How we handle your personal data — in compliance with GDPR (Art. 12, 13, 14)
This privacy policy is structured in accordance with Articles 12, 13, and 14 of the EU General Data Protection Regulation (GDPR), as well as the Ugandan Data Protection and Privacy Act, 2019.
For the purposes of this privacy policy and in line with GDPR Article 13(1)(a), the data controller is:
Data Controller
Data Protection / Privacy Contact
We collect personal data only when you provide it to us voluntarily or when it is strictly necessary for the operation of our services:
Below we list each processing purpose alongside its legal basis, as required by GDPR Article 13(1)(c) and (d).
| Purpose | Legal Basis (GDPR) | Legitimate Interest (where applicable) |
|---|---|---|
| Deliver core services (AI tools, SEO, hosting) | Art. 6(1)(b) — Contract | — |
| Account registration & user management | Art. 6(1)(b) — Contract | — |
| Direct marketing & newsletters | Art. 6(1)(a) — Consent | — |
| Website usage analytics (cookies) | Art. 6(1)(a) — Consent | — |
| Website security & fraud prevention | Art. 6(1)(f) — Legitimate Interest | Protecting our infrastructure & users |
| Customer support & communication | Art. 6(1)(b) + Art. 6(1)(f) | Ensuring service quality |
| Legal compliance & regulatory requests | Art. 6(1)(c) — Legal Obligation | — |
Personal data is retained only for as long as necessary to fulfil the purposes outlined above. Specific retention periods:
International transfers (Art. 44-49): Some processors may be located outside the EU/EEA. Where applicable, transfers are made under the EU Standard Contractual Clauses (SCCs) or to countries with an adequacy decision.
Under the GDPR, you have the following rights. To exercise any of these rights, send a written request to info@gatavase.com. We will respond within 30 calendar days (Art. 12(3)).
Obtain confirmation and a copy of your personal data held by us.
Request correction of inaccurate or incomplete personal data.
"Right to be forgotten" — delete your data when certain conditions apply.
Restrict processing of your personal data in specific cases.
Receive your data in a structured machine-readable format.
Object to processing based on legitimate interest or direct marketing.
Withdraw consent at any time with the same ease it was given.
Complain to a supervisory authority if you believe processing is unlawful.
No solely automated decisions with legal or similar effects are made.
We use cookies and similar technologies to improve your experience. Cookie categories:
Required for website operation (session, security, consent). Always active, no consent required.
Only activated with your explicit consent. Help us understand how visitors use the website.
Last updated & published: August 13, 2026
Gatavase Corporation collects the minimum personal data needed to deliver our AI services, SEO toolkit, training, hosting, and support — never to sell to advertisers. Your data is processed under GDPR principles: lawfully, transparently, and for explicit purposes only.
Full details — including legal basis, retention periods, and your rights (access, rectification, erasure, portability, objection) — are explained across: