DATA PROTECTION / GDPR
UPDATED 25 / 01 / 2026
Covering: United Kingdom (UK GDPR), Uganda (Data Protection & Privacy Act 2019), and UAE Federal Data Protection Law (PDPL
1. Introduction
Britannia Elite Ltd (“we”, “us”, “our”) is committed to protecting the privacy, confidentiality, and security of all personal data entrusted to us. This policy outlines how we collect, use, store, share, and protect personal data in accordance with:
- UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018
- Uganda Data Protection and Privacy Act 2019
- UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL)
This policy applies to all individuals whose data we process, including clients, trainees, employees, contractors, and website users.
2. Company Information
Britannia Elite Ltd Company Number: 14855565 Registered Address: 90 Paul Street, London, England, United Kingdom, EC2A 4NE Email: info@britannia-elite.co.uk
3. Definitions
Personal Data Any information that identifies or can identify an individual.
Processing Any operation performed on personal data, including collection, storage, use, transfer, or deletion.
Data Subject An individual whose personal data is processed.
Data Controller Britannia Elite Ltd — the entity determining the purpose and means of processing.
Data Processor Any third party processing data on our behalf.
4. Data We Collect
4.1 Identity Information
- Full name
- Date of birth
- Nationality
- Identification documents (passport, ID card, certificates)
4.2 Contact Information
- Email address
- Phone number
- Residential or business address
4.3 Professional Information
- Employment details
- Qualifications
- Training records
- Compliance documentation
4.4 Technical Data
- IP address
- Device information
- Website usage data
- Cookies
4.5 Sensitive Personal Data (where applicable)
- Health information
- Security clearance information
- Criminal background checks (only where legally permitted
5. Legal Basis for Processing
United Kingdom (UK GDPR)
- Consent
- Contractual necessity
- Legal obligation
- Legitimate interests
- Public interest
Uganda (Data Protection & Privacy Act 2019)
- Consent
- Contract
- Legal requirement
- Vital interests
- Public interes
United Arab Emirates (PDPL)
- Consent
- Contractual necessity
- Legal requirement
- Public interest
- Vital interests
6. How We Use Personal Data
We use personal data for:
- Delivering training and certification services
- Managing enrolments and attendance
- Verifying identity and qualifications
- Ensuring compliance with regulatory requirements
- Maintaining security and safeguarding
- Communicating updates and operational notices
- Improving our services and website
- Legal, regulatory, and audit purposes
We do not sell personal data.
7. International Data Transfers
We operate in the UK, Uganda, and UAE, which may require transferring data across borders.
UK GDPR
- Adequacy decisions
- Standard Contractual Clauses (SCCs)
- Transfer Risk Assessments
Uganda
- Adequate protection
- Consent
- Compliance with the Data Protection & Privacy Act
UAE PDPL
- Adequate protection
- Contractual safeguards
- Compliance with Executive Regulations
All transfers are lawful, secure, and documented.
8. Data Retention
We retain personal data only as long as necessary:
- Training records: 7 years
- Compliance documentation: as required by law
- Financial records: 6 years (UK requirement)
- Website analytics: up to 24 months
Data is securely deleted or anonymised when no longer required.
9. Data Subject Rights
UK GDPR
- Access
- Rectification
- Erasure
- Restriction
- Data portability
- Objection
- Withdraw consent
Uganda
- Access
- Correction
- Deletion
- Prevention of processing
UAE PDPL
- Access
- Correction
- Erasure
- Restriction
- Stop processing
- Data portability
Requests are handled within statutory timeframes.
10. Data Security
We implement strong technical and organisational measures:
- Encryption
- Secure servers
- Access controls
- Staff confidentiality agreements
- Regular audits
- Secure disposal procedures
11. Sharing Personal Data
We may share data with:
- Regulatory authorities
- Training accreditation bodies
- Security vetting agencies
- IT service providers
- Payment processors
- Legal or compliance advisors
All third parties are bound by confidentiality and data protection obligations.
12. Cookies and Website Tracking
UK GDPR / PECR
- Non-essential cookies require consent
- Users must be able to reject cookies
Uganda & UAE
- Users must be informed of tracking technologies
See our Cookie Policy for full details.
13. Children’s Data
We do not knowingly collect data from individuals under 16 without parental or guardian consent.
14. Complaints
UK
Information Commissioner’s Office (ICO)
Uganda
Personal Data Protection Office (PDPO)
UAE
UAE Data Office (PDPL)
You may also contact us directly.
15. Contact Us
Data Protection Officer Britannia Elite Ltd 90 Paul Street, London, England, United Kingdom, EC2A 4NE Email: info@britannia-elite.co.uk
16. Policy Updates
This policy may be updated to reflect legal, operational, or regulatory changes. The latest version will always be available on our website.