UBA's Privacy Policy

This privacy policy regulates how personal information can be used by United Bank for Africa (UBA) Uganda.

The Privacy Policy

This Privacy Policy regulates how personal information can be used by United Bank for Africa Uganda (Limited) (“UBA” or “the Bank”)

In line with the provisions of the Personal Data Protection and Privacy Act, 2019, of Uganda, and other applicable Data Privacy laws and regulations, UBA maintains the following privacy principles, which govern how we collect, use and manage your personal data

Basis for collecting and processing Personal Data by the Bank

The Bank processes your personal data relying on any of the following legal grounds:

Where it is in the legitimate interests of the Bank (except where the interests or rights and freedoms of the data subject override those interests)

Collection of Personal Information

UBA (Uganda) is a financial institution with a banking license issued Bank of Uganda. Its Head office is situated at Plot 2, Jinja Road, Kampala Uganda and it has a business presence in Central, Mukono, Jinja, Mbale, Mbarara, Fortportal and Gulu.

As a responsible business, UBA Uganda is committed to complying with the relevant applicable data protection regulations when processing your personal data. 

The Personal Data Protection and Privacy Act, 2019 and GDPR give you certain rights regarding our use of your personal data, including the right to: 

Note that some laws or our requirement to comply with a Legal obligation to which the Bank is subject to may prevent us from providing access to your personal data or fully complying with your request, depending upon the circumstances and the request. For example, producing your information may reveal another person’s identity.

Thus, kindly note that we reserve the right to charge an appropriate fee for complying with your request where applicable law allows and/or deny your requests where they may be manifestly unfounded, excessive, or otherwise objectionable or unwarranted under applicable law. 

What do we need?

UBA Uganda will be known as the “controller” and “processor” of the personal data you provide to us.

Please note that UBA Uganda will NEVER ask for personal banking information such as card details (CVV), PIN, Password, Secure Passcode, or Token number.

Why do we need it?

We require your basic personal data to provide you with the banking services you have engaged us for based on the requirements of the respective Central banks and/or governmental regulations, which align with the applicable Data Privacy regulations and our Data Privacy Framework/Policy.

What do we do with it?

We collect, store, and process some of your personal data as required by law to enable you to obtain banking services through us.

All the personal data that the Bank collects from you will be held and processed securely by our Facilities at Kampala Headquarters or any of our branches and/or authorized service providers (third parties), where applicable. Your data will be confidential unless required by a Legal or regulatory requirement for the Banking services or where there is a legal basis for the processing of your processing of your personal data.

We will take all reasonable actions to ensure that the personal data of all customers and employees are handled securely and in a controlled manner. The Bank complies with the latest Information security standards such as PCI-DSS, ISO/IEC 27001:2022, etc.

How long do we keep it?

As a regulated financial services institution, we will retain your personal data as may be required by regulation in the country under consideration, after which it will be disposed of as required under the respective Government laws and Banking regulations.

Please note that regulations may require the Bank to retain your personal data for a specified period, even after the end of your banking relationship with us.

Use or Sharing of Personal Data

Personal data may be shared with third parties and service providers to deliver our services to you in accordance with the Personal Data Protection and Privacy Act, 2019, the General Data Protection Regulation (GDPR), and any applicable Data Protection Laws. 

In addition, we may disclose your personal data:

Data Security

At UBA Uganda, security is our top priority, and we always strive to ensure that your personal data is protected against unauthorized or accidental access. We maintain this commitment to data security by implementing appropriate physical, electronic, and managerial measures to safeguard and secure your personal data with us.

Our web servers are protected behind “firewalls”, and our systems are monitored to prevent unauthorized access. We will not send confidential information to you by ordinary email, as the security of ordinary email cannot be guaranteed.

All practical steps shall be taken to ensure that personal data will not be kept longer than necessary and that the Bank will comply with all statutory and regulatory requirements concerning the retention of personally identifiable information.

Our commitment to Data Security is paramount to us at UBA Uganda. Your personal data is kept secure in line with applicable Data Protection Regulations. Only our authorized staff, agents, and contractors (who have agreed to keep information secure and confidential) have access to this information.

Shared Responsibilities

UBA Uganda and its customers shall play an important role in protecting against online fraud. You should be careful that your bank account details, including your User ID and Password, are not compromised by ensuring you do not knowingly or accidentally share, provide, or facilitate unauthorized use. Please do not share your User ID and password or allow others to access or use them. UBA Uganda endeavors to put high-security standards in place to protect your interests.

You should safeguard your unique User ID and Password by keeping them secret and confidential. Never write them down or share these details with anyone.

You are responsible for informing us immediately if you think your User ID and password have been disclosed to a third party, are lost or stolen, and unauthorized transactions may have been conducted on your account.

Where you share the personal data of third parties with us, including your directors, officers, and authorized signatories (Data Subjects), you are responsible for and warrant that you shall obtain their written consent for the processing and transfer of their personal data for the purpose of your contract with us and the provision of banking services to you.

The consent of the parent or legal guardian of a child is mandatory. Age verification and consent are also required. This can be done using technology and Government identification documents.

Exemptions include the vital interest of a child, proceedings in court, education, medical or social care undertaken by a professional owing a duty of confidentiality.

Remedies for personal data violation

If your personal data is violated at any given time, you are at liberty to contact the Data Protection Officer (DPO) of the bank at complianceuganda@ubagroup.com

(i) UBA Uganda’s position with regard to the complaint and any action UBA Uganda has taken or will take in response; or,
(ii) When the individual will be informed of UBA Uganda’s position, which date shall be in line with data privacy requirements.

Cross Border Transfer

Given the scope of our banking operations, we may process data in multiple locations and rely on legally provided mechanisms to lawfully transfer data across borders. In such cases:

Changes to Privacy Policy

We review this Privacy Policy regularly and reserve the right to make changes at any time to reflect changes in our business and legal requirements. We will post updates on our website (www.ubauganda.com).

Privacy Contact Information

If you have any questions, concerns, or comments about our privacy policy, you may contact us using the information below:

  • – Phone:  +256 0417715100/253/252
  • – Mobile: +256780142329 (WhatsApp)
  • – Head Office: Plot 2 Jinja Road, Kampala Uganda P.O Box 7396, Kampala Uganda


You may also engage the supervisory authority Personal Data Protection Office (PDPO). if you wish to complain about how UBA Uganda handles or has handled your personal data or have concerns about how your complaint has been handled.