Legal
Privacy Policy
Dumani Media ("we," "us," "our") respects your privacy. This policy explains what personal data we collect when you use dumanimedia.com, why we collect it, how we use it, and what rights you have over it.
If anything here is unclear, contact us at dumanimedia@gmail.com.
1. What information we collect
We only collect information that you provide directly, or that's generated automatically through normal use of the site. We do not collect more than we need.
| Where | What we collect |
|---|---|
| Contact form (/contact) | Name, email address, business or project name, project type, approximate budget range (optional), your message, and how you heard about us (optional) |
| Newsletter signup (/blog) | Email address only |
| Shop purchases (/shop) | Payment is processed by Stripe and/or our digital product platform (Gumroad or Lemon Squeezy) — we do not directly receive or store your card details. We receive your name, email, and purchase confirmation. |
| WhatsApp links | If you message us via WhatsApp, that conversation is governed by WhatsApp's own privacy policy, not this one |
| Browsing the site | Standard analytics data — pages visited, time on site, approximate location (city/country level), device and browser type. See our Cookie Policy for detail. |
2. How we collect it
We collect information in three ways:
- Directly from you — when you fill in the contact form, subscribe to our newsletter, or make a purchase.
- Automatically — through cookies and analytics tools when you browse the site. See the Cookie Policy for full detail.
- From third parties — our payment processor (Stripe) and digital product platform (Gumroad or Lemon Squeezy) share purchase confirmation data with us once a transaction completes.
3. Why we collect it
We use the information we collect to:
- Respond to your enquiry and discuss a potential project
- Process and deliver a purchase from our shop
- Send the newsletter, if you've subscribed — and only with your explicit consent at signup
- Understand how visitors use our site, so we can improve it
- Meet our legal and accounting obligations — for example, keeping invoice records
We do not use your information for purposes you haven't agreed to, and we do not sell your data to third parties.
4. Third parties we share data with
We work with a small number of trusted service providers to run the website and our business. Each one only receives the data necessary to perform its specific function.
| Service | Purpose | Data shared |
|---|---|---|
| Formspree (or equivalent) | Processing contact form submissions | Name, email, message content, and other form fields |
| Stripe | Processing card payments | Payment details — handled entirely by Stripe, never stored by us |
| Gumroad or Lemon Squeezy | Selling and delivering digital shop products | Name, email, purchase details |
| Analytics provider | Understanding site traffic and usage | Anonymised or pseudonymised browsing data — see Cookie Policy |
| Email service provider (e.g. Brevo, Mailchimp) | Sending the monthly newsletter | Email address only |
We do not share your information with advertisers, data brokers, or any party outside the operational providers listed above.
5. How long we keep your data
- Contact form enquiries: kept for up to 24 months, or until you ask us to delete it, whichever is sooner.
- Newsletter subscribers: kept until you unsubscribe. Every email includes a one-click unsubscribe link.
- Shop purchase records: kept for 7 years, in line with standard accounting and tax record requirements in Uganda.
- Client project files: kept for the duration of our working relationship and a reasonable period after, in case you need to access them again.
6. Your rights
Under Uganda's Data Protection and Privacy Act 2019 — and GDPR, if you're located in the EU — you have the right to:
- Access — request a copy of the personal data we hold about you
- Correction — ask us to correct inaccurate or incomplete data
- Deletion — ask us to delete your data, subject to any legal obligation we have to retain it (for example, invoice records)
- Withdraw consent — unsubscribe from the newsletter at any time, or ask us to stop processing your data for a specific purpose
- Object — object to how we're using your data
To exercise any of these rights, email us at dumanimedia@gmail.com. We'll respond within 30 days.
8. How we protect your data
We take reasonable technical and organisational measures to protect your personal data, including:
- Encrypted connections (HTTPS) across the entire site
- Payment processing handled entirely by Stripe — we never see or store your card details
- Limited access to client and contact data, restricted to the people who need it to do their job
- Working only with reputable, established third-party providers for forms, payments, and analytics
No system is completely secure, but we take data protection seriously and respond quickly if an issue is identified.
9. Children's privacy
Our services are intended for business owners and founders. We do not knowingly collect personal data from anyone under 18. If you believe a child has provided us with personal data, contact us and we will delete it.
10. International data transfers
We work with clients across East Africa and globally. Some of the third-party services we use (Stripe, our analytics provider, our email service provider) may process data outside Uganda. Where this happens, we rely on those providers' own data protection safeguards and compliance frameworks (such as Standard Contractual Clauses for EU data, where applicable).
11. Changes to this policy
We may update this policy from time to time — for example, if we start using a new tool or service. The "last updated" date at the top of this page will always reflect the most recent version. We encourage you to check back periodically.
12. Contact us
If you have questions about this policy or how we handle your data:
Dumani Media
Kampala, Uganda
Other legal pages
See also: Terms of Service · Cookie Policy