DATA PROTECTION

Data Protection / GDPR

Updated: 25 / 01 / 2026

Covering: United Kingdom (UK GDPR), Uganda (Data Protection & Privacy Act 2019), and UAE Federal Data Protection Law (PDPL)

1. Introduction

Britannia Elite Ltd (“we”, “us”, “our”) is committed to protecting the privacy, confidentiality, and security of all personal data entrusted to us. This policy outlines how we collect, use, store, share, and protect personal data in accordance with:

• UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018
• Uganda Data Protection and Privacy Act 2019
• UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL)

This policy applies to all individuals whose data we process, including clients, trainees, employees, contractors, and website users.

2. Company information

Company name: Britannia Elite Ltd

Company number: 14855565

Registered address: 90 Paul Street, London, England, United Kingdom, EC2A 4NE

Email: info@britannia-elite.co.uk

3. Definitions

Personal Data: Any information that identifies or can identify an individual.

Processing: Any operation performed on personal data, including collection, storage, use, transfer, or deletion.

Data Subject: An individual whose personal data is processed.

Data Controller: Britannia Elite Ltd — the entity determining the purpose and means of processing.

Data Processor: Any third party processing data on our behalf.

4. Data we collect

4.1 Identity information

• Full name
• Date of birth
• Nationality
• Identification documents (passport, ID card, certificates)

4.2 Contact information

• Email address
• Phone number
• Residential or business address

4.3 Professional information

• Employment details
• Qualifications
• Training records
• Compliance documentation

4.4 Technical data

• IP address
• Device information
• Website usage data
• Cookies

4.5 Sensitive personal data (where applicable)

• Health information
• Security clearance information
• Criminal background checks (only where legally permitted)

5. Legal basis for processing

United Kingdom (UK GDPR)

• Consent
• Contractual necessity
• Legal obligation
• Legitimate interests
• Public interest

Uganda (Data Protection & Privacy Act 2019)

• Consent
• Contract
• Legal requirement
• Vital interests
• Public interest

United Arab Emirates (PDPL)

• Consent
• Contractual necessity
• Legal requirement
• Public interest
• Vital interests

6. How we use personal data

We use personal data for:

• Delivering training and certification services
• Managing enrolments and attendance
• Verifying identity and qualifications
• Ensuring compliance with regulatory requirements
• Maintaining security and safeguarding
• Communicating updates and operational notices
• Improving our services and website
• Legal, regulatory, and audit purposes

We do not sell personal data.

7. International data transfers

We operate in the UK, Uganda, and UAE, which may require transferring data across borders.

UK GDPR

• Adequacy decisions
• Standard Contractual Clauses (SCCs)
• Transfer Risk Assessments

Uganda

• Adequate protection
• Consent
• Compliance with the Data Protection & Privacy Act 2019

UAE PDPL

• Adequate protection
• Contractual safeguards
• Compliance with Executive Regulations

All transfers are lawful, secure, and documented.

8. Data retention

We retain personal data only as long as necessary:

• Training records: 7 years
• Compliance documentation: as required by law
• Financial records: 6 years (UK requirement)
• Website analytics: up to 24 months

Data is securely deleted or anonymised when no longer required.

9. Data subject rights

UK GDPR

• Right to be informed
• Access
• Rectification
• Erasure
• Restriction
• Data portability
• Objection
• Withdraw consent (where processing is based on consent)

Uganda (Data Protection & Privacy Act 2019)

• Access
• Correction
• Deletion
• Prevention of processing in certain circumstances

UAE PDPL

• Access
• Correction
• Erasure
• Restriction
• Stop processing
• Data portability

Requests are handled within statutory timeframes applicable in each jurisdiction.

10. Data security

We implement strong technical and organisational measures, including:

• Encryption
• Secure servers
• Access controls
• Staff confidentiality agreements
• Regular audits
• Secure disposal procedures

11. Sharing personal data

We may share data with:

• Regulatory authorities
• Training accreditation bodies
• Security vetting agencies
• IT service providers
• Payment processors
• Legal or compliance advisors

All third parties are bound by confidentiality and data protection obligations.

12. Cookies and website tracking

UK GDPR / PECR

• Non-essential cookies require consent
• Users must be able to reject cookies

Uganda & UAE

• Users must be informed of tracking technologies, where used

See our Cookie Policy for full details.

13. Children’s data

We do not knowingly collect data from individuals under 16 without parental or guardian consent.

14. Complaints

United Kingdom

You have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

Uganda

You may lodge a complaint with the Personal Data Protection Office (PDPO) under the National Information Technology Authority – Uganda (NITA-U).

United Arab Emirates

You may lodge a complaint with the UAE Data Office under the PDPL framework.

You may also contact us directly using the details below.

15. Contact us

Data Protection Officer

Britannia Elite Ltd

90 Paul Street, London, England, United Kingdom, EC2A 4NE

Email: info@britannia-elite.co.uk

16. Policy updates

This policy may be updated to reflect legal, operational, or regulatory changes. The latest version will always be available on our website.