GiftNest

Legal

Privacy Policy

Effective 2 October 2026

What GiftNest collects about hosts and guests, why we need it, who can see it, and the rights you have over it.

1. Who we are

GiftNest is run by New Wave Technologies, Kampala, Uganda. We are responsible for the personal data described here and handle it in line with the Data Protection and Privacy Act, 2019 and its Regulations.

2. What we collect

  • Hosts and co-hosts: name, email, phone number, a password (stored only as a one-way hash), profile photo if added, and the events, gifts and photos you create.
  • Guests: name, phone number, email if given, messages, and each contribution (gift, amount, date, whether the name is hidden from other guests).
  • Payments: the paying Mobile Money number, network, amount, and the references our payment partner returns. We never receive or store a Mobile Money PIN or any card number.
  • Payment Methods and withdrawals: the details an Event Manager adds to be paid (account name, Mobile Money number or bank account number, network or bank and branch), their account number, each Withdrawal Request, and the Payment Reference and Payment Proof an administrator records when paying it.
  • Use of the service: sign-in times, and a record of changes made in the dashboard (who changed what, and when) to keep accounts and money safe.

3. Why we use it

  • to run events and their gift lists, and show each guest page;
  • to process contributions and confirm them with our payment partner;
  • to keep each Event Manager's balance and pay their Withdrawal Requests to the Payment Method they chose;
  • to send receipts and thank-you messages by SMS and email, and the SMS hosts choose to send their guest list;
  • to send account notices, such as a password reset or a suspended event;
  • to prevent fraud, investigate reports, and keep records the law requires.
We do not sell personal data, and we do not use guests' details for advertising.

4. Who sees what

  • An event's hosts see the names, phone numbers and messages of everyone on their guest list and everyone who contributed, including guests who hid their name from other guests.
  • Other guests see contributors' names and public wishes, unless a guest chose to stay anonymous or keep a message private. Guest pages never show phone numbers.
  • An Event Manager's Payment Methods, Withdrawal Requests and Transactions are seen only by them and by the GiftNest administrators who process payments. Co-hosts and guests never see them.
  • GiftNest's administrators see what they need to run and protect the service.
  • Service providers who act for us: OlyCash (payments), our SMS gateway and email provider, and our hosting provider. They may use the data only to provide their service to us.
  • Authorities, where the law requires it or to protect someone from harm or fraud.

5. How long we keep it

Accounts are kept while they are in use. Contributions, payments, receipts, Transactions and Withdrawal Requests, with the Payment Method each was paid to, are financial records: we keep them for as long as the law requires, even after an event is closed, so that every guest's receipt and every payout stays valid. A Payment Method that no request has used can be deleted by its Event Manager at any time. Messages and photos are kept while the event exists; hosts can delete wishes and gifts that have no contributions.

6. Your rights

You may ask us to show you the personal data we hold about you, correct it, or delete it where we are not required to keep it. You may object to our use of it, and stop receiving a host's SMS by asking the host or writing to us.
To use any of these rights, email us from the address or number we hold. If you are not satisfied with our answer, you may complain to the Personal Data Protection Office of Uganda.

7. Security

Connections to GiftNest are encrypted. Passwords are stored only as hashes. Hosts see only the events they are on, and every change to money, accounts and events is recorded. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.

8. Children

GiftNest is not meant for children. Accounts are for people aged 18 or over, and we do not knowingly collect children's data from them.

9. Changes to this policy

We will post any update here with its effective date and, for changes that matter, tell account holders by email or in the dashboard.

10. Contact

For anything about your data, email hello@giftnest.ug or write to New Wave Technologies, Kampala, Uganda.

See also our Terms and Conditions. Questions: hello@giftnest.ug.