Privacy Policy

Data Protection & Privacy Policy

Introduction

Kilama Business Incubation & Innovation Lab (hereinafter referred to as “Kilama Lab”) is committed to safeguarding the privacy of our clients, visitors, and users. This Privacy Policy outlines how we collect, use, store, and protect personal information in compliance with the Data Protection and Privacy Act, 2019 (Uganda) and, where applicable, international data protection standards, including the General Data Protection Regulation (GDPR).

  1. Information We Collect

Kilama Lab collects personal data in various ways, including through our website, during consultations, and through our services. This information may include:

  1. Personal Identification Information: Name, address, email, telephone number, and national identification number.
  2. Professional Information: Company name, position, and business sector.
  3. Financial Information: Payment details, invoicing information, and any financial data necessary for payment processing.
  4. Technical Data: IP addresses, browser type, operating system, and device information collected through cookies and analytics
  5. Communications: Records of emails, telephone calls, and other communications.
  6. Purpose of Data Collection and Use

Kilama Lab collects and processes personal data for the following purposes:

  1. Service Provision: To deliver incubation, business development, and consultancy services.
  2. Client Communication: To facilitate communication with clients regarding our services, updates, and contractual obligations.
  3. Legal Compliance: To comply with national and international laws, including reporting obligations to authorities when necessary.
  4. Business Analytics: To analyze website traffic, improve our services, and provide a better user experience.
  5. Payment Processing: To process payments securely for our services.
  • Legal Basis for Processing

Kilama Lab processes personal data based on the following legal grounds:

  1. Consent: Where consent has been provided, such as for marketing communications or optional analytics.
  2. Contractual Obligations: When data processing is necessary to fulfill a service contract.
  3. Legitimate Interest: For legitimate business purposes, provided they do not override client rights.
  4. Legal Obligations: To fulfill legal and regulatory requirements under Ugandan and international laws.
  1. Data Protection and Security

Kilama Lab is committed to implementing measures to ensure the security and confidentiality of personal data, including:

  1. Encryption: All sensitive data transmitted through our systems is encrypted.
  2. Access Controls: Only authorized personnel have access to personal data, based on their roles and responsibilities.
  3. Data Minimization: Only the necessary data is collected and processed to fulfill specific purposes.
  4. Regular Security Audits: We conduct periodic security assessments to identify and address vulnerabilities.
  5. Storage Limitation: Data is retained only for as long as necessary to fulfill the purposes outlined in this policy.
  1. Data Retention

Kilama Lab retains personal data only for as long as is necessary to provide services, comply with legal obligations, or meet our legitimate business interests. Upon termination of services, data may be anonymized or securely deleted in line with data protection regulations.

  1. Data Sharing and Disclosure

Kilama Lab does not sell, lease, or disclose personal data to third parties, except in the following cases:

  1. Service Providers: We may share data with third-party providers who assist with services, such as payment processors or analytics providers, bound by data protection agreements.
  2. Legal Compliance: When required by law or regulation, we may share data with governmental or regulatory bodies.
  3. Business Transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred to the new entity, subject to appropriate privacy protections.
  • International Data Transfers

Kilama Lab may transfer personal data outside of Uganda, ensuring compliance with data protection standards, such as the GDPR’s adequacy requirements or contractual safeguards.

  • Client Rights

In compliance with the Data Protection and Privacy Act, 2019, and GDPR, clients have the following rights:

  1. Right to Access: Request a copy of personal data we hold.
  2. Right to Rectification: Correct any inaccurate or incomplete data.
  3. Right to Erasure: Request deletion of data, where applicable.
  4. Right to Restrict Processing: Limit the processing of data under certain conditions.
  5. Right to Data Portability: Request transfer of data to another entity, where feasible.
  6. Right to Object: Object to processing for direct marketing or legitimate interest purposes.
  7. Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis.
  1. Use of Cookies

Kilama Lab uses cookies and similar technologies to improve user experience and analyze traffic. Cookies are small files stored on a user’s device. You can modify your browser settings to decline cookies; however, this may affect the website’s functionality.

Types of Cookies Used:

  1. Essential Cookies: Necessary for website functionality.
  2. Analytical Cookies: Help us understand user behavior for improvement.
  3. Marketing Cookies: Track preferences for targeted advertising.
  1. Data Breach Response

In the event of a data breach, Kilama Lab will:

  1. Promptly assess and contain the breach.
  2. Notify affected clients if the breach poses a high risk to their privacy rights.
  3. Report the breach to the Uganda Personal Data Protection Office and other relevant authorities within the specified timeframe, if required.
  1. Changes to this Policy

Kilama Lab may update this Privacy Policy periodically to reflect changes in our practices or legal obligations. Clients will be notified of significant updates, and the revised policy will be available on our website.

  • Contact Us

For questions, concerns, or requests regarding your personal data, please contact us at:

Kilama Business Incubation & Innovation Lab

P.O. Box 176448, Kampala (Uganda)

+256776730011

info@kilamalabs.com

B] Non- Disclosure Agreement Policy

Non-Disclosure Agreement (NDA)

Introduction

This Non-Disclosure Agreement (hereinafter referred to as “Agreement”) is made between Kilama Business Incubation & Innovation Lab (hereinafter referred to as “Kilama Lab,” “we,” “us,” or “our”) and any client, partner, or contractor (hereinafter referred to as “Party” or “Parties”) to protect the confidentiality of sensitive information disclosed during business interactions.

  1. Definition of Confidential Information

For the purpose of this Agreement, “Confidential Information” includes, but is not limited to:

  1. Business strategies, plans, or financial information.
  2. Proprietary information, trade secrets, or intellectual property.
  • Any documents, communications, or materials labeled as confidential.
  1. Personal or client data shared for service provision.

Exceptions: Information does not qualify as Confidential Information if it:

  1. Was already known to the receiving Party before disclosure.
  2. Becomes publicly available through no fault of the receiving Party.
  • Is independently developed without reference to the Confidential Information.
  1. Obligations of the Receiving Party

The receiving Party agrees to:

  1. Maintain the confidentiality of the disclosed information and take all necessary steps to prevent unauthorized disclosure.
  2. Use the Confidential Information solely for purposes related to the agreed services.
  • Restrict access to Confidential Information to employees, contractors, or advisors who need to know, ensuring they comply with confidentiality terms.
  1. Permitted Disclosure

Confidential Information may only be disclosed:

  1. With prior written consent from the disclosing Party.
  2. If required by law, in which case the receiving Party will notify the disclosing Party as soon as practicable and cooperate to limit the disclosure.
  3. Term and Duration

This Agreement is effective from the date of first engagement and remains in force for:

10 years after the termination of the business relationship; or

Indefinitely, for Confidential Information that constitutes a trade secret or is otherwise critical to the business.

  1. Return or Destruction of Information

Upon termination of the business relationship or at the disclosing Party’s request, the receiving Party agrees to:

  1. Return or securely destroy all copies of the Confidential Information, including electronic records.
  2. Certify the return or destruction of all Confidential Information, if requested.
  3. Intellectual Property Rights

Nothing in this Agreement transfers or grants any rights, title, or interest in the Confidential Information or any intellectual property associated with it to the receiving Party.

  1. Remedies for Breach

The Parties acknowledge that any breach of this Agreement could cause irreparable harm to the disclosing Party. In the event of a breach, the disclosing Party may seek:

  1. Injunctive relief to prevent further unauthorized disclosure.
  2. Damages resulting from the breach.
  • Any other remedies available under the laws of the Republic of Uganda and relevant international laws.
  1. Governing Law and Jurisdiction

This Agreement shall be governed by and construed in accordance with the laws of the Republic of Uganda. Any disputes arising under this Agreement shall be subject to the exclusive jurisdiction of Ugandan courts.

  1. Amendments and Waivers

Any amendments to this Agreement must be in writing and signed by both Parties. No waiver of any provision of this Agreement shall be deemed a waiver of any subsequent breach of that or any other provision.

  1. Contact Information

For any inquiries regarding this Agreement, please contact us at:

Kilama Business Incubation & Innovation Lab

P.O. Box 176448, Kampala (Uganda)

+256776730011

info@kilamalabs.com