Privacy Policy

Last updated: 29 October 2026

1. Who we are

This Privacy Policy explains how East Africa Infrastructure Credit Guarantee Company, a proposed company, (“we”, “us”, or “our”) collects and uses personal data through the website at www.eaicg.africa (the “Website”), which presents a pro forma concept for EAICG. We are the data controller.

2. What we collect

Account details: your username, and your name and contact details if you gave them to us when we invited you. We store only a scrambled form (hash) of your password, never the password itself.
Access records: your IP address; the approximate country, region, city, and network derived from it; your browser and device type; the date and time of each visit and sign-in attempt, including failed attempts; whether you accepted the Important Notice; the pages of the Website you view; and the length of your sessions.
We do not collect payment details, and we do not use advertising or tracking cookies.

3. Why we use it, and our legal basis

We use this data to provide and secure the Website, to verify who is accessing it, to detect and prevent unauthorised access, to administer invitations and access, and to understand which content is used so that we can improve it. Our legal basis is our legitimate interest in protecting confidential information and operating the Website, and, where the law requires it, your consent, which you give by accepting the Important Notice.

4. Cookies

The Website uses one strictly necessary cookie, which keeps you signed in for up to eight hours. It is deleted when you sign out or when it expires. We use no analytics, advertising, or third-party tracking cookies.

5. Who we share it with

Cloudflare, Inc. hosts the Website and stores the access records as our service provider. Google provides the typefaces used on the Website, so your browser sends your IP address to Google when it loads them. We do not sell personal data. We may disclose it to our professional advisers, or where required by law, regulation, or a court.

6. International transfers

Our service providers may process data outside the country where you are, including in the United States and the European Union. Where required, we rely on appropriate safeguards for these transfers.

7. How long we keep it

Access records are deleted automatically after twelve months. Account details are kept while your access is active and for up to twelve months after it ends.

8. Security

Access is protected by individual credentials, encrypted connections, signed session cookies, and access controls. No system is completely secure, and you must keep your credentials confidential.

9. Your rights

Depending on where you are, including under Uganda’s Data Protection and Privacy Act, 2019, Kenya’s Data Protection Act, 2019, Tanzania’s Personal Data Protection Act, 2022, Rwanda’s Law No. 058/2021, and the EU and UK GDPR, you may have the right to access, correct, or delete your personal data; to object to or restrict its use; to withdraw consent; and to complain to a data protection authority, such as Uganda’s Personal Data Protection Office. To exercise these rights, contact the person who invited you to this website.

10. Changes

We may update this policy from time to time. The version on the Website applies when you visit.

11. Contact

Privacy questions and requests may be raised with the person who invited you to this website.