Privacy policy

Who is responsible for your data

thetribe.africa is operated by Mubanza Haggai, trading as thetribe.africa, based in Uganda. Mubanza Haggai is the data controller for the personal data described here, which means we decide why and how it is used. Contact us at support@thetribe.africa with any privacy question.

What we collect and why

• Account details (name, email, password, phone): to create and secure your account and contact you about your orders. Basis: performing our contract with you.
• Registrant contact details (name, organisation, postal address, phone, email): required by registries to register a domain in your name. Basis: contract and legal obligations under registry and ICANN rules.
• Orders (domains bought, years, amounts, status): to deliver and support your purchases and keep financial records. Basis: contract and legal obligation.
• Searches and business descriptions you type for name ideas: to show results and suggestions. Basis: legitimate interest in providing the service.
• Technical data (IP address, device and browser details, logs): to keep the service secure, prevent abuse and fix problems. Basis: legitimate interest.
• Support messages you send us: to answer you. Basis: contract and legitimate interest.

We never see or store your full card details or mobile money PIN; payments are handled by Paddle and Flutterwave (see below).

Who we share it with

• Paddle.com, our Merchant of Record, which sells our products, handles payments, tax compliance and invoicing, and processes refunds for card, PayPal and wallet payments.
• Flutterwave, which processes mobile money payments and refunds; we share your name, email and phone number with it for that purpose.
• Our registrar partner and domain registries, to register and manage your domains. Some registries publish registrant details in WHOIS; we switch on WHOIS privacy where the extension allows it.
• Service providers who host the site, run our database and email, and power AI name suggestions, acting on our instructions.
• Professional advisers such as lawyers and accountants.
• Authorities when the law requires it.

Some of these providers are outside Uganda. Where your data is transferred abroad we use providers that commit to appropriate safeguards.

How long we keep it

We keep account data while your account is open. Registrant and order records are kept for as long as you hold the domain and then for up to 7 years for legal, tax and dispute purposes. Technical logs are kept for up to 12 months. After that, data is deleted or anonymised.

How we protect it

Data is encrypted in transit, access is limited to people who need it, registrar credentials are stored encrypted, and account data is protected by access controls in our database.

Your rights

Under Uganda's Data Protection and Privacy Act, 2019, and similar laws where you live, you can ask to see the personal data we hold about you, correct it, have it deleted, or object to or restrict how we use it. You can withdraw consent where we rely on it. Email support@thetribe.africa and we will reply within 30 days. You can also complain to Uganda's Personal Data Protection Office or your local data protection authority.

Cookies

We use only essential browser storage: to keep you signed in, remember your cart and your chosen currency. We don't use advertising cookies. Our payment provider may set its own essential cookies during checkout.

Changes

We'll update the date at the top when this policy changes and tell you about significant changes.