Privacy Policy
1. Our privacy principles
MOHU aims to collect and use personal data fairly, lawfully and transparently; limit collection to information relevant to a defined purpose; keep information appropriately secure; and retain personal data only for as long as it is needed for the purpose for which it is held or as otherwise permitted or required by law.
2. Information MOHU may process
- Account and contact data: name, email address, telephone number, account type, organization and authentication/security records.
- Profile and professional data: profile information, profile photo, qualifications, professional information and information a user chooses to make public.
- Recruitment data: applications, CVs, cover letters and other documents submitted for opportunities.
- Community and communications: posts, comments, reactions, follows/following, requests and private messages.
- Organization and verification data: organization profiles, claims, supporting evidence and information used to link a MOHU account to a directory record.
- Technical and security data: security events, login-related information, device/browser or network information where generated by normal website operation, and records needed to investigate misuse or protect MOHU.
- Payment-related records: transaction references, status and related account information needed to administer a MOHU payment. MOHU should not request that users send card PINs, mobile-money PINs or passwords.
3. Why information is used
Information may be used to create and secure accounts; provide profiles and directories; publish and manage opportunities; process applications; enable Community, connections and messaging; administer organizations and claims; provide support; process and reconcile payments; prevent abuse; maintain security and audit records; meet legal obligations; and improve MOHU services.
4. Public and private information
Some MOHU information is intentionally public, including information a user publishes to a public profile or Community post and public directory information. Contact visibility is controlled by the relevant profile settings where available. Private messages, CVs, application documents, verification evidence and other designated private documents are not intended for unrestricted public access and are subject to access controls.
5. Health-sector registries and source data
MOHU maintains separate directories for Health Professionals, Healthcare Service Providers and Health Organization Entities. Directory information may originate from regulators, government bodies, health-sector organizations or other identified sources. MOHU preserves source/provenance information where applicable. Closing a MOHU user account does not automatically erase an independent authoritative registry record; requests to correct such source-derived information may need to be verified against the authoritative source.
6. Who may receive information
Information is disclosed only as needed for the relevant MOHU function. For example, an applicant's submitted application may be made available to the employer/organization responsible for that opportunity and authorized MOHU administrators may access information when necessary for support, security, moderation, compliance or system administration. Service providers may process information on MOHU's behalf where needed to provide hosting, communications, payment or other supporting services and should be subject to appropriate confidentiality and security safeguards.
7. Data stored or processed outside Uganda
Where personal data is processed or stored outside Uganda, MOHU will apply the safeguards required by applicable Ugandan data-protection law, including applicable requirements concerning adequate protection or consent.
8. Retention and deletion
MOHU retains personal data only for as long as reasonably necessary for the purpose for which it was collected, for a related lawful purpose, to meet contractual or legal requirements, to provide an opportunity to exercise applicable data rights, or where the user has validly consented to continued retention. At the end of the applicable retention period, information should be securely deleted, destroyed or de-identified as appropriate.
Account deactivation is temporary and preserves account data for reactivation. Permanent account deletion closes the MOHU account and anonymizes account information where appropriate. Some records may need to be retained where required or permitted by law, for security/audit purposes, to protect the rights of other users, or because the record is an independent authoritative registry record rather than user-created account data.
9. Security
MOHU uses technical and organizational safeguards designed to reduce risks of loss, unauthorized access, disclosure, alteration or destruction. These include password hashing, session and login protections, access controls, CSRF protections, controlled delivery of private documents, administrative controls and security logging. No internet service can guarantee absolute security, so safeguards are reviewed and strengthened as risks change.
10. Your data rights
Subject to applicable law and appropriate identity verification, a person may request confirmation of whether MOHU holds personal data about them, access to that data and information about relevant recipients, or correction/deletion of data that is inaccurate, irrelevant, excessive, out of date, incomplete, misleading, unlawfully obtained or no longer authorized to be retained. Some requests may be limited where disclosure would reveal another person's protected information or where MOHU is legally entitled or required to retain a record.
Submit a Privacy / Data Request
11. Account and profile controls
Logged-in users can use MOHU's profile and account-management tools to update information, control supported contact visibility settings, deactivate an account or request permanent account deletion. Privacy requests may also be used where the required action is not available through self-service controls.
12. Security incidents
MOHU will investigate suspected personal-data breaches and take appropriate containment and remedial measures. Where notification is required by applicable law, MOHU will follow the required notification process with the Personal Data Protection Office and affected data subjects as applicable.
13. Changes to this policy
MOHU may update this policy when services, legal requirements or data practices change. The effective date above identifies the current version.
14. Contact
For privacy, access, correction or deletion matters, use MOHU's Privacy / Data Request form. General enquiries may be sent through Contact MOHU.