Business Excellence Awards Official Website
Effective Date: 01 Jan 2025
1. Purpose of This Policy
This Data Protection Policy explains how Consumer Publications Uganda Limited protects personal data collected through the Business Excellence Awards official website and related communication channels.
The purpose of this Policy is to ensure that personal data is collected, processed, stored, used, shared, and protected lawfully, fairly, securely, and transparently.
2. Scope of This Policy
This Policy applies to personal data collected from:
- Website visitors
- Nominees
- Nominators
- Sponsors
- Partners
- Award participants
- Media representatives
- Event guests
- Vendors and service providers
- Members of the public who contact the Business Excellence Awards
- Persons submitting inquiries, nominations, forms, or communication through the website
3. Data Controller
For purposes of this Policy, the data controller is:
Consumer Publications Uganda Limited
Organiser of the Business Excellence Awards
Plot 2-4, Kimathi Avenue, UAP Building, Kampala, Uganda
Email: info@businessexcellenceawards.co.ug
Phone: +256 774 120 992 / +256 774 001 474
Consumer Publications Uganda Limited determines the purposes and means of processing personal data collected through the main Business Excellence Awards website.
4. Data Protection Principles
Consumer Publications Uganda Limited shall apply the following data protection principles:
a) Lawfulness, Fairness, and Transparency
Personal data shall be collected and processed lawfully, fairly, and transparently.
b) Purpose Limitation
Personal data shall only be collected for clear, specific, and legitimate purposes connected to the Business Excellence Awards.
c) Data Minimisation
Only personal data that is necessary for the intended purpose shall be collected.
d) Accuracy
Reasonable steps shall be taken to ensure that personal data is accurate, complete, and updated where necessary.
e) Storage Limitation
Personal data shall not be kept longer than necessary, unless retention is required for legal, audit, historical, administrative, or legitimate business purposes.
f) Confidentiality and Security
Personal data shall be protected against unauthorised access, unlawful disclosure, accidental loss, misuse, alteration, or destruction.
g) Accountability
Consumer Publications Uganda Limited shall take reasonable steps to ensure compliance with this Policy and applicable data protection requirements.
5. Categories of Personal Data Processed
The website may collect and process the following categories of personal data:
- Names
- Email addresses
- Phone numbers
- Job titles
- Company or organisation names
- Business profiles
- Nomination details
- Sponsorship inquiries
- Media and publicity information
- Website usage data
- Technical data such as IP address, browser type, and device type
- Communication records
6. Purpose of Processing Personal Data
Personal data may be processed for the following purposes:
- Managing website inquiries
- Receiving and reviewing nominations
- Communicating with nominees and participants
- Managing sponsorship and partnership inquiries
- Organising award-related events
- Publishing approved award-related content
- Sending updates about the Business Excellence Awards
- Promoting award winners, sponsors, partners, and nominees
- Improving website performance and visitor experience
- Maintaining website security
- Preparing reports, directories, publications, and media materials
- Complying with legal and regulatory obligations
7. Nomination and Award Data
Information submitted through nomination, inquiry, or participation forms may be reviewed by authorised persons involved in the Business Excellence Awards process.
This may include information about businesses, company representatives, products, services, categories, achievements, supporting documents, and contact persons.
Approved nominee, sponsor, partner, or winner information may be published on the website, in award materials, on social media, in media releases, or in event publications.
8. Website Analytics and Technical Data
The website may collect technical data to help us:
- Monitor website traffic
- Improve website content and structure
- Detect security threats
- Prevent spam or abuse
- Understand visitor engagement
- Troubleshoot technical problems
Where possible, analytics data shall be used in aggregated or non-identifying form.
9. Access Control
Access to personal data shall be limited to authorised persons who need it for legitimate Business Excellence Awards purposes.
This may include:
- Consumer Publications Uganda Limited staff
- Business Excellence Awards organising team
- Website administrators
- Technical support providers
- Event and communication teams
- Authorised consultants, where necessary
All persons with access to personal data are expected to handle it confidentially and responsibly.
10. Data Sharing and Disclosure
Personal data shall only be shared where necessary and appropriate.
It may be shared with:
- Authorised award administrators
- Website hosting and technical service providers
- Event management service providers
- Media and publication service providers
- Sponsors or partners, where relevant and authorised
- Legal, audit, regulatory, or professional advisers
- Public authorities where disclosure is required by law
Consumer Publications Uganda Limited shall not sell personal data.
11. Data Security Measures
Reasonable security measures shall be used to protect personal data, including:
- Restricted administrator access
- Secure website hosting
- Password protection
- Access controls
- Regular monitoring of website activity
- Backups where appropriate
- Secure handling of forms and inquiries
- Limiting access to authorised personnel only
Users are encouraged not to submit highly sensitive personal data through ordinary website forms unless specifically requested and necessary.
12. Data Retention
Personal data shall be retained only for as long as necessary for the purpose for which it was collected.
Retention periods may depend on:
- The nature of the inquiry or nomination
- Award participation status
- Sponsor or partner engagement
- Legal and regulatory obligations
- Audit or reporting requirements
- Historical award records
- Dispute resolution needs
When personal data is no longer needed, it shall be securely deleted, anonymised, or archived.
13. Direct Marketing and Communication
Consumer Publications Uganda Limited may use contact details to send award-related updates, event invitations, sponsorship information, nomination updates, newsletters, and relevant communications.
Any person may request to stop receiving direct marketing communication by contacting us in writing.
14. Data Subject Rights
Subject to applicable law, individuals whose data is processed may have the right to:
- Request access to their personal data
- Request correction of inaccurate or incomplete data
- Request erasure, blocking, or destruction of inaccurate or unlawfully processed data
- Object to certain forms of processing
- Withdraw consent where consent is the legal basis
- Request that direct marketing communication stops
- Lodge a complaint about the handling of their personal data
The Uganda Personal Data Protection Office and Data Protection and Privacy Act framework recognise rights relating to access, correction, rectification, blocking, erasure, and destruction of personal data.
15. Handling Data Requests
A person wishing to exercise their data protection rights should contact Consumer Publications Uganda Limited using the contact details below.
The request should include:
- Full name
- Contact details
- Nature of the request
- Relevant website form, nomination, or communication reference, where applicable
- Proof of identity, where required
We may request additional information to verify identity before acting on a request.
16. Data Breach Management
Where a suspected data breach occurs, Consumer Publications Uganda Limited shall take reasonable steps to:
- Identify the nature of the breach
- Contain the incident
- Assess the likely impact
- Take corrective measures
- Notify affected persons where necessary
- Notify the relevant authority where legally required
- Improve safeguards to reduce the risk of recurrence
17. Third-Party Processors and Service Providers
Where third-party service providers process personal data on our behalf, they shall be expected to process it only for authorised purposes and to apply reasonable confidentiality and security safeguards.
Such providers may include website hosting companies, email service providers, IT support providers, event service providers, media service providers, and other professional service providers.
18. Cross-Border Processing
Where website tools, hosting systems, email systems, analytics platforms, or service providers process or store data outside Uganda, reasonable steps shall be taken to ensure that personal data is handled securely and in line with applicable data protection requirements.
19. Review of This Policy
This Policy may be reviewed and updated from time to time to reflect changes in the website, award processes, legal obligations, or data protection practices.
The latest version shall be published on the Business Excellence Awards official website.
20. Contact for Data Protection Matters
For data protection requests, corrections, complaints, or privacy-related inquiries, please contact:
Consumer Publications Uganda Limited
Organiser of the Business Excellence Awards
Address: Plot 2-4, Kimathi Avenue, UAP Building, Kampala, Uganda
Email: info@businessexcellenceawards.co.ug
Phone: +256 774 120 992 / +256 774 001 474