Privacy notice
Here is what personal data we collect when you register your interest in InsureX. It also covers why we collect it, who sees it, how long we keep it and what your rights are.
Version 2026-10. Effective 5 October 2026.
Who we are
Personal data means any information that identifies you, such as your name, phone number or email address.
The organisation responsible for your personal data is Zurai Limited, which trades as Future Lab. In this notice, we means Future Lab.
Our address is Plot 92A Bata Close, Off 5th Street, Industrial Area, Kampala, Uganda.
InsureX is an initiative of the Insurance Regulatory Authority in partnership with Future Lab. Future Lab is responsible for the personal data collected through this site, and shares it with the Authority only as this notice describes.
You can contact us about your data at insurex@futurelab.africa. Write to that address and our privacy team will reply.
We follow Uganda’s Data Protection and Privacy Act, 2019. We also apply the standards of the European Union General Data Protection Regulation (GDPR) to everyone, wherever you live.
What we collect
We collect only what the registration forms ask for.
- contact details: your name, organisation, role, phone or WhatsApp number and email address
- your answers: choices about your stage, interests, sector and how you would like to take part
- your story, if you use the community form: a short optional account of something that happened to you or your group
- your permissions: which boxes you ticked, when, and which version of this notice you saw
- basic technical data: our web host records your internet address and browser type when you visit the site
You give us this information yourself. We do not buy it or collect it from other sources. If a partner ever refers you to us, we tell you within one month and say where we got your details.
Why we use it
| What we do | Our legal basis |
|---|---|
| Register your interest and contact you about InsureX by phone and email | Your consent |
| Contact you on WhatsApp, if you tick that separate box | Your consent |
| Match builders, industry partners and challenges, and plan the programme | Your consent, and our legitimate interest in running the programme well |
| Use community stories, without names, to shape the programme | Your consent |
| Keep a record of your permissions | Our legal duty and our legitimate interest in proving what you agreed |
| Keep the site secure and stop misuse | Our legitimate interest |
You do not have to give us your details. If you do not, we cannot register you or contact you.
We do not make decisions about you using only automated tools. We do not sell your data.
Who sees it
- Future Lab staff and advisers who work on InsureX, under a duty of confidentiality
- service providers that handle data for us: form handling, email and hosting. They may use your data only on our instructions and must keep it secure.
- the Insurance Regulatory Authority, only if you ask us to introduce you or you agree to share your details
- authorities or courts, if the law requires it
We introduce you to a builder, an industry partner or another organisation only with your agreement.
Sending data outside Uganda
Some of our service providers may store data outside Uganda. Uganda’s law allows this where the receiving country gives protection equal to Uganda’s, or where you agree. We use written contracts with these providers that require the same level of protection. When you tick the permission box on a form, you agree to this transfer.
How long we keep it
We keep personal data only for as long as we need it. These are the periods we apply.
| Data | How long |
|---|---|
| Contact details and answers | For the length of the programme you registered for, plus 12 months. Then we delete them or make them anonymous. |
| Records of your permissions | For as long as the permission is active, plus 3 years as proof |
| Community stories | Up to 12 months after the programme ends, or sooner if you ask |
| Opt-out list | We keep the minimum needed, so that we respect your request to stop contact |
| Security incident records | 3 years |
Your rights
You have the right to:
- ask what personal data we hold about you and get a copy
- ask us to correct data that is wrong or incomplete
- ask us to delete your data
- withdraw your permission at any time, as easily as you gave it
- ask us to stop contacting you, including for direct marketing
- ask us to limit how we use your data, or object to a use based on our legitimate interest
- ask for your data in a format you can reuse
- complain to the regulator, as the section called Questions and complaints explains
To use any of these rights, email insurex@futurelab.africa. We reply within one month and do not charge a fee. We may ask you to confirm who you are.
Withdrawing your permission does not affect what we did with your data before you withdrew.
Sensitive details and stories
Some information needs extra care. In Uganda it includes health, finances, religious or political beliefs and sexual life.
The community form has an optional box where you can describe what happened. Leave out names and medical or financial details. If a story contains such details, we remove them before we use it. If we need to keep them, we ask for your clear agreement first.
Children
InsureX is for adults aged 18 and over. If you are under 18, ask a parent or guardian to register for you. If we learn that we hold a child’s data without a parent’s or guardian’s consent, we delete it.
Keeping data safe
We protect your data from loss, misuse and unauthorised access. We use encrypted connections, limit access to named staff, store data securely and bind providers by contract. If a breach puts your data at risk, we tell the Personal Data Protection Office immediately. We tell you as well when the law requires it.
Cookies and outside services
The site sets no advertising or tracking cookies. We use no analytics tool.
On the registration page, we save your choices in your own browser so that you can carry on later. We never receive them, and we do not save your contact details. The Clear saved choices button removes them. Your browser settings can also remove them.
The site serves its own fonts and images. It runs behind a content delivery and security service, which sees your internet address as it delivers the pages.
Questions and complaints
Contact us first at insurex@futurelab.africa. We want to put things right.
You can also complain to Uganda’s Personal Data Protection Office, which is part of the National Information Technology Authority, Uganda.
If you live in the European Union or the United Kingdom, you can also complain to your local data protection authority.
Changes to this notice
We update this notice when our practice changes. The version number and effective date are at the top of this page. For a significant change, we tell people on our list before it takes effect.