Privacy Policy
Why we collect and process personal data
For the purpose of establishment, continuation and management of banking relationships and in order for the Bank to fulfil the contract with a customer for a product or service requested, we need to collect and process that customer’s personal data. This includes the following:
Processing applications for products and services
Effecting Transactions
Completing Instructions Or Requests
Providing Products And Services
Assessing Suitability For A Product Or Service
Credit Assessments
Statistical Purposes
surveillance of bank premises including atms for security purposes
The prevention, detection, investigation of criminal activity such as money laundering, terrorism financing, fraud, corruption, embezzlement and other financial crimes
Conduct Due Diligence Checks
Comply with legal obligations, regulatory directives, court orders, government sanctions, prudential reporting requirements and law enforcement directives
We may also process your personal data where it is in our legitimate interests to seek professional advice. For example, to defend our rights in connection with any legal proceedings.
Disclosure Of Personal Data
Centenary Bank may disclose your personal data to any of the following parties in connection with any of the purposes outlined above:
Any director, officer or employee of the bank
Professional advisers such as auditors, third party service providers, agents or independent contractors providing services to support the bank’s business
Any person to whom disclosure is permitted or required by law
Any court, regulatory body, law enforcement agency where required by law
Credit bureaus or credit reference agency
Any financial institution conducting credit, fraud and anti-money laundering checks for prevention of financial crime
Personal Data Outside Uganda
The bank will not process or store personal data outside Uganda without the express consent of the data owner. Where such consent is obtained, the bank shall ensure the country where the data is to be processed or stored has adequate laws in place for the protection of such data equivalent or greater than Uganda.
Security Of Personal Data
The security of personal data is of paramount importance. The bank has put in place robust technical and administrative information security measures to safeguard your personal data. We also ensure that third party service providers adhere to security standards mandated by the bank. Regardless of where personal data is transferred, we take all steps reasonably necessary to ensure that personal data is kept securely.
While we strive for the highest standards of security, you should be aware that the internet is not a secure form of communication. Thus, sending us any personal data over the internet carries with it risks including the risk of access and interference by unauthorized third parties. Information sent through the internet may be transmitted internationally (even when sender and recipient are located in the same country) via countries with weaker privacy and data protection laws than Uganda.
Retention Of Personal Data
The bank only retains your personal data in line with our legal and regulatory obligations and for business and operational purposes. This means we keep personal data for at least 10 years from when a transaction was conducted. In the case of account holders, we keep personal data for at least 10 years from when the account is closed.
Your Rights
You are entitled to the following data protection rights;
Right to access personal information
Right to prevent processing of personal data
Right to prevent processing of personal data for direct marketing
Rights in relation to automated decision-taking
Rights to rectification, blocking, erasure and destruction of personal data
Complaints
If you have a complaint in relation to your personal data, you may visit the nearest branch and submit your complaint OR contact the Data Protection Officer using;
- Data Protection Officer,
- Centenary Bank, Mapeera House,
- Plot 44/46 Kampala Road.
- P.O Box 1892 Kampala
- Email: dataprotection@centenarybank.co.ug
- Tel: +256 (0) 417 202 132 / 317 202 132
You also have the right to complain to the Personal Data Protection Office at the National Information and Technology Authority (NITA).
Changes To This Data Privacy Statement
This Privacy Policy may be updated from time to time and you are advised to visit our website regularly to check for any amendments. This policy was last updated on 10/3/2022.