How we handle your personal information in line with GDPR and Uganda data protection law.
GDPR for EU visitors and Uganda’s Data Protection Act (PDPA).
We do not sell or rent your personal information to anyone.
Request access, correction, or deletion by emailing our team.
The summary below is not legal advice — it helps you understand the full policy that follows.
We collect only what we need to run Drate Health, respond to you, and improve our free health education. We do not sell your data. You can ask us to access, correct, or delete your information at any time by emailing our team.
Scroll down for the complete policy
Read each section below for complete details on how Drate Health collects, uses, and protects your information.
Drate Health (“we”, “us”, or “our”) operates dratehealth.org and related services to provide free maternal and family health education. We are committed to protecting your personal data in line with the EU General Data Protection Regulation (GDPR) and the Uganda Data Protection and Privacy Act (PDPA), 2019.
This Privacy Policy explains what information we collect, how we use it, who we share it with, and your rights. By using our website, you acknowledge that you have read this policy.
The data controller responsible for your personal data is Drate Health, Kampala, Uganda. For privacy enquiries or to exercise your rights, email info@dratehealth.org.
We may collect the following categories of information depending on how you use our site:
Under GDPR, we process personal data only where we have a lawful basis:
We use personal data to respond to messages, send newsletters you have opted into, process donations through our payment partners, improve site content and performance, comply with law, and protect the security of our services.
We never sell your personal data to third parties.
We may share data with trusted service providers who assist us (e.g. email marketing, hosting, analytics, payment processors). They process data only on our instructions and under appropriate safeguards. Some providers may be located outside Uganda or the EEA; where required, we rely on standard contractual clauses or equivalent protections.
We keep personal data only as long as needed for the purposes above, or as required by law. Contact form messages are typically retained for up to 24 months unless a longer period is needed for ongoing correspondence. Newsletter data is kept until you unsubscribe.
Depending on your location, you may have the right to access, correct, delete, or restrict processing of your data; to object to certain processing; to data portability; and to withdraw consent at any time. Under Uganda’s PDPA, you may also lodge a complaint with the Personal Data Protection Office.
To exercise your rights, contact info@dratehealth.org. We will respond within one month (or inform you if we need more time).
Our content is intended for parents, caregivers, and health professionals. We do not knowingly collect personal data from children under 16 without parental consent. If you believe a child has provided us data, please contact us so we can delete it.
We may update this Privacy Policy from time to time. The “Last updated” date at the top will change when we do. Continued use of the site after changes constitutes acceptance of the revised policy where permitted by law.
For privacy requests, data access, or complaints under GDPR or Uganda’s PDPA, email us and we will respond within one month. We are happy to explain anything in this policy in plain language.
Governed by: Republic of Uganda · GDPR (EU visitors)