Mulika Studios Ltd logoMulika Studios

Data Protection

Privacy Policy

How Mulika Studios collects, uses, protects, and respects your personal data under the Uganda Data Protection and Privacy Act 2019.

Mulika Studios Ltd · Data Protection Policy

Last updated: July 2026 · PDPO & GDPR Standard

1. Introduction & Data Controller

At Mulika Studios Ltd ("Mulika Studios", "we", "us", or "our"), we value your privacy and are committed to protecting your personal data across all our platforms, including our main site (mulikastudios.com) and our digital audio library division Mulika Audio Safari (MAS) (Privacy Policy for Audio Safari).

Mulika Studios Ltd operates as the primary Data Controller under the Data Protection and Privacy Act, 2019 of Uganda. For international clients, our practices align with global data protection standards including the General Data Protection Regulation (GDPR).

2. Information We Collect

We collect personal information through direct interactions, automated site operations, and transaction processing:

A. Personal & Account Information

Full name, email address, phone number, physical address, user role (Client, Student, Engineer, Admin), and encrypted password hashes (`bcrypt`).

B. Financial & Payout Details

Payment transaction references, Mobile Money phone numbers, bank payout details, billing addresses, PRO affiliations (e.g., UPRS, ASCAP, PRS), and IPI/CAE numbers required for royalty split sheet distribution.

C. E-Signature & Audit Trail Metadata

When signing split sheets or co-production agreements: typed legal name, two-factor email OTP verification timestamps, IP address, device user-agent string, document SHA-256 cryptographic hashes, and signature timestamps.

D. LMS Education & Audio Content

Course enrollment history, lesson progress, interactive quiz scores, uploaded demo review audio files (stored via secure presigned Cloudflare R2 links), and community forum posts/replies.

E. Device & Technical Log Data

IP address, browser type, operating system, HTTP referrer, page view analytics, and secure HTTP-only session cookies (`jose` signed JWTs).

3. Legal Basis & Purposes of Data Processing

We process your personal data under the following lawful bases and for specific operational purposes:

  • Contract Performance: Processing studio bookings, delivering digital asset downloads (MAS & sample packs), providing course access, and managing B2B post-production deliverables.
  • Legal Compliance: Maintaining audit trails for electronic contracts and e-signatures under the Electronic Transactions Act, 2011 and Copyright and Neighbouring Rights (Amendment) Act, 2026, as well as accounting and tax compliance.
  • Legitimate Interests: Protecting studio systems against fraud, securing platform servers, analyzing website usage to improve audio post workflows, and managing community discussions.
  • Consent: Sending newsletters, promotional launch updates, and marketing communications (you may withdraw consent at any time).

4. Third-Party Service Providers & Disclosures

Mulika Studios does not sell or rent your personal data to third parties. We share data only with trusted service providers necessary for platform operations:

  • Cloud Infrastructure & Audio Storage: Secure storage of demo reviews and media assets via Cloudflare R2 with access control policies.
  • Transactional Email & OTP Delivery: Delivery of account verification, e-signature OTP codes, and invoice receipts via Resend.
  • Payment Processors: Payment gateways and Mobile Money aggregators for processing booking fees and digital product purchases.
  • Legal & Regulatory Authorities: Document submission to the Uganda Registration Services Bureau (URSB) for optional copyright registration or when required by court orders or Ugandan law enforcement.

5. Security Measures & Data Retention

Security Safeguards

We implement technical and organizational measures to safeguard your information, including SSL/TLS transport encryption, bcrypt password hashing, signed HTTP-only JWT cookies, restricted server file permissions, and SHA-256 integrity verification for legal contracts.

Data Retention Periods

  • Account Data: Retained as long as your account remains active. Account deletion removes personal profile details while preserving executed contract records.
  • Executed Contracts & Audit Logs: Retained for the statutory duration of copyright protection (life of author + 50 years under Ugandan copyright law) to maintain legal proof of ownership.
  • Demo Uploads & Review Files: Stored during project lifecycle and deleted after 90 days of project delivery unless extended by written agreement.

6. Your Privacy Rights (Uganda Data Protection Act 2019)

Under the Data Protection and Privacy Act, 2019 of Uganda, you hold specific rights regarding your personal data:

Right to Information & Access

Request details and copies of the personal data we hold about you.

Right to Rectification

Request correction of inaccurate or incomplete personal details.

Right to Erasure

Request deletion of personal data where processing is no longer required (subject to legal retention requirements).

Right to Object & Opt-Out

Unsubscribe from marketing emails or object to processing based on legitimate interests.

To exercise any of these rights, contact our Data Protection Officer at admin@mulikastudios.com. You also have the right to lodge a complaint with the Personal Data Protection Office (PDPO) of Uganda.

7. Cookies & Session Management

We use essential HTTP-only cookies (`jose` signed JWTs) to maintain authenticated user sessions across website visits. We do not run intrusive third-party advertising tracking scripts.

You may configure your browser to block cookies, but doing so will prevent access to logged-in portal features such as booking management, courses, and contract e-signing.

8. Updates to this Policy & Contact Information

We may update this Privacy Policy from time to time to reflect changes in studio services or legal requirements. Material updates will be posted on this page with an updated revision date.

Mulika Studios Ltd — Privacy & Data Protection Office

Email: admin@mulikastudios.com

Phone: +256 773 010 177 · +256 760 399 517

Address: Kiwatule, Kampala, Uganda

Need assistance with your personal data or privacy preferences?