Back to home
Legal

Privacy Policy

How we collect, use, and protect your information when you interact with Mechanical Design Nexus.

Last updated: January 2025

1. Introduction

Mechanical Design Nexus (MDN) is a student-led engineering community at Makerere University, College of Engineering, Design, Art and Technology (CEDAT). This Privacy Policy explains what personal data we collect through mechanicaldesignnexus.com, why we collect it, how we use it, and your rights over that data.

2. Information We Collect

2.1 Information you provide

  • Account details: full name, email address, university or organization, role, and password hash.
  • Profile content: avatar, biography, social links, skills, and design portfolio.
  • User-generated content: design submissions, articles, comments, reactions, and poll votes.
  • Contact form submissions, session RSVPs, and newsletter subscriptions.

2.2 Information collected automatically

  • Technical data: IP address, browser type, device, operating system, and referral source.
  • Usage data: pages viewed, session duration, attendance events, and interaction patterns.
  • Cookies and similar technologies — see our Cookie Policy.

3. How We Use Your Information

  • Operate the platform, authenticate users, and secure accounts.
  • Deliver design sessions, resources, and community features.
  • Send transactional emails (password resets, session reminders, submission confirmations).
  • Send newsletters and announcements when you have opted in — you can unsubscribe at any time.
  • Prevent fraud, abuse, and violations of our Terms of Service.
  • Analyze aggregate usage to improve content and user experience.

4. Legal Basis for Processing

We process personal data on the following lawful bases:

  • Consent — for newsletter subscriptions and optional cookies.
  • Contract — to provide the services you signed up for.
  • Legitimate interest — to secure the platform and improve our services.
  • Legal obligation — where required by applicable law.

5. How We Share Information

We do not sell your personal data. We share information only:

  • With trusted service providers (hosting on Vercel and Render, database on Aiven) under data-processing agreements.
  • With Makerere University CEDAT faculty when required for academic or accreditation purposes.
  • When legally compelled by a valid court order, subpoena, or regulatory request.
  • In connection with an organizational merger, reorganization, or transfer — with prior notice.

6. Data Retention

We retain your data while your account is active and for up to 24 months after deactivation for audit and legal purposes. Anonymized analytics may be retained indefinitely. You may request earlier deletion — see Section 8.

7. Security

We protect your data with industry-standard measures including TLS 1.2+ encryption in transit, encryption at rest, bcrypt password hashing, role-based access control, rate limiting, audit logging, and regular dependency audits. No system is perfectly secure; please use a strong, unique password and enable any multi-factor options when available.

8. Your Rights

Subject to applicable law, you may:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your account and associated data.
  • Export your data in a portable format.
  • Withdraw consent for marketing communications.
  • Object to or restrict certain processing.

To exercise any of these rights, email mec.designnexus@gmail.com. We respond within 30 days.

9. Children's Privacy

MDN is intended for users aged 18 and above — primarily university students and professionals. We do not knowingly collect data from children under 13. If you believe a minor has provided us with personal data, contact us and we will delete it promptly.

10. International Transfers

Our infrastructure operates across multiple regions. By using MDN you acknowledge that your data may be transferred to and processed in countries other than Uganda under appropriate safeguards.

11. Changes to This Policy

We may update this policy to reflect changes in our practices or legal requirements. Material changes will be announced via email and a prominent notice on the site at least 14 days before taking effect.

12. Contact

Mechanical Design Nexus
Room 3034, CEDAT, Makerere University
Kampala, Uganda
Email: mec.designnexus@gmail.com

Questions about this document? Reach us at mec.designnexus@gmail.com