Miracle Centre Churches Community Cooperative Society Limited (hereinafter referred to as “MCCC SACCO”, “we”, “us”, or “our”) is committed to protecting the privacy and personal data of our members and visitors to our website. This Privacy Policy outlines how we collect, use, store, and protect your information in accordance with the laws of the Republic of Uganda.
1. Information We Collect
1.1 Information you give us directly
When you fill in the enquiry form on our website, we collect:
- Full name
- Phone number
- Email address
- The product you are interested in, and anything else you choose to tell us
1.2 Member portal accounts
If you register for the member portal, we collect and store:
- Your SACCO ID number
- Your full name
- Your email address, if you choose to provide one — it is optional
- A password, which is stored only as an irreversible cryptographic hash. We never store, and cannot recover, your actual password.
- The date and time you last signed in, and a count of consecutive failed sign-in attempts, which we use to lock an account temporarily after repeated wrong passwords
Your SACCO ID must already appear on our register of members before an account can be created. Your savings, loan and share records themselves are held in our internal SACCO records and are governed by our by-laws, not by the website.
1.3 Newsletter subscriptions
If you subscribe to our newsletter, we store only your email address and the date you subscribed. You do not need an account to subscribe.
1.4 Information collected automatically
When you visit our website we record limited, non-identifying information about the visit — see Website Analytics below. We do not store your IP address, and we do not collect payment card details anywhere on this website.
2. How We Use Your Information
We use the information we collect for the following purposes:
- To respond to your inquiries or requests
- To contact you regarding SACCO-related matters
- To create and operate your member portal account, and to keep it secure
- To send you our newsletter, if you have subscribed to it
- To understand how our website is used so that we can improve it
- To maintain our internal records
- To comply with any legal or regulatory obligations as required under Ugandan law
We do not use your information to make automated decisions about you, and we do not use it for advertising.
3. Cookies and Browser Storage
We use as little of this as we can, and none of it for advertising or tracking you across other websites.
- Sign-in cookie. When you sign in to the member portal or the staff area, we set a single cookie that keeps you signed in for up to 12 hours. It is marked HttpOnly, so scripts on the page cannot read it. It is deleted when you sign out or when it expires.
- Browser storage. Our website stores two small values in your own browser rather than as cookies: a randomly generated visitor identifier used for counting visits, and a note of whether you are signed in so the page can show the right menu. Neither identifies you, and both are removed if you clear your browser’s site data.
You can clear or block these at any time through your browser settings. Blocking the sign-in cookie will prevent you from signing in to the member portal.
4. Website Analytics
We count visits to our website ourselves rather than using an advertising analytics service. For each page view we record:
- The page address visited, and the date and time
- The website that referred you, if any — we keep only the site name, such as “google.com”, not the full address
- The country your visit came from, as reported by our hosting provider
- Whether the device is a mobile, tablet or desktop, based on screen width
- A random visitor identifier stored in your own browser, so that repeated visits from the same browser are counted once
We do not store IP addresses, and this information is not combined with your member account or used to identify you. If your browser sends a “Do Not Track” signal we do not record the visit at all. Visits to our administration pages, and visits we can identify as automated crawlers, are excluded.
5. Data Storage and Security
We take the confidentiality and security of your personal information seriously. We implement appropriate technical and organizational measures to protect your data from unauthorized access, alteration, disclosure, or destruction. These include:
- Passwords stored only as irreversible cryptographic hashes, never as readable text
- Encrypted connections (HTTPS) for every page and form on this website
- Restricted access to personal data, limited to authorised administrators
- Temporary account lockout after repeated failed sign-in attempts
- Secure storage systems and regular monitoring and updates to our website security
Please note that while we strive to use commercially acceptable means to protect your personal information, no method of transmission over the Internet is 100% secure.
6. Sharing of Information
We do not sell, trade, or otherwise transfer your personally identifiable information to outside parties, except:
- When we have your express consent
- When required by law or a lawful authority
- To the service providers listed below, who process data on our behalf and are required to keep it confidential
We rely on the following providers to operate this website:
- Vercel — website hosting and delivery
- Neon — the database in which accounts, subscriptions and visit counts are stored
- Resend — delivery of our newsletter emails
- FormSubmit — delivery of enquiry-form submissions to our email address
- Google Fonts and unpkg — fonts and website code loaded by your browser as a page opens
Storage outside Uganda. These providers operate internationally, and information submitted through this website is stored on servers located outside Uganda, principally in the European Union. By using this website and submitting your information, you consent to this transfer. We choose providers that apply recognised data-protection standards.
7. Your Rights
Under Ugandan data protection laws, you have the right to:
- Request access to the personal information we hold about you
- Request correction or deletion of your information
- Withdraw your consent where applicable
- Unsubscribe from our newsletter at any time, using the link at the bottom of every newsletter we send. No account or sign-in is needed.
- Lodge a complaint with the National Personal Data Protection Office if you believe your data rights have been violated
To exercise any of these rights, you may contact us using the details provided below.
Email: info@mcccsacco.com
Phone: +256 769 676126
8. Retention of Data
We retain personal information only for as long as necessary to fulfill the purposes outlined in this policy and to comply with legal and regulatory requirements. In practice:
- Member accounts are kept for as long as you remain a member. An account may be suspended rather than deleted so that our records remain complete; you may ask us to delete it entirely.
- Newsletter subscriptions. If you unsubscribe, we keep a record of your email address marked as unsubscribed, so that we do not email you again by mistake. You may ask us to erase it completely instead.
- Website visit records contain no personal identifiers and are kept only in aggregate for reporting.
9. Third-Party Links
Our website may contain links to external sites. We are not responsible for the privacy practices of such other sites. We encourage you to read their privacy policies before providing any personal information.
10. Changes to This Privacy Policy
We may update this policy from time to time. When we do, we will post the updated policy on our website and revise the “Effective Date” at the top. We encourage you to review this page periodically to stay informed about how we are protecting your data.
11. Contact Us
If you have any questions, concerns, or requests related to this Privacy Policy, please contact us at:
Miracle Centre Churches Community Cooperative Society Limited (MCCC SACCO)
Plot 713 off Nabunya Rd, Rubaga, Uganda
Email: info@mcccsacco.com
Phone: +256 769 676126