personal Data Protection Office and process personal data in accordance with the Data Protection and Privacy Act 2019 (“the Act”). Contact for all privacy matters: desk@afuelo.com.

Account data — name, work email, and password (stored only as a salted cryptographic hash) when you create an account or claim a listing. Inquiry data — the details you submit through RFQ, JV-interest, contact, or report forms. Usage data — profile-level events such as views and search appearances, collected to show suppliers how their listing performs; these are tied to companies, not to visitor identities. We do not use third-party advertising trackers.

Supplier profiles describe companies, not private individuals: registered names, registration and verification status, categories, districts, and company-provided descriptions. This information is compiled from public registers and publications or submitted by the company itself, and we record the provenance of each element. Where a public record incidentally identifies an individual (for example a named company contact in a public filing), we do not publish it: introductions are relayed through the Afuelo desk and contact details are never displayed publicly.

We process account and inquiry data to provide the services you request (contract performance and consent), and company-level public-register data on the basis of legitimate interest in an accurate, transparent supplier directory — an interest we balance against the rights of any individuals concerned. We process security and audit records to meet our legal obligations and to protect the Platform.

Inquiries are shared with the company you ask to be introduced to (or relayed by the desk where a listing is unclaimed). We use vetted processors for hosting, database, and email delivery under agreements consistent with the Act; where processing occurs outside Uganda we take the safeguards the Act requires. We do not sell personal data. We disclose data where the law requires it.

Account data is kept while your account is active; inquiry records are kept as long as needed to service the introduction and meet audit obligations; we delete or anonymize data that is no longer needed. Passwords are hashed, sessions are cryptographically signed, access is role-restricted, and administrative actions are logged.

Under the Act you may request access to, correction of, or deletion of your personal data, object to or restrict processing, and withdraw consent where processing is based on it. Companies may likewise correct or remove their listings (see the Disclaimer). Write to desk@afuelo.com — we respond within the timelines the Act sets. If you are unsatisfied, you may lodge a complaint with the Personal Data Protection Office (pdpo.go.ug).

We use only the cookies necessary to operate the Platform, such as the signed session cookie that keeps you logged in; no advertising or cross-site tracking cookies are set. We may update this Policy; the date above reflects the current version.