Privacy Policy

About this policy

The Muyi Group is a strategic advisory firm registered in Uganda. We work with corporates, foundations, impact investors, civil society organisations, and public institutions across Africa and beyond. This policy explains what personal information we collect when you visit themuyigroup.com or get in touch with us, why we collect it, how we use it, and the rights you hold over it.

We have written this policy in plain language because we want you to actually read it. Where the law requires specific terms, we have included them; where it does not, we have kept the prose direct.

This policy applies to information collected through our website. It does not cover information you share with us as a client under a separate engagement letter or services agreement, which is governed by the confidentiality terms of that agreement.

Who we are

The Muyi Group is the data controller for personal information collected through this website. That means we are responsible for deciding what to collect, what to do with it, and how to protect it.

Contact for privacy enquiries: hello@themuyigroup.com

If your enquiry concerns this policy, your personal data, or a request to exercise your rights, please mark the subject line “Privacy enquiry” so we can route it to the right person quickly.

What we collect, and when

When you fill in our contact form

Our contact form asks for the following:

• Your first name, last name, and email address (required)
• Your organisation and your role (optional)
• The type of organisation you represent (optional)
• A short description of what you are navigating
• Your timeline and the services you are interested in (optional)

Submissions are sent directly to our team inbox at hello@themuyigroup.com. They are not stored in a database on the website itself, and they are not pushed into a separate customer relationship system at this time.

When you subscribe to our newsletter

Our newsletter signup, located in the site footer, asks only for your email address. We use this address to send you the Briefings and occasional updates from the firm. You can unsubscribe at any time using the link in any email we send.

When you simply visit the site

Like most websites, ours collects a small amount of technical information automatically when you visit. This includes:

• Server logs held by our hosting provider, which record information such as your IP address, browser type, and the pages you visit. These logs help keep the site secure and running properly.
• Analytics data collected through Google Analytics, which we use to understand which content is being read and how visitors arrive at the site. We do not use analytics to identify individuals.
• A small number of standard cookies set by WordPress (the platform our site is built on). For ordinary visitors, this is limited to a session identifier; cookies for logged-in users apply only to our internal team.

Why we collect this information

Under the laws that apply to us, including Uganda’s Data Protection and Privacy Act 2019 and the European Union’s General Data Protection Regulation, we are required to have a lawful reason for processing your personal information. Our reasons are as follows:

• To respond to your enquiry. When you contact us through the form, we process your information because it is necessary to respond to your request and, where relevant, to take steps toward a possible engagement. This is what the GDPR refers to as our “legitimate interests” and your request to be in touch with us.
• To send you the newsletter. When you subscribe, we process your email on the basis of your consent. You can withdraw that consent at any time.
• To run and improve the site. We process server logs and analytics data on the basis of our legitimate interest in keeping the site secure, understanding how it is used, and improving the work we publish.
• To meet legal and professional obligations. Where we are required to retain certain records for tax, regulatory, or professional purposes, we do so on the basis of legal obligation.

Who we share your information with

We do not sell your personal information. We do not share it with third parties for their own marketing purposes. We do, however, work with a small number of service providers who process information on our behalf so that the website and our communications can function. They are:

• WordPress — our web hosting provider, which stores the website and its server logs.
• Mailchimp — the platform we use to manage and send our newsletter. Mailchimp is operated by Intuit Inc. and is based in the United States.
• Google — we use Google Fonts to display the typography on the site, and Google Analytics to understand site usage. We may, in the future, embed YouTube videos in our editorial content; YouTube is also a Google service.

We may also share information where we are required to do so by law, by a court order, or by a regulator with proper authority. If that happens, we will share only what is required.

International data transfers

Some of the providers listed above are based outside Uganda, the United Kingdom, and the European Union. In particular, Mailchimp and Google process information in the United States.

Where personal information is transferred outside its country of origin, we rely on the safeguards put in place by these providers, which include the European Commission’s Standard Contractual Clauses and equivalent mechanisms. You can find more detail in the privacy notices of each provider.

How long we keep your information

We hold personal information only for as long as we genuinely need it.

• Contact form enquiries: Where an enquiry leads to an engagement, we retain the related correspondence for the duration of the engagement and for seven years afterwards, in line with standard professional and tax record-keeping practice. Where an enquiry does not lead to an engagement, we retain it only as long as is reasonably necessary to respond and to maintain a record of our discussions, and we delete it when it no longer serves that purpose.
• Newsletter subscribers: We retain your email address for as long as you remain subscribed. When you unsubscribe, we remove your address from our active list.
• Server logs and analytics: These are retained for the periods set by our hosting and analytics providers, typically a matter of months.

Your rights

You have meaningful rights over your personal information. Depending on where you are and which law applies, these include:

• The right to ask what personal information we hold about you, and to receive a copy of it.
• The right to ask us to correct information that is inaccurate or incomplete.
• The right to ask us to delete your information, where there is no good reason for us to continue holding it.
• The right to object to our processing of your information, or to ask us to restrict it.
• The right to withdraw your consent, where we are processing on the basis of consent (for example, the newsletter).
• The right to lodge a complaint with a data protection authority. In Uganda this is the Personal Data Protection Office; in the European Union it is the supervisory authority of your country.

To exercise any of these rights, please write to us at hello@themuyigroup.com. We will respond within the timeframes set by the applicable law, which is generally one month.

Cookies and similar technologies

Cookies are small text files placed on your device when you visit a website. We use them sparingly:

• Strictly necessary cookies set by WordPress to allow the site to function. For most visitors, this means a single session cookie; additional cookies apply only when our team logs in to manage the site.
• Analytics cookies set by Google Analytics, which help us understand how visitors use the site.

Our site also loads a small number of resources from third-party services that may set their own cookies or log technical information when your browser requests them. These are Google Fonts (for typography), jsDelivr (for the Bootstrap framework), and unpkg (for a smooth-scrolling library). If we add embedded videos in future, the video provider (typically YouTube) will set its own cookies when you play a video.

You can control cookies through your browser settings, including blocking or deleting them. Doing so may affect how the site functions.

Children

This site is intended for a professional audience. We do not knowingly collect personal information from children, and none of our forms are designed to do so. If you believe a child has provided information to us, please contact us so we can remove it.

How we protect your information

We take reasonable technical and organisational measures to protect the information we hold. Our website is served over an encrypted connection, access to our team inbox is restricted, and we work with reputable service providers. No system is ever entirely secure, but we treat the information you share with us with the seriousness our work demands.

Changes to this policy

We may update this policy from time to time, for example when our tools change or when the law evolves. When we make material changes, we will update the “last updated” date at the top of this page and, where appropriate, draw the change to your attention.

Contact us

If you have any question about this policy, or about how we handle your information, please write to us at hello@themuyigroup.com. We are also happy to receive correspondence by post; please get in touch by email first and we will share an address.

The Muyi Group is in the process of registering with Uganda’s Personal Data Protection Office. Our registration details will be added to this page once they are issued.