Last updated: 1 September 2026

Privacy Policy

This explains what personal data RMBDESK collects, why, and how it is used, stored, and protected when you use our website and payment services.

📋 Structural placeholder. Before publishing, have this reviewed against Uganda's Data Protection and Privacy Act, and any other jurisdictions your customers are in — the retention periods and lawful-basis language below are illustrative, not final.

Contents

  1. Data We Collect
  2. Why We Collect It
  3. Who We Share Data With
  4. How Long We Keep It
  5. How We Protect It
  6. Your Rights
  7. Cookies
  8. Children's Privacy
  9. Changes to This Policy
  10. Contact

1 Data We Collect

Category Examples
Account information Name, email, phone number, password (stored as a hash, never in plain text)
Identity verification (KYC) Government ID, date of birth, nationality, residential address, a selfie photo, proof of address
Transaction data Payment amounts, currencies, beneficiary details, timestamps, status history
Payment method details Bank or mobile money reference used to fund a payment (never full card or account numbers beyond what's needed to process a transfer)
Usage data Device/browser information, IP address, pages visited, for security and troubleshooting
Support communications Messages you send to our support team

2 Why We Collect It

3 Who We Share Data With

We share the minimum data necessary with:

RMBDESK does not sell your personal data to advertisers or other third parties.

4 How Long We Keep It

Identity verification and transaction records are retained for the period required by applicable anti-money-laundering regulations after your account is closed or a payment completes — commonly five years, but this varies by jurisdiction and must be confirmed with a compliance advisor.

Account information is kept while your account is active. Support messages are kept as long as needed to resolve your query and for a reasonable period afterward for quality and dispute purposes.

5 How We Protect It

Passwords are hashed, never stored in plain text. Identity documents are stored outside the publicly accessible parts of our systems and are only viewable by authorized staff through an access-controlled interface.

Connections to RMBDESK are encrypted. Staff access to sensitive systems requires two-factor authentication, and every action staff take on your account or payments is logged.

6 Your Rights

Subject to legal and regulatory limits (particularly around anti-money-laundering records, which cannot be deleted on request), you may ask us to:

To exercise any of these, contact us using the details below.

7 Cookies

We use cookies to keep you logged in, remember your preferences, and understand how the site is used.

You can control cookies through your browser settings; disabling essential cookies may prevent you from logging in.

8 Children's Privacy

RMBDESK is not directed at, and does not knowingly collect data from, anyone under 18.

If we learn that we have collected data from a minor, we will delete it.

9 Changes to This Policy

We may update this policy from time to time. Material changes will be notified via email or an in-app notice before they take effect.

10 Contact

Questions about this policy, or requests relating to your data, can be sent to support@rmbdesk.com .