Privacy Policy

Enclave City is a hospitality business based in Najeera, Kampala, Uganda. We need to handle certain personal information to deliver the services you expect from us. This policy sets out exactly what that information is, how we handle it, and what choices you have.

We do not collect data unless we have a clear reason to. We do not sell it. We do not share it with advertisers. We keep it only for as long as necessary, and we protect it with the same seriousness we apply to everything else at Enclave.

If you are reading this because something did not feel right, please contact us directly. We would much rather address a concern directly than have you feel uncertain about how your information is being handled.

By using our website at enclavecity.com, making a booking, visiting our premises, or otherwise providing us with your information, you are acknowledging that you have read and understood this policy.

The information we collect depends on how you interact with us. Here is a clear account of what we gather and why:

Information you give us directly. When you make a reservation, register an account, complete a booking form, send us an enquiry, or sign up to our newsletter, you provide us with details such as your name, email address, phone number, and payment information. For accommodation bookings, we may also ask for your home address and in some cases your identification details, as required by Ugandan law and as a standard practice in licensed accommodation.

Information generated by your booking or stay. When you stay with us, dine at our restaurant, use the health club, or attend a conference, we record the details of that engagement. This includes the dates and nature of your visit, any services you used, payments made, and any special arrangements we made for you. This forms your guest history with us.

Information collected automatically through our website. When you visit enclavecity.com, our systems automatically collect standard technical information including your IP address, browser type, the pages you visit, how long you spend on them, and the device you are using. This helps us understand how people use the site and where we can improve it.

Communications. If you contact us by email, phone, or through our contact form, we keep a record of that correspondence. This helps us follow up consistently and ensure nothing gets lost.

We do not collect sensitive personal data such as racial or ethnic origin, religious beliefs, or health information unless you have specifically shared this with us in the context of a dietary requirement, accessibility need, or similar hospitality request. In those cases, the information is used solely to serve you better during your visit.

Every use of your personal information has a specific purpose. We do not process data without a legitimate reason, and we do not use it for anything beyond what is described below.

To process and manage your bookings. This is the primary reason we collect most of the data we hold. We need your details to confirm reservations, process payments, arrange the services you have requested, and communicate with you about your upcoming visit.

To deliver a personalised guest experience. If you have stayed with us before or have shared preferences, we use that information to make your next visit smoother. This might mean remembering a room preference, a dietary requirement, or simply knowing how you like your morning briefed. This is at the heart of what luxury hospitality means to us.

To communicate with you. We will send you booking confirmations, pre-arrival information, and any updates that are directly relevant to your reservation. If you have opted into our newsletter, we will send you occasional updates about Enclave, including new offerings, special events, and seasonal promotions. You can unsubscribe from marketing communications at any time by clicking the unsubscribe link in any email or by contacting us directly.

To improve our service. Aggregated and anonymised data from website visits and guest interactions helps us understand what works well and where we fall short. No individual is identifiable in this analysis.

To comply with legal obligations. In some cases, we are required by Ugandan law to collect and retain certain information relating to accommodation guests, financial transactions, and business records. We keep this data only for as long as legally required.

We do not sell, rent, or trade your personal information. We will never share it with third parties for their own marketing purposes. When we do share data with external parties, it is only ever to facilitate a service you have requested or to meet a legal obligation.

Payment processors. When you pay online, your payment details are handled by our payment gateway partners (Paystack or Flutterwave). These platforms are PCI-DSS compliant and operate under their own rigorous privacy standards. We do not store your full card details on our servers.

IT and hosting service providers. Our website and booking systems are hosted on third-party infrastructure. These providers access data only as necessary to deliver their technical services and are bound by confidentiality agreements.

Email delivery services. We use a reputable email service provider to deliver our reservation confirmations and newsletters. Your email address is shared with this provider for that purpose only.

Legal and regulatory requirements. If we are required to disclose information by law, court order, or the lawful request of a government authority, we will do so. Where we are permitted to, we will inform you of such a request before complying.

If you book through a third-party travel platform, the privacy practices of that platform are governed by their own policies, which are separate from ours. Once your booking reaches us, we handle your information as described in this policy.

Our website uses cookies. These are small text files stored on your device that help the site function properly, remember your preferences, and understand how visitors move through the site.

Essential cookies are necessary for the website to work. They enable things like the booking form, session management, and security features. These cannot be disabled without breaking the site's core functionality.

Analytics cookies help us understand how visitors use the site. We use anonymised data from these cookies to see which pages are most useful, where people drop off, and how we can improve the experience. No personally identifiable information is included in this data.

Preference cookies remember choices you have made on the site, such as your language or display settings, so you do not have to set them again on future visits.

You can control cookies through your browser settings. Most browsers allow you to block or delete cookies, though doing so may affect how some parts of the website work. Your browser's help section will explain how to manage cookie settings on your device.

We do not use advertising or retargeting cookies. We do not serve third-party advertisements on our website.

We take reasonable and appropriate measures to protect your personal information against loss, misuse, unauthorised access, and disclosure. These measures include encrypted data transmission over HTTPS, access controls that limit who within our team can view guest data, regular security reviews, and trusted infrastructure providers.

Despite these precautions, no method of internet transmission or electronic storage is completely secure. We cannot provide an absolute guarantee, and we ask that you also take care when sharing personal information online. Using a strong, unique password for your Enclave account is a simple step that makes a significant difference.

In the event of a data breach that is likely to result in a risk to your rights or freedoms, we will notify you and the relevant regulatory authority as required by applicable law, without undue delay.

Our team members access guest data only on a need-to-know basis and are trained to handle personal information with care and discretion. We do not discuss guest details unnecessarily, and we take our duty of confidentiality seriously as part of the broader standard of hospitality we aim to deliver.

You have meaningful rights when it comes to your personal data, and we will always respond to requests promptly and without obstruction. Specifically, you have the right to:

Access your data. You can ask us what personal information we hold about you and receive a copy of it. We will provide this in a clear, readable format within a reasonable timeframe.

Correct your data. If any of the information we hold about you is inaccurate or incomplete, you can ask us to update it. You can also update your details yourself through your online account if you have one.

Delete your data. You can ask us to delete your personal information, and we will do so unless we have a legal obligation to retain it (such as financial records required for tax purposes) or a legitimate operational reason to keep it (such as an active dispute).

Withdraw consent. Where we rely on your consent to process data (for example, for our newsletter), you can withdraw that consent at any time. This will not affect any processing that took place before you withdrew consent.

Object to processing. You can object to us using your data for direct marketing at any time, and we will stop. You can also object to other types of processing in certain circumstances.

To exercise any of these rights, please contact us using the details at the end of this policy. We will respond within 30 days of receiving your request.

We keep your data only for as long as necessary for the purpose it was collected, or as required by law. Here is how that applies in practice:

Booking and guest records are retained for seven years following your most recent stay or interaction with us. This is consistent with standard accounting and legal record-keeping requirements in Uganda.

Account information is retained for as long as your account is active. If you close your account or request deletion, we will remove your personal details within 30 days, retaining only what the law requires us to keep.

Newsletter subscriptions are maintained for as long as you remain subscribed. When you unsubscribe, we remove you from our mailing list within 72 hours and retain only a suppression record to ensure you are not accidentally re-added.

Contact enquiries and correspondence are retained for two years, after which they are securely deleted.

When data reaches the end of its retention period, we delete or anonymise it securely. We do not simply stop using data and leave it sitting in our systems indefinitely.

Our website may contain links to external websites and services, such as Google Maps for directions, social media platforms, or travel review sites. This privacy policy applies only to enclavecity.com and to information collected directly by Enclave City. It does not cover any external websites, even if you reach them through a link on our site.

We have no control over the content, privacy practices, or security of third-party websites. If you click through to an external site, we encourage you to read that site's own privacy policy before sharing any personal information.

We use a small number of third-party services to operate our website and business. These include our cloud hosting provider, our email delivery service, our payment processor, and our media hosting platform. Each of these providers is vetted for their security and privacy practices and operates under agreements that restrict how they may use the data they access.

We do not use social media tracking pixels or third-party advertising networks on our website. The connections you see to social media platforms such as Instagram and Facebook are outbound links only and do not involve any tracking of your visit back to those platforms.

We may update this policy from time to time, for example when we introduce new services, change our systems, or in response to developments in data protection law. The current version is always available at this address, and the "Last Updated" date at the top of the page tells you when it was most recently revised.

If we make changes that materially affect how we handle your personal information, we will notify you directly by email if we have your address on file. In other cases, we will make the updated policy visible on the website. Continuing to use our website or services after a change is posted means you have accepted the updated terms.

We encourage you to check this page periodically if you want to stay current with our practices. We will not make changes retroactively that disadvantage you without notice.

If you have questions about this policy, wish to exercise your data rights, or have a concern about how your information has been handled, please contact us directly. We take every enquiry seriously and will respond within 30 days of receiving your request.

This Privacy Policy was last updated in June 2026.