Privacy Policy

1. Who this policy covers

In short NextRoleHub is the data collector. This policy covers this website only.

NextRoleHub operates this website, a job board publishing vacancies and career guidance for the Ugandan market. For the purposes of the Data Protection and Privacy Act, Cap. 97, NextRoleHub is the data collector and data controller in respect of personal data collected through this website.

This policy covers this website only. When you follow an application link to an employer, you leave NextRoleHub and that organisation’s own privacy practices apply to anything you send them.

2. What we collect

In short Very little. We have no applicant accounts and no CV uploads.

We have deliberately built the site so that browsing and applying require no account. As a result we hold far less personal data than a typical job platform.

We do not require or store CVs, academic documents, National ID numbers or any of the special personal data described in section 9 of the Act. Applications go directly to the employer, not through us.

3. Consent, and the purpose limit

In short We ask before we collect, and we only use it for the stated reason.

Section 7 of the Act requires your consent before personal data is collected or processed, and section 12 requires that it be collected for a specific, explicitly defined purpose. We ask at the point of collection and we say what for.

Under section 17, we will not later process your data for a purpose incompatible with the one you consented to. If we ever want to use it differently, we will ask again.

Consent is withdrawable. Every alert email carries an unsubscribe link, and you can email us to withdraw consent at any time.

4. Your rights under the Act

In short Access, correction, erasure, and the right to stop us processing.

• s. 24 Right to access Ask us what personal data we hold about you and receive a copy.
• s. 25 Right to prevent processing Require us to stop processing your data where it causes damage or distress.
• s. 26 Right to stop direct marketing Require us to stop sending you marketing, including job alerts.
• s. 27 Rights on automated decisions We make no automated decisions about you, so nothing to exercise this against.
• s. 28 Correction and erasure Have inaccurate data corrected, or blocked, erased and destroyed.

To exercise any of these, email us. We will respond within a reasonable period and will not charge you for a first request.

5. How long we keep it

In short Alerts: until you unsubscribe. Enquiries: two years. Logs: short.

Section 18 of the Act requires that personal data is not kept longer than necessary for the purpose it was collected for.

Job alert subscriptions are kept until you unsubscribe, after which the address is deleted. Correspondence and listing reports are kept for up to two years so we have a record of what was reported and what we did about it. Server logs are retained only as long as needed for security and performance work.

6. Security

In short HTTPS throughout, restricted access, and we tell you if there is a breach.

Section 20 of the Act requires appropriate security measures. The site is served over HTTPS, administrative access is restricted to named accounts, and access to any stored contact data is limited to those who need it to answer you.

Section 23 requires notification of data security breaches. If a breach affects your personal data we will notify the Personal Data Protection Office and, where the Act requires it, you.

7. Sharing and transfer outside Uganda

In short We do not sell your data. Some service providers sit outside Uganda.

We do not sell personal data, and we do not pass applicant details to employers: your application goes to them directly, by the route in the advert.

We use third-party services for hosting and site statistics, some of which process data outside Uganda. Section 19 of the Act and regulation 15 permit this only where the destination country has protection at least equivalent to the Act, or where you have consented. We choose providers on that basis.

8. Cookies

In short Essential cookies, plus anonymous statistics. No advertising profiles.

We use cookies necessary for the site to work and to understand which pages are read, in aggregate. We do not build advertising profiles and we do not sell audience data.

You can block or delete cookies in your browser settings. The site remains usable if you do.

9. Children

In short The site is for adults seeking work.

Section 8 of the Act gives personal data relating to children specific protection. This site is intended for adults in the labour market and we do not knowingly collect personal data from children. If you believe we hold data about a child, contact us and we will delete it.

10. Complaints

In short Come to us first. You can also go straight to the regulator.

If you think we have mishandled your personal data, contact us first and we will investigate.

You also have the right to complain directly to the Personal Data Protection Office, the independent authority under NITA-U responsible for enforcing the Act. The Office receives and investigates complaints about infringement of data subject rights under section 5 of the Act.