Data Privacy & Protection Policy
This policy details how Run-way Networks Ltd collects, processes, protects, and governs personal and operational data across our corporate website, enterprise ICT contracts, and physical electronic security deployments.
Run-way Networks adheres to principles of lawfulness, data minimization, transparency, purpose limitation, storage limitation, and cryptographic security. We never sell, rent, monetize, or trade personal data to third-party data brokers or marketing agencies.
Organizational Identity & Roles
Run-way Networks Ltd ("Run-way Networks", "the Company", "we", "our", or "us") is an officially incorporated Ugandan ICT and telecommunications engineering firm headquartered in Kampala, Uganda.
Under the statutory definitions established by the Data Protection and Privacy Act, 2019 of the Republic of Uganda, Run-way Networks acts in the following capacities:
We act as a Data Controller with respect to inquiries collected via our corporate website (runway.co.ug), our direct client commercial contacts, and the physical security records of our own corporate offices.
We act as a Data Processor when deploying, hosting, or maintaining managed enterprise systems (including enterprise networks, CCTV infrastructure, and biometric access control hardware) on behalf of corporate clients under Service Level Agreements (SLAs).
Registered Corporate Address: Maria House, Plot 13-14 Kataza Close, Zone 6 Kiswa Parish, Bugolobi, Kampala, Uganda
Postal Address: P.O. Box 200930, Kampala, Uganda
Official Data Privacy Office: technicalcare@runway.co.ug
Technical Care Line: +256 756 902 390
Scope & Platforms Covered
- Corporate Website: The public web domain at runway.co.ug, including contact submission forms and service proposal requests.
- Physical & Electronic Security Deployments: Closed-Circuit Television (CCTV) surveillance systems, multi-zone perimeter intrusion alarms, and biometric access control installations engineered or maintained by Run-way Networks.
Categories of Data Collected
3.1 Corporate Inquiries & Website Interactions
When prospective enterprise clients submit technical consultation or proposal requests, we collect:
- Contact Identifiers: Full name, corporate email address, phone number, and organization name.
- Scope Parameters: Selected primary service discipline and project narrative.
- Technical Metadata: Server logs and submission timestamps for security rate-limiting. We do not deploy third-party advertising cookies or cross-site tracking pixels.
3.2 Enterprise B2B Client & Contractor Data
- Corporate Credentials: Authorized technical and procurement officer names, corporate billing addresses, tax identification, and NDAs.
- Emergency Dispatch Contacts: Designated 24/7 NOC contacts and escalation engineers for priority 4-hour MTTR SLA response.
3.3 Physical Security Systems: CCTV, Intrusion Alarms & Biometrics
- CCTV Video Surveillance Footage: Visual video streams and recordings captured within perimeter access gates, server rooms, telecom shelters, and facility corridors.
- Biometric Data (Hashed Vectors): For biometric access control and time-attendance terminals, features are converted locally into mathematical hash templates. Raw biometric imagery is not exported across public networks.
- Access Control & Alarm Incident Logs: RFID badge swipes, door contact timestamps, and visitor entry registries.
Lawful Bases for Processing
Processing required to fulfill enterprise network contracts, optical fiber installations, and power supply SLAs.
Specific, informed consent provided by individuals submitting consultation inquiries via our contact form.
Safeguarding critical telecommunications infrastructure, data center premises, and workplace personnel via security monitoring.
Adhering to UCC telecom licensing regulations, tax accounting, and lawful statutory obligations under Ugandan law.
Data Retention Schedules & Disposal
| Data Classification | Retention Schedule | Disposal Protocol |
|---|---|---|
| Website Consultation Inquiries | 24 months from inquiry resolution | Secure log deletion |
| Enterprise B2B Contract Records | Duration of contract + 7 years statutory period | Secure archival / deletion |
| CCTV Surveillance Video Footage | 30 to 90 days rolling overwrite buffer | Automated FIFO NVR/DVR loop overwrite |
Technical & Organizational Safeguards
Web endpoints enforce Transport Layer Security (TLS / HTTPS) with strict transport headers and Content Security Policies.
Security systems, CCTV subnets, and biometric controllers are placed on isolated VLANs protected by enterprise firewalls.
Your Legal Rights as a Data Subject
Cookies & Local Storage
This website uses only a strictly necessary session cookie on the Contact page to protect form submissions against Cross-Site Request Forgery (CSRF). We do not use analytics, advertising, profiling, or remarketing cookies.
Data Protection Officer & Inquiries
Run-way Networks Ltd — Data Privacy & Compliance Office
Attention: Head of HRM, Quality Control & Data Protection