1. Legal Basis & Regulatory Framework

Our data collection and processing activities are conducted strictly in compliance with:

• The Data Protection and Privacy Act, 2019 of the Republic of Uganda.
• The Uganda Communications Act and National Information Technology Authority (NITA-U) regulations.
• Applicable bilateral trade frameworks under the East African Community (EAC) Common Market Protocol.

2. Categories of Information We Collect

Depending on the nature of your interaction with our logistics services, we collect:

• Corporate & Contact Identity: Company legal name, Tax Identification Number (TIN), authorized dispatch officers, telephone numbers, and corporate email addresses.
• Freight & Consignment Data: Cargo commodity classifications (e.g. pharmaceutical vaccines, dairy, fresh horticulture), payload tonnage, declared commercial values, temperature parameters (-20 C to +10 C), origin loading points, and destination consignee details.
• Telematics & GPS Telemetry Data: Real-time vehicle coordinates, transit speed, chamber temperature logs, door-opening timestamps, and Electronic Proof of Delivery (ePOD) sign-offs.
• Web Technical Logs: IP address, browser type, device information, and interaction analytics collected through website cookies to enhance user navigation and calculator precision.

3. How We Utilize Your Information

We process collected data exclusively for legitimate logistics operations:

• To generate instant and formal rate quotations, freight contracts, and transport booking orders.
• To coordinate and execute pre-chilled loading, cross-border freight transit, and destination dock delivery.
• To furnish clients with secure 24/7 telematics login credentials for real-time tracking of their assigned vehicle.
• To facilitate statutory customs pre-clearance under Single Customs Territory (SCT) with revenue authorities (URA, KRA, TRA, RRA).
• To generate certified temperature compliance audit reports for pharmaceutical and food safety regulatory inspection.

4. Disclosure & Third-Party Sharing

Kiranda Transporters enforces a strict No-Resale Policy. We do not sell, rent, or lease customer data. Information is disclosed solely to:

• Customs & Revenue Authorities: Uganda Revenue Authority (URA), Kenya Revenue Authority (KRA), Tanzania Revenue Authority (TRA), and Rwanda Revenue Authority (RRA) for lawful border declaration.
• Underwriting Insurers: Bonded transit insurers for the sole purpose of cargo value underwriting and claims validation.
• Consignees & Designated Clearing Agents: Authorized destination receiving officers for seal verification and handover sign-off.

5. Data Security, Storage & Retention

We deploy robust digital safeguards to protect your records:

• Encryption: Telematics feeds and digital records are transmitted over SSL/TLS encrypted channels.
• Retention Period: Commercial shipping records and Electronic Proofs of Delivery (ePOD) are retained for a statutory period of 7 years for tax and legal compliance.
• Pharmaceutical GDP Archives: Certified cold-chain temperature logs are maintained in tamper-evident archives for a minimum of 5 years for World Health Organization and NDA audits.

6. Your Rights & Data Subject Access

Under the Uganda Data Protection and Privacy Act 2019, you have the right to request access to, correction of, or deletion of your commercial personal data held in our systems, subject to statutory customs record retention requirements.