Your Data Rights

1. Right to Information and Access

1.1 Right to Be Informed

You have the right to know:

• What personal data we collect about you
• Why we collect and use your data
• Who we share your data with
• How long we keep your data
• Your rights regarding your data

1.2 Right of Access

You have the right to request:

• Confirmation that we are processing your personal data
• Access to your personal data we hold
• Information about how we process your data
• A copy of your personal data in a structured format

2. Right to Rectification and Correction

2.1 Correcting Inaccurate Data

You have the right to:

• Have inaccurate personal data corrected
• Have incomplete personal data completed
• Update your profile information at any time
• Correct property listing information

2.2 How to Make Corrections

• Self-Service: Update your profile in your account dashboard
• Email Request: Send corrections to info@ojjorealestate.com
• Phone Support: Call +256 778162705

3. Right to Erasure (Right to be Forgotten)

3.1 When You Can Request Deletion

You can request deletion of your personal data when:

• The data is no longer necessary for the original purpose
• You withdraw consent and there's no other legal basis
• You object to processing and there are no overriding legitimate grounds
• Your data has been unlawfully processed
• You want to delete your account entirely

3.2 Limitations

We may retain data when required for:

• Legal compliance (tax records, anti-money laundering)
• Establishing, exercising, or defending legal claims
• Public interest or historical research purposes
• Fraud prevention and security

4. Right to Restrict Processing

4.1 When You Can Restrict Processing

You can request to limit how we use your data when:

• You contest the accuracy of the data
• Processing is unlawful but you don't want deletion
• We no longer need the data but you need it for legal claims
• You object to processing pending verification of legitimate grounds

4.2 What Restriction Means

When processing is restricted, we will:

• Store your data securely
• Not use it for other purposes
• Only process with your consent or for legal claims
• Inform you before lifting the restriction

5. Right to Data Portability

5.1 What Data You Can Export

You have the right to receive your personal data in a portable format, including:

• Profile information and account details
• Property listings and descriptions
• Search history and preferences
• Communication history
• Transaction records

5.2 Data Format

We provide data in commonly used formats:

• JSON format for structured data
• CSV files for tabular data
• ZIP archives for images and documents
• PDF reports for transaction history

6. Right to Object

6.1 Marketing Communications

You can object to:

• Email marketing and newsletters
• SMS marketing messages
• Promotional phone calls
• Targeted advertising

6.2 Profiling and Automated Decision-Making

You have the right to object to:

• Automated property recommendations
• Algorithmic pricing suggestions
• Credit scoring and risk assessment
• Behavioral profiling for marketing

6.3 How to Object

• Unsubscribe Links: Use links in emails and SMS
• Account Settings: Adjust preferences in your dashboard
• Contact Us: Email privacy@ojjorealestate.com

7. Rights Related to Automated Decision-Making

7.1 What This Includes

You have rights regarding automated decisions that significantly affect you:

• Loan or credit approval decisions
• Property valuation algorithms
• Account suspension decisions
• Fraud detection systems

7.2 Your Rights

• Not to be subject to automated decision-making
• To have human review of automated decisions
• To express your point of view
• To contest the decision

8. How to Exercise Your Rights

8.1 Online Self-Service

Many rights can be exercised directly through your account:

• Access and download your data
• Update profile information
• Adjust privacy settings
• Manage communication preferences

8.2 Contact Methods

8.3 Written Requests

Send written requests to:

9. Response Times and Process

9.1 Standard Response Times

• Access Requests: Within 30 days
• Correction Requests: Within 7 days
• Deletion Requests: Within 30 days
• Objection Requests: Immediately for marketing

9.2 Verification Process

To protect your privacy, we may require:

• Identity verification
• Account ownership confirmation
• Additional security checks

9.3 Complex Requests

For complex requests, we may:

• Extend the response time by up to 60 days
• Request additional information
• Charge a reasonable fee for excessive requests

10. Right to Lodge a Complaint

10.1 Internal Complaints

If you're not satisfied with how we handle your data rights:

• Contact our Data Protection Officer
• Request escalation to management
• Use our formal complaint process

10.2 Regulatory Complaints

You have the right to lodge a complaint with:

• Uganda Data Protection and Privacy Office
• Relevant supervisory authorities in your jurisdiction
• Consumer protection agencies