Legal

Privacy Policy

Effective 15 July 2026

This policy explains how we collect, use, store, share and protect personal information when you use this website or contact us through our enquiry form. We take this seriously: protecting people is our business, and that includes protecting your data.

1. Who we are

The data controller is O'TWENTY SMARTBUILD SOLUTIONS LTD (operating as SmartBuild Africa), a company registered in Uganda (Reg. 80034118877009), Bukolwa, Nkumba, Katabi Town Council, Wakiso · P.O. Box 702772, Entebbe. For any privacy question or request, contact us at info@smartbuild-africa.com.

2. The information we collect

When you submit our enquiry form, we collect only the details you choose to provide:

• Your name and email address;
• Your phone or WhatsApp number, if you give it (optional);
• The country you are based in and the service area you are interested in;
• The property location and the details you include in your message (both optional).

We do not use advertising or tracking cookies on this site. If we add website analytics in future, we will update this policy first.

3. Why we use it, and our lawful basis

We use your information only to:

• respond to your enquiry and take the steps you ask us to take before any engagement;
• provide and coordinate the verification or risk-control service you request;
• keep our website secure and prevent fraud and spam.

Where data-protection law applies to you, our lawful bases are your consent (which you give via the form), the steps necessary to enter into or perform a service at your request, and our legitimate interest in securing our systems. You can withdraw consent at any time (see section 8).

4. Who we share it with

We do not sell your personal information, and we never share it for advertising. We share it only where needed to do what you have asked:

• Independent licensed professionals — such as advocates, surveyors or valuers — but only if and when you engage a service that requires them, and only the information they need.
• Our service providers — the hosting, database and email infrastructure that runs this website and our operations (currently Vercel for hosting, Supabase for our database, and Resend for the transactional email that notifies our team of your enquiry), acting under contract on our instructions.
• Authorities or advisers where we are legally required to do so.

Service providers who process data on our behalf

We use a small number of third-party providers to operate this website and handle enquiries. They process your data only on our instructions and only for the purposes below. They do not use it for their own purposes.

• Resend — delivers email notifications when you submit an enquiry. Processes: your name, email address, telephone number, and the content of your message.
• Supabase — hosts the database in which enquiry records are stored. Processes: all information you submit through our forms.
• Vercel — hosts this website and maintains server logs. Processes: your IP address, browser type, and page requests.
• Cloudflare — provides authoritative DNS for our domain, resolving smartbuild-africa.com to our host. Processes: the domain lookups made by your internet provider's resolver when you visit. Cloudflare does not proxy traffic to this site and does not receive your IP address or the content of your requests.

Some of these providers store or process data on servers located outside Uganda. Where this occurs, we take steps to ensure your information remains protected to the standard required by the Data Protection and Privacy Act 2019.

We do not sell your personal data, and we do not share it with developers, agents, sellers, or any party with a commercial interest in your transaction.

5. Where your data is stored

Our database is hosted in the European Union (Supabase, Frankfurt region). If you contact us from outside the EU or Uganda, your information may be transferred to and stored in these locations under our providers' contractual safeguards.

6. How long we keep it

We keep enquiry information for up to 24 months from our last contact with you, unless you become a client — in which case we keep it for the duration of the engagement and for as long as we are required to by law or professional obligation. We delete or anonymise it after that.

7. How we protect it

Your enquiry is written to our database through a secured, server-side process only — the form cannot read or expose other people's submissions. Access is restricted, the database enforces row-level security, and data is encrypted in transit. No system is perfectly secure, but we apply controls appropriate to the sensitivity of the information.

8. Your rights

Subject to the law that applies to you (including Uganda's Data Protection and Privacy Act, 2019 and, where relevant, the UK or EU GDPR), you may ask us to give you a copy of your data, correct it, delete it, restrict or object to its use, or withdraw your consent. To exercise any of these, email info@smartbuild-africa.com. We will respond within the timeframe the applicable law requires.

9. Complaints

If you are concerned about how we handle your data, please contact us first so we can put it right. You also have the right to complain to a data-protection regulator — in Uganda, the Personal Data Protection Office (PDPO); in the UK, the Information Commissioner's Office (ICO); or your local supervisory authority in the EU.

10. Changes to this policy

We may update this policy from time to time. When we do, we will change the effective date at the top of this page.

O'TWENTY SMARTBUILD SOLUTIONS LTD · Reg. 80034118877009 · Bukolwa, Nkumba, Katabi Town Council, Wakiso · P.O. Box 702772, Entebbe · info@smartbuild-africa.com