PERSONAL DATA PRIVACY NOTICE

In line with the Data Protection and Privacy Act (2019) and International best practices of handling personal Data, we have summarised our Privacy notice for transparency as below:

Data Protection Officer

We appointed a Data Protection Officer who heads our Personal Data protection culture.

He ensures that as an institution, we have embedded and continue to monitor the principles of Data protection and observance of Data subject’s rights as enshrined within the law.

Below are the contact details:

Name:  Namayanja Vivian

Contact:   0752 711 877

Email: vnamayanja@goldstarinsurance.com.

Type of Personal Data we obtain and process

We collect data from individuals to enable us offer our Insurance Service that meet’s the individual’s needs.  This data collected through our KYC (know your customer) form will cover the following areas; gender, nationality, residential details, profession, date of birth and national Id/passport details. 

What is the purpose of collecting this information?

This is to enable us tailor an insurance policy that meets the needs of the customer and also create a data base for current and future engagements on our service offering. 

Do we share personal data with any other organisations either in country or overseas?

No we do not.  The only exception is where it is a mandatory requirement to share personal data with regulators or other grounds as specified in Section 7 of the Act. 

What is the retention period of personal Data?

Except as provided otherwise by the law on retention period for various forms of Data, we retain personal Data for a period of 5(five) years for clients who are no longer active in line with the laws of Uganda.

After this period, we archive this Data for another period of 3(three) years and destroy it thereafter within 2years.  For all active clients, we continue to maintain their Data for as long as they are still active. 

What are the Individual’s rights?

When you entrust us with your personal Data, you have rights and these include the following:

• A right to correction / rectification of your Data.
• A right to ask for Erasure of your Data
• A right to Access your personal Data either as a physical or soft copy
• A right to prevent processing of your Personal Data for Direct Marketing
• A Right to complain in case of breach of processing of your Personal Data. We have an internal complaints management system and you can contact the DPO. If not satisfied, you have a right to complain to the Personal Data Protection Office established under the Act.

In all our dealings with you, we will ensure transparency; safeguard your Personal Data and only use it strictly for purposes for which we obtained it.