This notice explains how GEOSPATIAL NETWORK UGANDA, operated by NAS SURVEYORS LTD, collects, uses, stores, and protects personal data when you use our professional GIS web mapping platform. We align our practices with the Data Protection and Privacy Act, 2019 of Uganda, including its principles of accountability, fair and lawful processing, relevance and necessity, limited retention, data quality, transparency, and security safeguards.
For personal data processed through this platform, we generally act as a data controller in respect of account, infrastructure, and service operation. Where you upload third-party personal data (for example property owner names in private valuation workspaces), you remain responsible for ensuring your own lawful grounds and professional duties toward those data subjects, as described in our Terms of Use.
Under the Act, personal data means information relating to an identified or identifiable natural person (a “data subject”). This includes identifiers such as names, location data (which may identify individuals or households when combined with other fields), and online identifiers tied to an account. Personal data must be handled lawfully and kept confidential; unauthorised disclosure can carry serious consequences under the Act and related laws, including the Computer Misuse Act, 2011, where applicable.
We do not deliberately collect national ID cards, medical notes, or bank statements. You must not upload such documents or data unless your lawyer confirms another lawful pathway applies— Section 9 of the Act restricts certain categories of sensitive information except where the law expressly permits.
Processing is permitted under the Act where the law allows it or where an appropriate basis exists. Depending on the activity, we rely on grounds that commonly include: performance of a contract with you (Section 7(1)(d)), compliance with legal obligations (Section 7(1)(f)), and where relevant, your consent for specific optional processing. The Act also recognises other statutory grounds (such as certain public-sector or security contexts) that typically do not apply to routine commercial map accounts.
Where consent is the basis (for example, where you agree to this notice and optional communications), consent must be informed and you may withdraw it subject to technical and legal constraints. Withdrawing consent may limit our ability to provide certain features.
The Act identifies categories of information that require heightened care—including, among others, certain financial, health, and related data—where collection and processing are restricted save for specific exceptions (such as consent by the data subject, statistical use by designated bodies, or legal mandate).
Valuation work may involve economic attributes (for example property values). Enter only what is professionally necessary; do not upload full bank statements, medical records, or similar materials. If you are unsure, seek guidance from a qualified Ugandan lawyer or your professional body before processing.
This platform is intended for adult professional users. We do not market accounts to children. If you believe we have inadvertently collected a minor’s data, contact us promptly so we can address the matter.
Subject to the Act and applicable exceptions, a data subject may request that a controller correct, update, or delete personal data that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading, or unlawfully obtained.
To exercise these rights with respect to platform-held data, contact us using the details below. We may need to verify your identity. Where account deletion is requested and approved, we will delete or anonymise personal data within a reasonable period (our standard target is 30 days from verification unless a longer retention is legally required). Residual copies in encrypted backups may persist for a limited technical period before automatic rotation.
In line with Section 20 of the Act, we work to: identify reasonably foreseeable risks to personal data; establish and maintain appropriate safeguards; verify effectiveness; and update controls as risks evolve. Under Section 22, we observe generally accepted information security practices and respect professional norms applicable to surveying and valuation where relevant.
Authorised personnel may access data when strictly necessary for security, support, incident response, backup recovery, or compliance with law. We apply role-based and contractual confidentiality expectations.
We use reputable infrastructure providers, which may process or store data outside Uganda, including but not limited to Supabase (database and authentication), Cloudflare (network, R2 object storage), and Amazon Web Services (AWS) where applicable. By using the platform you acknowledge this international dimension; we rely on contractual and technical measures offered by such providers and limit sharing to what is needed to operate the service.
The optional assistant on this site answers general questions about using the platform. Conversations are not stored on our servers for profiling or model training; chat history you see is kept locally in your browser unless you clear it. Do not paste sensitive personal data into the assistant.
We retain personal data only as long as needed for the purposes above, including legal, tax, and legitimate security needs. Aggregated or de-identified analytics, if used in future, will be governed by an updated notice.
We are exploring cooperation with the Institution of Surveyors of Uganda (ISU) and similar institutions regarding identity and professional verification of members. Until a formal programme is published, verification and account approval remain with the platform operator under current procedures. Listing on this platform does not imply ISU endorsement or confirmation of licence status.
Privacy and data-protection enquiries (including Section 16 requests):
Email: admin@geospatialnetworkug.xyz
Phone: +256 753 771 256
You may also reach us through the in-platform channels described in the Terms of Use. We intend to designate a dedicated data protection contact as our organisation grows.
We may update this notice from time to time. The “Effective date” at the top reflects the latest material revision. Continued use after changes constitutes acknowledgement of the updated notice, subject to mandatory rights under the Act.