Data Protection Rules

1. Who we are

BPN Foundation Uganda ("BPN", "we") is the data controller for personal data collected through this seminar registration website. We process personal data in line with the Data Protection and Privacy Act, 2019 and the Data Protection and Privacy Regulations, 2021 of Uganda.

2. What data we collect

When you register for a seminar we collect your name, business or organisation, role, email address, phone number, the seminar you register for, your stated goals and payment details (mobile money number, amount, transaction reference and payment status). We do not store your mobile money PIN.

3. Why we use your data

We use your data to process your registration and payment, send confirmations, reminders and seminar materials by email and WhatsApp, issue and verify certificates, plan and improve our programmes, and meet legal, tax and accounting obligations. The legal basis is your consent and the performance of the registration you request.

4. Who we share it with

We share data only with service providers that help us run seminars — the payment provider (ioTec Pay and the mobile network operators), email and WhatsApp messaging providers, and our hosting provider — and only as needed for these purposes. Some providers may store data outside Uganda; where this happens we make sure adequate protection is in place as required by section 19 of the Act. We never sell your data.

5. How long we keep it

We keep registration and payment records for as long as needed for the purposes above and to meet legal and accounting requirements (generally up to 7 years for financial records), then delete or anonymise them.

6. How we protect it

Access to your data is limited to authorised BPN staff. We use encrypted connections, access controls and reputable service providers to protect it against loss, misuse or unauthorised access. If a breach happens, we will notify the PDPO and affected persons as required by law.

7. Your rights

You have the right to be informed, to access your personal data, to have it corrected or deleted, to object to or restrict its processing, and to withdraw your consent at any time (this does not affect processing done before withdrawal). You may opt out of reminders and marketing messages at any time.

To use these rights, contact us using the details below. If you are not satisfied with our response, you may complain to the Personal Data Protection Office (www.pdpo.go.ug).

8. Contact

Data Protection Officer, BPN Foundation Uganda — Email: info@bpn.ug.