Privacy Policy

Trophy Developers Ltd ("Trophy Developers", "we", "us" or "our") respects your privacy and is committed to protecting the personal data entrusted to us. This Privacy Policy explains how we collect, use, store, disclose, transfer and protect personal information when you visit our website, create an account, use Trophy Business Hub, request a proposal, contact us, subscribe to our newsletter, use our digital tools, purchase or enquire about services, or otherwise interact with Trophy Developers.

This Policy applies to our websites, digital platforms, forms, applications, customer portals, marketing systems and related services operated by Trophy Developers. Our principal place of business is Ntinda, Kampala, Uganda.

We process personal data in accordance with applicable privacy and data protection requirements, including the Data Protection and Privacy Act, 2019 of Uganda and the Data Protection and Privacy Regulations, 2021. Where other privacy laws apply to a particular activity or person, we process personal data in accordance with those requirements to the extent they apply.

For personal data collected through Trophy Developers websites, accounts, business systems, enquiries, proposals and services, Trophy Developers generally determines why and how that information is processed and acts as the relevant data controller or data collector, as applicable.

We may use third-party service providers that process personal information on our behalf for defined business purposes. Those providers are expected to process information only for authorized purposes and subject to applicable confidentiality and security obligations.

We collect information according to how you interact with Trophy Developers and the services you choose to use.

• Identity and contact information, including name, email address, telephone or WhatsApp number, job title, organization or business name, business address and country.
• Account information, including login identity, account preferences, organization details, team information, permissions, account activity and information required for authentication and security.
• Enquiry and proposal information, including project scope, budget, requested services, website, goals, requirements, project description and preferred communication methods.
• Commercial information, including proposals, quotations, contracts, invoices, payments, purchases, subscriptions, renewals, support requests and project history.
• Technical information, including IP address, browser type, device characteristics, operating system, approximate location derived from technical information, referral source, page views, session information, timestamps and error logs.

Trophy Developers operates contact forms, proposal request forms, service enquiry and booking forms, Business Hub registration, newsletter subscription forms, Web Optimer and website audit forms, landing-page forms, support and Ask Trophy interactions, project forms, consultation forms and quotation forms.

Information submitted through these forms may be stored in our internal systems and synchronized with authorized service providers used for customer relationship management, email communication, analytics, business operations and marketing administration.

Submitting a contact, proposal, booking, audit, account-registration or service-enquiry form does not by itself subscribe you to marketing emails.

• Responding to enquiries and requests and preparing quotations or tailored proposals.
• Delivering websites, software, hosting, SEO, marketing and other digital services.
• Creating and managing Business Hub accounts, workspaces, authentication and permissions.
• Managing projects, support requests, invoices, payments, subscriptions and renewals.
• Sending account verification, security, transactional, proposal, project and service communications.
• Providing reports, website audits and other digital tools.
• Improving website performance, user experience, service quality and operational reliability.
• Detecting fraud, misuse, abuse and security incidents and maintaining audit records.
• Complying with legal, tax, accounting, regulatory and recordkeeping obligations.
• Managing newsletter subscriptions and marketing preferences where permitted.

Consent: We may process information where you have affirmatively agreed, including newsletter or marketing subscription requests.

Your request: We process information where necessary to prepare a proposal, respond to an enquiry, provide an audit or take other requested steps.

Contract and service delivery: We process information needed to create accounts, deliver services, manage projects, issue invoices and support customers.

Legal obligations: We may process information to comply with financial, tax, accounting, regulatory, security or recordkeeping requirements.

When you create a Trophy Developers or Business Hub account, we may process information necessary to establish and operate the account, including identity and contact information, business and organization details, team membership, access permissions, authentication and security data, project information, activity records, support interactions, payment and renewal information, saved business strategy or configuration information, and connected-service information where integrations are enabled.

Creating an account does not by itself mean that you have subscribed to marketing communications. Marketing subscription processing is handled separately where the registration interface offers an optional marketing choice.

Trophy Developers may send newsletters, business insights, service information, offers, announcements and other marketing communications where you have requested them or provided the necessary permission.

A newsletter subscription requires explicit subscription intent. The newsletter may use double opt-in: after you request a subscription, Mailchimp may initially record your contact as pending and send a confirmation message. Where double opt-in applies, marketing becomes active after you confirm through that message.

A newsletter subscription request is separate from submitting a proposal, creating an account, contacting Trophy Developers or requesting a service.

Trophy Developers uses Mailchimp to manage email audiences, subscription status, marketing communications and related email-marketing functions. Depending on your interaction with Trophy Developers, information synchronized with Mailchimp may include your name, email address, telephone number, company or business name, country, source of your interaction, service category, marketing subscription status, communication preferences and audience tags.

Creating an account does not automatically subscribe you. Submitting a Contact form, Proposal, service enquiry or other enquiry does not automatically subscribe you. Where there is no marketing permission, we will not intentionally change a person into a subscribed marketing contact merely because they submitted another form.

Existing unsubscribe and suppression preferences are respected. Where a person has unsubscribed, we do not use another enquiry or account action as automatic permission to re-subscribe that person.

Marketing communications are different from messages necessary to operate your relationship with Trophy Developers. We may send transactional or operational emails for account verification, password resets, account security, enquiry confirmations, proposals, project communications, requested reports, support, invoices, payments, renewals and important service information.

Transactional communications may continue where reasonably necessary even if you have opted out of marketing communications.

We may use Brevo or another authorized email-delivery provider to send transactional and operational communications. Information provided to such providers is limited to information reasonably necessary to deliver and manage the communication.

Our websites may use cookies, local storage and similar technologies for authentication, account security, form functionality, preferences, analytics and other website functions.

• Essential technologies are required for authentication, security and core website operation.
• Analytics technologies may measure traffic, performance and interactions.
• Preference technologies may remember language or other user choices.
• Marketing technologies, where used, may help measure campaigns or manage marketing interactions.

We may use analytics and measurement technologies, including services such as Google Analytics, to understand how visitors use our websites and digital services, improve website performance and user experience, identify technical problems and measure the effectiveness of services and campaigns.

Some Trophy Developers products, tools or workflows may use automated systems or artificial intelligence to analyze information, generate suggestions, assist with content, evaluate websites, support customer interactions or improve business workflows. Where such functionality processes personal or business information, we seek to limit processing to information reasonably required for the relevant function.

We do not sell your personal data.

We may disclose personal information to authorized recipients where reasonably necessary, including hosting and cloud providers, email and communications providers, Mailchimp, Brevo, analytics providers, payment providers, security and fraud-prevention providers, authentication providers, technology contractors, professional advisers and public authorities where disclosure is legally required.

Some technology providers used by Trophy Developers operate infrastructure outside Uganda. As a result, personal information may be processed or stored in other countries. Where personal data is processed or stored outside Uganda, we take reasonable steps to use service providers and safeguards consistent with applicable data-protection requirements.

We use reasonable technical and organizational safeguards designed to protect personal data against unauthorized access, disclosure, alteration, destruction, loss or misuse.

No internet-connected system can be guaranteed to be completely secure, and we cannot guarantee absolute security.

• Encrypted network connections.
• Secure authentication and password hashing.
• HTTP-only or secure authentication cookies where applicable.
• Role-based and least-privilege access controls.
• Environment-level secret management.
• Audit and application logging.
• Infrastructure monitoring, backups and recovery procedures.
• Security updates and incident-response procedures.

Where we become aware of a personal-data breach, we will investigate and take reasonable measures to contain, mitigate and remediate the incident. Where notification is required by applicable law, we will notify the relevant authority and affected individuals in accordance with applicable requirements.

Retention depends on the account or service state, the purpose for which information is processed and applicable legal or operational obligations.

Subject to applicable law and relevant exceptions, you may have rights to:

• Request information about personal data we hold about you.
• Request access to your personal data.
• Request correction of inaccurate or incomplete information.
• Object to certain processing.
• Request deletion where legally appropriate.
• Withdraw consent where processing depends on consent.
• Object to or stop direct marketing.
• Request information concerning how your data has been processed.
• Raise a complaint regarding the handling of your personal information.

To submit a privacy request, email [email protected]. Please provide enough information for us to identify the relevant account, enquiry, project or record.

We may request additional information where reasonably necessary to verify your identity and protect your information against unauthorized disclosure.

You can stop Trophy Developers marketing emails by using the unsubscribe mechanism included in our marketing communications or by contacting [email protected].

We may retain limited suppression information, such as your email address and unsubscribe status, where necessary to make sure your marketing preference continues to be respected. This suppression record is not treated as permission to resume marketing.

Withdrawing from marketing does not prevent necessary account, security, proposal, transactional, support or service communications.

Our commercial services and Business Hub are intended primarily for businesses, professionals and organizations. We do not knowingly seek to use children's personal information for direct marketing. Where personal information relating to a child or minor is processed, we seek to apply the consent, authorization and protection requirements required by applicable law.

Our website may contain links to third-party websites, platforms or services. Trophy Developers does not control the independent privacy practices of third parties. When you leave our website or independently use a third-party service, that provider's own terms and privacy notice may apply.

Where payment functionality is provided through a third-party payment provider, Trophy Developers may receive transaction references, payment status, payer information or other details necessary to reconcile and manage the transaction. Payment providers may process information under their own privacy policies and regulatory obligations.

We may update this Privacy Policy periodically to reflect changes in our services, technologies, processing activities, legal requirements or security and operational practices. When we make material changes, we will update the Last updated date and, where appropriate, provide additional notice.

If you have concerns about how Trophy Developers handles your personal information, we encourage you to contact us first so that we can investigate and respond. You may also have the right to submit a complaint to the Personal Data Protection Office (PDPO) of Uganda or another competent supervisory authority where applicable.

For privacy, personal-data, legal or data-protection enquiries, contact Trophy Developers Ltd at Ntinda, Kampala, Uganda.

Email [email protected] for access, correction, deletion, objection or other privacy requests.