Corporate Privacy Policy

1. Data Controller & Identity

This Privacy Policy applies to personal information processed by Mulun Technologies Co. Ltd ('Mulun', 'we', 'us', or 'our'), a corporate technology company established under the laws of the Republic of Uganda with registered operations in Kampala.

For any questions regarding this policy or our data practices, our Data Protection Officer may be contacted via privacy@mulun.tech.

2. Information We Collect

Information You Provide Directly: When you submit inquiries through our corporate forms, request technical consultations, apply for partnerships, submit job applications, or contact support, we collect your name, business email, telephone number, organisation name, job title, and project requirements.

Technical & System Information: When you visit mulun.tech, our servers automatically receive standard HTTP request headers, IP address (anonymized for analytics), browser type, referring URL, and interaction timestamps necessary for secure site delivery.

Special Categories of Data: Mulun Tech does not solicit or require sensitive personal data (such as health, biometric, political, or religious data) through its public website.

3. Lawful Bases for Processing

Consent: We process information for general inquiries, newsletter dispatches, and non-essential analytics solely where you have granted unambiguous affirmative consent.

Contractual Necessity: We process commercial inquiries, vendor proposals, and consultation requests to take preparatory steps at your request prior to entering into a formal agreement.

Legitimate Interests: We process security telemetry, IP addresses, and form rate-limiting signals to safeguard our infrastructure against denial-of-service attacks, spam, and fraud.

Legal Compliance: We maintain records as required by applicable Ugandan taxation, commercial company law, and regulatory reporting mandates.

4. Data Sharing & Third Parties

We never sell, rent, or trade your personal data to third-party data brokers or marketing intermediaries.

Data may be processed by vetted infrastructure service providers bound by strict data processing agreements, including Cloudflare (edge routing and CDN security) and transactional communications providers.

We may disclose records if strictly required by a lawful court order, statutory subpoena, or verified regulatory authority under Ugandan law.

5. Data Retention & Security Controls

We retain consultation records and commercial inquiries for twenty-four (24) months following the last verified communication unless a client contract requires longer retention.

Technical server logs are retained for thirty (30) days and automatically purged.

Security safeguards include TLS 1.3 transit encryption, AES-256 rest encryption, least-privilege role-based access, and routine vulnerability audits.

6. Your Data Subject Rights

Under the Uganda Data Protection and Privacy Act (2019), you have the right to request access to your personal data, request correction of inaccurate records, request deletion of your information, or object to specific processing activities.

To exercise these rights, submit a formal request to privacy@mulun.tech with proof of identity. We respond to verified data subject requests within fourteen (14) business days at zero cost.