GPL privacy policy
Privacy Policy
Effective Date: 01/08/2026
Last Updated: 14/01/2026
At Gladys Praedia Limited accessible from https://gladyspraedia.com, protecting the
privacy of our website visitors and lodge guests is a top priority. This Privacy Policy
details how we collect, use, process, and safeguard your personal data in accordance
with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable local
data protection laws (including the Uganda Data Protection and Privacy Act).
1. Data Controller Details
The Data Controller responsible for your personal data is:
Gladys Nakintu
• Business Name: Gladys Praedia Limited in Uganda
• Physical Address: Banda Zone 6, Kampala, B 1-10, Uganda
• Email Address: info@gladyspraedia.com
• Phone Number: +256 754 176407
• Data Protection Contact Person: Gladys Nakintu
2. Personal Data We Collect
We collect personal data directly from you when you visit our website, submit inquiries, or
make a lodge booking.
A. Data You Provide Directly
• Guest & Contact Details: Full name, email address, telephone number, residential
address, and passport/ID details (required for lodge registration under Ugandan
tourism regulations).
• Booking & Stay Information: Arrival/departure dates, room/lodge preferences,
dietary requirements, special requests, and names of accompanying guests.
• Payment Data: When paying by credit card, your payment details (card number,
CVV, expiration date, billing address) are processed directly by our secure third-
party payment gateway. We do not store full credit card numbers or security codes
on our servers.
B. Data Collected Automatically (Website Usage)
• Technical Data: IP address, browser type, operating system, device details, time
zone, and pages viewed.• Cookies & Analytics: Information collected via essential and analytical cookies (see
Section 8).
3. Legal Bases and Purposes of Processing
Under Article 6 of the GDPR, we process your personal data only when a legal basis
applies:
Purpose of Processing Legal Basis (GDPR Art. 6)
Processing Lodge Bookings & Payments: Managing
reservations, processing credit card transactions, and
Performance of a Contract (Art.
6(1)(b))
providing hospitality services.
Legal Compliance: Guest registration requirements under
Ugandan hospitality laws, tax obligations, and accounting
Legal Obligation (Art. 6(1)(c))
records.
Customer Service & Inquiries: Responding to contact form
queries or pre-booking questions.
Legitimate Interest (Art. 6(1)(f)) or
Pre-Contractual Steps (Art. 6(1)
Marketing Communications: Sending newsletters or
promotional updates regarding farm stays or eco-activities.
(b))
Consent (Art. 6(1)(a)) – You may
withdraw consent at any time.
Website Security & Analytics: Ensuring site stability, preventing
fraud, and optimizing site performance. Legitimate Interest (Art. 6(1)(f))
4. Payment Processing Security
Online credit card transactions are processed securely via our PCI-DSS compliant
payment processor, Pesapal.
When you make a payment, your credit card information is transmitted using secure
Socket Layer (SSL/TLS) encryption directly to the payment processor. We only receive a
transaction confirmation, tokenized payment ID, and essential billing information needed
to confirm your booking.
5. International Data Transfers (EU to Uganda)
Because Gladys Praedia Limited is based in Uganda, your personal data will be
transferred to and processed on servers and systems outside the European Economic
Area (EEA).
Uganda does not currently hold an EU “adequacy decision.” Therefore, we safeguard
your data when transferred internationally by relying on:
1. Contractual Necessity (Art. 49(1)(b) GDPR): The transfer is necessary for the
performance of a contract between you and us (i.e., fulfilling your accommodation
booking).
2. Standard Contractual Clauses (SCCs): Where applicable with our third-party
service providers (such as cloud hosts and email management tools).
3. Appropriate Technical & Organizational Measures: Encrypted data transmission
(HTTPS/TLS) and restricted physical and digital access controls.
6. Data Sharing and Third PartiesWe do not sell or rent your personal information. We share your data only with trusted
third-party service providers necessary to run our business:
• Payment Gateways: [e.g., Pesapal / Flutterwave] to securely authorize credit card
transactions.
• IT & Hosting Providers: Web hosting, database management, and email service
providers.
• Property Management Systems (PMS): Reservation engines handling guest check-
ins and room allocations.
• Legal & Regulatory Authorities: Local government bodies or law enforcement in
Uganda, solely when strictly required by law.
7. Data Retention
We keep your personal information only for as long as necessary to fulfill the purposes
outlined in this policy:
• Booking & Billing Records: Retained for 7 years to satisfy tax, accounting, and legal
audit requirements under Ugandan law.
• Inquiries & General Correspondence: Retained for 12 months from the date of the
last communication.
• Marketing Subscriptions: Retained until you unsubscribe or request erasure.
8. Cookies and Tracking Technologies
Our website uses cookies to function properly and analyze traffic.
• Essential Cookies: Necessary for navigating the website and utilizing booking
functionality.
• Analytics Cookies: Help us understand how visitors interact with our website
(Google Analytics). These are placed only with your consent via our Cookie Banner.
You can manage or disable non-essential cookies at any time through your browser
settings or via our site’s cookie consent manager.
9. Your GDPR Rights
If you reside in the EU or EEA, you hold the following rights regarding your personal data
under the GDPR:
• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.• Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data
when it is no longer necessary for the purpose collected.
• Right to Restrict Processing: Request that we restrict processing under certain
conditions.
• Right to Data Portability: Request transfer of your data to another controller in a
structured format.
• Right to Object: Object to processing based on legitimate interests or for direct
marketing.
• Right to Withdraw Consent: Withdraw your consent at any time without affecting
past lawful processing.
To exercise any of these rights, please contact us at info@gladyspreadia.com. We will
respond within 30 days.
Right to Lodge a Complaint
You also have the right to lodge a complaint with a European Data Protection Authority
(Supervisory Authority) in the EU Member State of your residence or place of work if you
believe our data processing infringes upon the GDPR.
10. Updates to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal
obligations. Any changes will be posted on this page with an updated “Last Updated”
date. We encourage you to review this page regularly.
GetTerms
Legal Notice (Impressum)
Responsible Entity: Gladys Praedia Ltd [Insert Physical Business Address/Headquarters] Katoogo,
Uganda
Contact Information: Phone: +44 641 754 0072 Email: [Insert your professional email address,
e.g., info@gladyspraedia.com] Website: https://gladyspraedia.com
Business Registration: Gladys Praedia Ltd (also referred to as Gl2k Ltd) [Insert Registration
Number if applicable, e.g., Uganda Registration Services Bureau (URSB) number]
Represented by: [Insert Name of the Managing Director/CEO]
Disclaimer: The content provided on this website is for general information purposes only. While
we strive to keep the information up to date and correct, Gladys Praedia Ltd makes no
representations or warranties of any kind, express or implied, about the completeness, accuracy,reliability, or availability of the website or the information, products, or services contained on the
website for any purpose.
Copyright: All content, including text, graphics, logos, images, and software, is the property of
Gladys Praedia Ltd or its content suppliers and is protected by international copyright laws.
Unauthorized use or duplication of this material without express and written permission from this
site’s author and/or owner is strictly prohibited.
External Links: Our website may contain links to third-party websites. Gladys Praedia Ltd has no
control over the nature, content, and availability of those sites. The inclusion of any links does not
necessarily imply a recommendation or endorse the views expressed within them.
Important Note on Compliance:
• Physical Address: Even if you do not have a public office, you must include a valid
registered business address to establish legitimacy.
• Local Law: Since your business is in Uganda, ensure that your website’s privacy and legal
terms comply with the Uganda Data Protection and Privacy Act. If you handle data from
EU/UK citizens, you may also need a Privacy Policy that addresses GDPR/UK GDPR
compliance (e.g., explaining how you store booking data).
• Updates: If you eventually establish an office or branch in a region that requires a formal
Impressum (like Germany), you will need to expand this to include a Commercial Register
number (Handelsregister) and a VAT Identification number (Umsatzsteuer-
Identifikationsnummer).