Legal
Privacy Policy
Oasis Hive Limited respects your privacy and handles personal data in line with the Uganda Data Protection and Privacy Act, 2019 and its regulations. This policy explains what we collect, why we collect it, how we protect it and what rights you have.
01 Who we are
Oasis Hive Limited is a company registered in Uganda with its registered office at Hive House, Plot 14 Kimathi Avenue, Kampala. We are the data controller for personal data collected through this website and in the course of our own business operations.
Where we process data on behalf of a client as part of a software project, we act as a data processor and the client is the controller. In those cases the client's own privacy notice governs and our processing is set out in a written data processing agreement.
02 What we collect
We collect only what we need to respond to you and to run our business.
- Contact details you submit through our forms: name, organisation, email address, telephone number and the content of your message.
- Recruitment data you send when applying for a role: your CV, contact details and any information you choose to share.
- Technical data generated when you visit: IP address, browser type, pages viewed and referring source, used in aggregate to understand how the site performs.
- Business records relating to our engagements, including correspondence and project documentation.
We do not knowingly collect data from children, and we do not collect special category data through this website.
03 Why we process it
We process personal data on the following lawful bases:
- To take steps at your request before entering a contract, or to perform a contract with you.
- For our legitimate interests in running and promoting our business, provided those interests are not overridden by your rights.
- To comply with legal, tax, audit and regulatory obligations.
- With your consent, where we send you information about our services. You may withdraw that consent at any time.
04 How long we keep it
Enquiry and contact data is retained for up to twenty-four months from our last interaction, after which it is deleted. Recruitment data is retained for twelve months unless you ask us to keep it longer. Contractual and financial records are retained for seven years to meet statutory requirements. Website analytics data is retained in aggregate form for up to twenty-six months.
05 Who we share it with
We do not sell personal data and we do not share it for third-party marketing.
- Service providers who process data on our behalf under written agreements, such as our email, hosting and accounting providers.
- Professional advisers, including lawyers and auditors, where necessary.
- Regulators, courts or law enforcement where we are legally required to disclose.
- A prospective buyer in the event of a business sale, under confidentiality obligations.
Where a provider stores data outside Uganda, we ensure appropriate safeguards are in place, including contractual protections and a transfer risk assessment.
06 How we protect it
We apply encryption in transit and at rest, role-based access control, multi-factor authentication on all administrative systems, routine patching and logging. Access to personal data is limited to staff who need it to do their work. We review our security posture regularly and test it through internal and external assessment.
If a personal data breach occurs that is likely to result in a risk to your rights, we will notify the Personal Data Protection Office and any affected individuals without undue delay, in line with our statutory obligations.
07 Your rights
Under the Data Protection and Privacy Act, 2019 you have the right to:
- Be informed about how your personal data is being used.
- Access the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of data we no longer have a lawful reason to keep.
- Object to processing based on legitimate interests, and to withdraw consent at any time.
- Request restriction of processing while a concern is investigated.
- Lodge a complaint with the Personal Data Protection Office.
To exercise any of these rights, email privacy@oasishiveltd.com. We will respond within thirty days. We may ask you to verify your identity before we act, and there is no charge for a reasonable request.
08 Cookies
This website uses a small number of cookies. Essential cookies are required for the site to function and cannot be switched off. Analytics cookies help us understand which pages are useful, and are only set with your agreement. We do not use advertising or cross-site tracking cookies.
09 Changes to this policy
We may update this policy to reflect changes in law or in how we operate. The revision date at the top of this page always reflects the current version, and material changes will be highlighted on the site.
10 Contact us
For any privacy question or request, contact our data protection contact at privacy@oasishiveltd.com, or write to us at Oasis Hive Limited, Hive House, Plot 14 Kimathi Avenue, Kampala, Uganda.