Privacy Policy

Last updated: 26 July 2026

1. Who we are (data controllers)

Your personal data is jointly processed by the following companies acting as data controllers:

For privacy questions, contact info@uta.ug.

2. Personal data we collect

• Identity and contact data: name, email address, telephone number and country.
• Booking data: selected tour, travel dates, number of travellers and special requirements.
• Communications: messages sent through forms or email.
• Technical data: IP address, device and browser information collected through cookies and analytics tools.

3. Purposes and lawful bases

• Contract: handling enquiries and bookings.
• Legitimate interests: improving services, security and customer communication.
• Consent: marketing where you have opted in.
• Legal obligations: accounting, taxation and other statutory requirements.

4. Sharing your data

We may share data with trusted service providers (including hosting, email and payment providers) and local partners in Uganda where necessary to arrange your journey. We do not sell your personal data.

5. International transfers

We operate between the United Kingdom, the European Economic Area and Uganda, so data may be transferred outside your country. We use appropriate safeguards, including contractual protections, where required by applicable law.

6. Retention

We retain personal data only for as long as necessary for the purpose for which it was collected or as required by law, including accounting obligations. It is then securely deleted or anonymised.

7. Your rights

Subject to applicable law, including the GDPR and UK GDPR, you may have the right to:

• access your personal data;
• correct inaccurate information;
• request erasure;
• restrict or object to processing;
• receive portable data;
• withdraw consent at any time; and
• complain to a supervisory authority (the ICO in the UK or your local EEA authority).

8. Submit a rights request

Use this form or email us directly. For your security, a member of our team will verify every request before acting. No data is deleted automatically.

9. Cookies

We use cookies for site functionality and aggregated analytics, such as Google Analytics. You can manage or delete cookies through your browser settings.

10. Children

Our services are not directed to children under 16. We do not knowingly collect children's data without consent from a parent or guardian.

11. Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration and misuse.

12. Changes to this policy

We may update this policy from time to time. The current version and its effective date will always be published on this page.