Privacy Policy

Evidence and Methods Lab (EML) · Version 1.0 · November 2026

Evidence and Methods Lab (EML) values personal data and privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal data.

1. Definitions

• Personal Data: Information that identifies or can be used to identify a person (e.g., name, contact info, financial data).
• Company: Evidence and Methods Lab platform, web portal, or services provided.
• User: Anyone who accesses the Platform.

2. Legal basis for data processing

We collect and process your data based on:

• Your consent (e.g., signing up or applying to be listed).
• Legal obligations (e.g., AML/KYC regulations).
• Our legitimate interests (e.g., assessing the level of public knowledge, awareness and participation in national affairs, developing educational and communication tools etc).
• Contractual necessity (e.g., providing services requested for by clients).

3. Data we collect

We may collect the following:

a) Personal Identification Data

• Full name
• Nationality
• Age/Date of birth
• Address
• Gender
• Phone number
• Email address

b) Organizational Data

• Organization name
• Business registration information
• Organization governing documents – Memorandum and Articles of Association

c) Technical & Usage Data

• IP address
• Device/browser info
• Login timestamps
• Location (if enabled)

4. How we use your data

We use your data to:

• Develop tools and platforms needed to address a need
• Gather public feedback
• Initiate public conversations and engagements
• Collect evidence needed for research and advocacy campaigns
• Engage relevant institutions to act on matters of public interest
• Guide development of evidence-based solutions
• Improve user experience and develop new services

5. Data sharing and disclosure

We may share your data with:

• Relevant public institutions
• Regulatory bodies if required by law
• Key stakeholders on issues that affect the general public (with your consent)

6. Data security

We implement industry-standard safeguards including:

• Encrypted storage and data transmission
• Role-based access controls
• Secure server environments
• Multi-factor authentication

However, no system is 100% secure. Users must also protect their login credentials.

7. Data retention

We retain your data only as long as necessary to:

• Fulfill the purposes listed above
• Comply with applicable laws
• Resolve disputes

8. Your rights

Under the Uganda Data Protection and Privacy Act, you have the right to:

• Access your personal data
• Correct inaccurate data
• Withdraw consent at any time
• Request deletion of data (subject to legal exceptions)
• Object to certain processing (e.g., for direct marketing)

9. Cookies & tracking

We use cookies and similar technologies to:

• Maintain your session
• Improve Platform functionality
• Monitor usage patterns

You can control cookies via your browser settings.

10. Children’s privacy

EML may collect limited personal data of children under 18 years old for purpose of collecting voices of the younger population and developing products such as educational material, gamified public information whose target audience is children below 18 years. This data such as name, date of birth, and education needs is provided by a parent or legal guardian and is used only for lawful recordkeeping and regulatory compliance.

We do not directly collect data from children, nor do we use their data for marketing or profiling. If we learn that we have inadvertently collected a child’s data without proper consent, we will delete it promptly.

Parents or guardians may request access to, correction, or deletion of their child’s data by contacting us.

11. Changes to this policy

We may update this Privacy Policy occasionally. Material changes will be notified via email or official communication through our social media platforms including the EML website.