Privacy controls
A plain-language operational summary of how this website is designed to handle information. The governed KYC release remains closed until the full organisation-approved notice and controls are in force.
VERSION 2026-10-27-V4
For privacy questions, corrections, objections, or complaints, email contact@al-areen.com.ug. Do not email identity documents unless an authorised reviewer has provided a secured submission channel.
When enabled, Supabase provides platform authentication. Google or Apple processes sign-in only when you choose that provider. Service and appointment requests are stored by this site and are visible to the account that submitted them and authorised operational staff. A request does not confirm an appointment or authorise a payment.
This summary covers visitors, prospective counterparties, authorised representatives, suppliers, buyers, logistics providers, and other users of this website and its secured operational tools.
The public interface may handle contact details, commercial inputs, quotation or pro forma data, language and theme preferences, and authentication identifiers. When the governed KYC channel is enabled, it may also handle identity, ownership, source-of-funds, sourcing, trade, logistics, risk, and supporting-document information.
Information is used to respond to enquiries, protect accounts, prepare requested commercial drafts, review counterparties and transactions, prevent fraud, support responsible sourcing, meet applicable legal or regulatory duties, maintain records, and investigate service or security incidents.
Public identity-document intake is disabled by default. It may be enabled only after the responsible officers approve the full privacy notice, access rules, screening process, processor controls, retention schedule, rights workflow, breach response, and compliance release evidence.
KYC files are designed for restricted object storage outside the public web root. Searchable records are minimised, access is attributable, and an upload is quarantined for review rather than treated as verified. No internet system is risk-free, so users should submit documents only through the authorised secured channel.
Information is retained only under an approved operational and legal schedule. It may be shared with authorised staff and necessary vetted service providers, professional advisers, financial or logistics counterparties, screening providers, or public authorities where the transaction, law, or a valid request requires it.
You may ask for access, correction, or an explanation of how your information is handled, and may raise an objection or complaint. Some records may need to be preserved where anti-money-laundering, tax, dispute, security, or other lawful retention duties apply.
The site uses necessary first-party storage for security, access, and saved consent. Optional preference, analytics, or marketing categories remain off unless selected, and a category does nothing unless a corresponding integration is actually present.
This summary does not announce PDPO registration, a named DPO, a mineral licence, or completed KYC approval. Those claims remain unpublished until their evidence is validated and formally approved.