Effective Date: [25/10/2025]
COMPLIANCE NOTICE: This policy is designed to comply with the Data Protection and Privacy Act, 2019 and the Data Protection and Privacy Regulations, 2021 of the Republic of Uganda. We encourage all users to read this carefully to understand their data privacy rights.
1. Introduction
This Privacy Policy explains how Ifindar.com ("we," "us," or "our") collects, uses, processes, stores, and discloses your personal data when you use our job portal and related services (the "Services") primarily operating in Uganda. We are committed to protecting your privacy and ensuring compliance with the local data protection framework.
2. Data Controller and Data Protection Officer (DPO)
- Data Controller: The entity responsible for the personal data collected is [Ifindar /Ifindar.com].
- Email: [email protected]
- Data Protection Officer (DPO): [Insert Name/Title of DPO]. You can contact our DPO for all data privacy concerns.
- PDPO Registration: [Your Company Name/Ifindar.com] is registered with the Personal Data Protection Office (PDPO) under registration number [Insert PDPO Registration Number].
3. Personal Data We Collect
We collect and process various categories of personal data, which we classify based on the type of user:
A. For Job Seekers/Applicants
- Identification Data: Name, age, gender, nationality, email address, physical address, phone number.
- Professional/Educational Data: Information contained in your CV/Résumé, including employment history, educational qualifications, skills, professional certifications, and current/expected salary.
- Login Data: Username and hashed password.
- Sensitive Personal Data: We generally do not intentionally collect Sensitive Personal Data (such as health, religion, or political opinions) unless it is explicitly provided by you (e.g., in a CV) and is relevant to your job application (e.g., disability status for reasonable accommodation) and collected with your explicit consent.
B. For Recruiters/Employers
- Company Data: Company name, registration details, physical address, business email, and phone number.
- Contact Person Data: Name, job title, work email, and work phone number of the representative managing the account.
- Login Data: Username and hashed password.
C. Automatically Collected Data (All Users)
- Technical Data: IP address, device type, browser type and version, operating system, and unique device identifiers.
- Usage Data: Pages visited, time spent on the site, links clicked, and search queries (collected via cookies and tracking technologies).
4. How We Collect Your Personal Data (Principle of Direct Collection)
In accordance with the Data Protection and Privacy Act, 2019, we primarily collect personal data directly from you when you:
- Register for an account (as an Applicant or Recruiter).
- Upload your CV and complete your profile.
- Apply for a job posting.
- Post a job vacancy (as a Recruiter).
- Communicate with us via email or customer support channels.
5. Purpose and Legal Basis for Processing
We collect and process your personal data based on the following legal grounds and for the specified purposes:
| Processing Activity |
Purpose of Processing |
Legal Basis (DPPA, 2019) |
| Storing Job Seeker Profiles/CVs |
To allow Recruiters to search for and view suitable candidates for job roles. |
Consent: Explicit consent provided upon uploading a CV. |
| Sharing Applicant Data with Recruiters |
To facilitate job applications and recruitment processes. |
Consent: Explicit consent provided when applying for a specific job. |
| Processing Recruiter/Employer Data |
To provide them with access to the job posting platform and candidate database. |
Performance of a Contract: Necessary to provide the contracted Services. |
| Sending Service/System Emails |
To notify users of account updates, security alerts, and application status. |
Legitimate Interest/Performance of a Contract: Essential for platform functionality and security. |
| Analyzing Usage Data |
To improve and optimize the performance and usability of the Site. |
Legitimate Interest: Necessary for improving and marketing our business. |
6. Disclosure and Sharing of Your Personal Data
We will not sell, rent, or trade your personal data for commercial purposes. Your data is shared only for the purpose of operating the Service:
- With Recruiters/Employers: If you are a Job Seeker, the personal data in your profile and CV is shared with the specific Recruiter(s) to whom you apply. If you set your CV to 'searchable', it will be accessible by all registered Recruiters on the platform.
- With Service Providers: We use third-party service providers (e.g., hosting providers, cloud storage, payment processors) to operate the Site. These providers are bound by contract to process data only on our instruction and must maintain adequate security safeguards in compliance with law.
- Legal and Regulatory Requirements: We may disclose data if required by law (e.g., in response to a court order or regulatory inquiry from the PDPO or other competent authority).
Cross-Border Data Transfer
If we transfer or store your personal data outside of (e.g., using international cloud services), we shall ensure that the receiving jurisdiction has data protection laws that are at least equivalent to the protection provided under the Data Protection and Privacy Act, 2019, or we will implement appropriate safeguards and secure your explicit consent for such transfer.
7. Data Security and Integrity
We implement appropriate technical and organizational measures to safeguard the integrity of your personal data and prevent its loss, unauthorized access, destruction, or unlawful processing. Measures include:
- Data encryption (e.g., SSL/TLS) for data transmission.
- Secure storage of data (e.g., hashing of passwords).
- Restricted access to personal data for authorized personnel only.
Breach Notification: In the event of a reasonable belief that a personal data breach has occurred, we will notify the Personal Data Protection Office (PDPO) and the affected Data Subject(s) without undue delay, as required by law.
8. Data Retention
We will retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected, including for the purpose of satisfying any legal or accounting requirements.
- Job Seeker Data: We will generally retain your CV and profile data until you choose to delete your account or if your account remains inactive for a period of [Specify Period, e.g., 2 years].
- Recruiter Data: Account and transactional data will be retained for [Specify Period, e.g., 7 years] to comply with financial and legal obligations.
9. Your Data Privacy Rights (Data Subject Rights)
Under the Data Protection and Privacy Act, 2019, you have the following rights regarding your personal data. You can exercise these rights by contacting our DPO:
- Right of Access: To request confirmation that we hold your personal data and to request a copy of that data.
- Right to Correction/Rectification: To request that we correct any inaccurate, irrelevant, excessive, or unlawfully obtained personal data.
- Right to Destruction/Erasure: To request that we destroy or delete your personal data where we no longer have a lawful ground to retain it.
- Right to Prevent Processing: To object to the processing of your personal data where it is likely to cause substantial damage or distress.
- Right to Lodge a Complaint: To lodge a complaint directly with the Personal Data Protection Office (PDPO) if you believe we have violated the Act.
We will respond to your request promptly, and in any event, not later than thirty (30) days after receiving the request.
10. Changes to this Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Effective Date" at the top. We may also notify you via email or through an in-site alert.
11. Contact Us
If you have any questions, comments, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection Officer at:
