Data Protection Policy

QConsult is committed to the lawful, fair, and transparent processing of personal data in line with the Uganda Data Protection and Privacy Act and applicable international standards.

1. Lawful basis

We process personal data on the basis of contract, legal obligation, legitimate interests, or consent.

2. Data minimisation

We collect only the data necessary for the stated purpose and retain it only as long as required.

3. Processors & transfers

Third-party processors are bound by written agreements that require equivalent safeguards. International transfers are made under appropriate legal mechanisms.

4. Rights of data subjects

Data subjects may exercise rights of access, rectification, erasure, and objection by writing to hello@qconsult.co.

5. Incidents

Security incidents are managed under our incident response procedure and notified to authorities and affected individuals as required by law.