x
Talk to Us Talk to Us
breadcrumb

Privacy Policy

  • Home
  • / Privacy Policy
star
doot

Last updated: 6 August 2026

The Tunnel Digital Agency (“we”, “us”) is a digital agency trading in Kampala, Uganda, from 3rd Street, Kyebando, Kampala, Uganda. This policy explains what personal information we collect, why we collect it, and what you can do about it.

We handle personal data in line with the Data Protection and Privacy Act, 2019 and the Data Protection and Privacy Regulations, 2021, which are overseen by the Personal Data Protection Office (PDPO) under NITA-U.

What We Collect

We only collect what we need to answer you and do the work.

  • Details you type into our contact or newsletter forms: your name, email address, phone number and the message or service you select
  • Information you give us during a project, which may include access credentials, brand files, customer lists or business documents
  • Standard technical information your browser sends when you visit, such as IP address, device type and pages viewed

We do not collect special categories of personal data, and we do not knowingly collect information from children.

Why We Collect It

  • To reply to your enquiry and prepare a quotation
  • To deliver work you have engaged us for
  • To issue invoices and meet tax and record-keeping obligations, including URA requirements
  • To send you updates only where you asked to receive them

We do not sell your data, and we do not share it with advertisers.

Third Parties That Process Data For Us

Our website forms are handled by Formspree, which receives and forwards form submissions to us. Our site loads fonts from Google Fonts, which means Google receives your IP address when a page loads. Our website is hosted by a third-party hosting provider. Where a project involves payment, mobile money transactions are processed by MTN Mobile Money or Airtel Money under their own terms.

Some of these providers are based outside Uganda, which means your data may be processed abroad. We use established providers that apply their own security and data-protection standards.

How Long We Keep It

Enquiries that do not become projects are kept for up to two years, in case you come back to us. Project records and invoices are kept for at least seven years, because tax and accounting rules require it. Newsletter subscriptions are kept until you unsubscribe.

Your Rights

Under the Data Protection and Privacy Act, 2019 you may ask us to show you what we hold about you, correct it if it is wrong, delete it where we have no legal reason to keep it, or stop using it for a particular purpose. You may also withdraw consent at any time.

Email info@tunneldigitalagency.com and we will respond within a reasonable period. If you are not satisfied with our response, you may complain to the Personal Data Protection Office.

Security, Honestly Stated

We use HTTPS, keep access to client data limited to people working on your project, and hand over credentials securely at the end of an engagement. No system is perfectly secure, and we will not claim otherwise. If a breach affects your data, we will tell you and notify the PDPO as the law requires.

Cookies

This site uses only what is needed to make pages work and to load fonts and icons from external providers. You can block or delete cookies in your browser settings; the site will still function.

Changes

If we change this policy we will update the date at the top of this page. Material changes affecting active clients will be sent by email.

Contact Us

If anything here is unclear, ask us before you commit — we would rather explain it now than argue about it later.