Privacy Policy
Version 6 November 2026. We post any change here with its date, and tell referral partners in the portal.
256 TAX CONSULTANTS-SMC LIMITED, trading as 256 Tax Consultants ("we", "us"), P.O. Box 179389, Kampala GPO, decides how the personal data in this notice is used. This notice covers website visitors, people who enquire or book, people who introduce clients to us (referrers and referral partners), and the people they introduce. Our Data Protection Officer is Odur Micheal, Managing Partner: consult@256taxconsultants.ug, +256 776 541 672. We follow the Data Protection and Privacy Act, 2019 and its Regulations.
We have applied to register with the Personal Data Protection Office (application RG2610-712).
What we collect
Information you provide directly: names, contact details (phone, WhatsApp, email), taxpayer identification numbers, business details, and the contents of documents you share for professional services. When you enquire, ask for a quote, download a guide or book a call, we keep the details you type into the form, the page you came from and, if you agree, your cookie choices. If someone introduces you to us, we receive your name, phone number and the help you need from them, and only after they confirm that you agreed. Website forms collect only the fields shown on the form. We do not buy or scrape personal data.
Why we collect it
To respond to enquiries; deliver contracted professional services (including representing you before URA, URSB and tribunals); meet our own legal and regulatory obligations as a licensed tax agent; and — only with your consent — send tax updates and reminders you can opt out of at any time.
If you join as a referral partner
To sign the partner agreement, we ask for your name, address, TIN, phone and email; your national ID number (NIN), or your passport and work-permit numbers; photos of the front and back of your ID; your drawn signature; and the bank or mobile-money account we pay you to. At signing we also record the time, your IP address and your browser, as proof of signing.
We use this to check who you are before we pay you, to keep a reliable record of the agreement, to pay your fees and deduct withholding tax where the law requires it, and to meet our own legal duties.
Your ID photos and signed agreement are kept in a private store. Only the staff who check IDs and pay fees can open them. Elsewhere in the portal your NIN is shown with all but the last 4 characters hidden. We never send your NIN, ID photos or payout details to analytics or advertising tools.
We delete your ID photos once we have verified your ID, and keep a record of the check. We keep the rest of your partner records only as long as our work and the law need it.
Confidentiality of tax matters
Professional confidentiality is fundamental to a tax practice. Your tax affairs are disclosed only: with your instruction, to the authorities involved in your matter as your representative, or where the law compels disclosure. We never use real client details in marketing; case examples on this site are anonymised composites.
Storage & security
We keep data on access-controlled systems. Staff sign in with two-step verification, and each person sees only what their work needs. Data travels over encrypted connections. Email and WhatsApp are not fully secure: never send anyone, including us, a PIN, passkey or one-time code, and we will never ask for one.
Where your data is kept
Some of our service providers store or process personal data outside Uganda, in South Africa, the United States and the European Union. They host our website, partner portal and practice platform, and provide our email, documents, sign-in and form services. We protect your data there as the Data Protection and Privacy Act, 2019 requires, and each provider is bound by data-protection terms with us. Advertising and analytics companies receive data only if you agree to cookies (see "Cookies" below). Ask us if you want more detail.
Third-party processors
We use service providers for hosting, databases and file storage, email and documents, sign-in, and form and email services. Each acts only on our instructions, under written terms. Advertising and analytics companies receive data only with your cookie consent, under their own privacy policies. If we switch on online card payments, we will add the payment provider to this notice. We do not sell personal data.
How long we keep it
We keep personal data only as long as our work and the law need it.
| Data | How long |
|---|---|
| Enquiries that do not become clients | 2 years from our last contact |
| Referral partner records and the signed agreement | The life of the agreement, then 6 years |
| Clients' tax and accounting files | At least 5 years after the tax period |
| Recorded calls and WhatsApp chats with us | For as long as the service needs them |
| Sign-in records and backups | 90 days |
| Analytics data | Up to 14 months; advertising audiences up to 12 months |
An open URA query, audit, objection, appeal or dispute stops deletion until it ends.
Calls and WhatsApp
We may record calls and keep WhatsApp chats with you, to keep a record of instructions. We tell you at the start of a recorded call. We keep call recordings and chats for as long as the service needs them.
Your rights
Under the Data Protection and Privacy Act you may request access to, correction of, or deletion of your personal data (subject to statutory retention duties), and may withdraw marketing consent at any time. You may also object to how we use your data, or ask us to stop. Write to our Data Protection Officer at consult@256taxconsultants.ug. Before we give anyone a copy of personal data, we check who they are. We decide on a request within 7 days and complete a request for a copy within 30 days; we answer a request to stop using your data within 14 days; and we stop at once if you object. There is no charge. You may also complain to the Personal Data Protection Office.
Cookies, analytics & advertising tools
When you first visit, we ask which cookies you allow. Nothing beyond essential cookies runs until you choose, and you can change your mind at any time through the Cookie settings link at the foot of every page. You can browse and enquire without creating an account.
Before you choose, our hosting provider counts page visits. It sets no cookies and does not identify you.
Essential. We store your cookie choice in your own browser so we don't ask again on every page. This is always on.
Analytics (with your consent). Google Analytics tells us which pages people visit, how they arrived (for example from a social media post or an advert), their device type and rough location. We use it only in aggregate, to improve the site.
Advertising (with your consent). We may use advertising tools from Meta (Facebook and Instagram), Google, TikTok and X. They record that a browser visited our pages, clicked to call or WhatsApp us, used a calculator or sent an enquiry. This lets us measure whether our adverts work and show our adverts to people who have already shown interest. These companies receive that information under their own privacy policies. When you send an enquiry, the tools may receive your email address or phone number in scrambled (hashed) form, so they can match the visit to an account on their platform without seeing the details themselves.
What we never send to these tools: taxpayer identification numbers, national ID or passport numbers, tax amounts, details of any tax matter, client names, or bank and mobile money numbers. The partner portal and the client consent page carry no analytics or advertising tools at all.
Analytics data is kept for up to 14 months. Advertising audiences are kept for up to 12 months. Your cookie choice is kept in your browser until you change or clear it.
Contact
Privacy questions: consult@256taxconsultants.ug · +256 773 987 457 · Kampala, Uganda.