Privacy Policy

1. Who controls your data

Data controller: Clifford Opwonya Group Studios (SMC) Limited, trading as COG Studios Uganda.

Address: Plot 182 Kaduyu Road, Kampala, Uganda.
Email: info@cog-studios.com
Telephone: +256 200 926110

For privacy questions or requests, use the contact details above and mark the message “Privacy request”.

2. Personal data we collect

• Enquiry data: your name, email address, phone number, selected service, project details, and any other information you submit through EventProGo.
• Client and transaction data: quotations, contracts, invoices, payment status, delivery records, correspondence, and project contacts.
• Production data: photographs, video, audio, names, roles, releases, approvals, and other information needed to plan, produce, edit, deliver, or publish commissioned work.
• Preference data: your colour-theme choice and optional-media consent choice stored in your browser.
• Third-party technical data: if you choose to load EventProGo, YouTube, or Google Maps, those providers may receive your IP address, browser and device information, referring page, and their own cookie or similar-technology data.

The EventProGo form remains blocked until you give the separate consent shown on the contact page. EventProGo processes the form submission on behalf of COG Studios. Please do not submit health, financial, identification, passwords, payment credentials, or other sensitive information through the general enquiry form unless we have specifically asked for it and explained why it is needed.

3. Why and how we use personal data

We use personal data only for defined purposes:

• to answer an enquiry and take steps you request before entering a contract;
• to prepare quotations, schedule resources, perform and administer a production contract, deliver work, and provide support;
• to keep accounting, tax, contractual, and dispute records where required by law or reasonably necessary;
• to protect our website, systems, people, equipment, and legal rights;
• to publish identifiable portfolio material, testimonials, or promotional content only where we have an appropriate written permission, release, contractual right, or other lawful basis; and
• to load optional external media when you have chosen to allow it.

Where Ugandan law requires consent, it must be freely given, specific, informed, and indicated by a clear affirmative action. You may withdraw consent for future processing by contacting us. Withdrawal does not make earlier lawful processing unlawful.

4. Who may receive personal data

We limit access to people and providers who need the information for the stated purpose. Depending on your choices and project, recipients may include:

• authorised COG Studios personnel and contracted production crew;
• EventProGo, when you choose to load and submit the enquiry form;
• website hosting, email, storage, communications, accounting, payment, delivery, and professional advisers used to operate the business;
• YouTube and Google, only when you allow optional external media or follow a direct link to their services;
• public authorities, courts, or regulators where disclosure is legally required; and
• the client, venue, platform, broadcaster, or delivery recipient identified in the relevant production agreement.

We do not sell personal data. The main site does not install analytics or advertising pixels. After you load EventProGo, that provider may use its own security and usage technologies within the embedded form.

Processing outside Uganda

Some service providers may process data outside Uganda. Before using a provider for personal data, we seek appropriate contractual and security protections and, where required by the Data Protection and Privacy Act, 2019, an adequate level of protection or the data subject’s consent.

5. How long we keep data

• Unsuccessful or inactive enquiries: up to 12 months after the last meaningful contact.
• Client, contract, invoice, and transaction records: for the applicable tax, accounting, contractual, and legal limitation periods.
• Production source files and deliverables: for the period stated in the quotation or production agreement; if no period is stated, only while reasonably needed for delivery, agreed archiving, or legal claims.
• Consent and theme preferences: optional-media consent is stored in your browser for up to 180 days; the theme preference remains until you change it or clear browser storage.
• Published portfolio material: until the permission or lawful basis ends, the material is no longer needed, or a valid objection or withdrawal requires removal.

At the end of the relevant period, records are securely deleted, destroyed, or de-identified unless the law requires continued retention.

6. Security

We use proportionate administrative, contractual, and technical measures to reduce unauthorised access, loss, alteration, or disclosure. No internet service is completely secure, so please use the contact channels provided if an enquiry contains confidential information that should not be sent through a web form.

7. Your rights

Subject to applicable law, you may ask whether we hold personal data about you and request access, correction, completion, deletion, or cessation of processing. You may also object where the law allows, withdraw consent for future processing, and ask for an explanation of the recipients and retention period.

We may need to verify your identity before acting on a request. We aim to respond promptly and within the period required by Ugandan law.

Children

This website is not directed to children. Do not submit a child’s personal data through the enquiry form. Productions involving children require authorisation from a parent, guardian, or other person legally able to consent, unless another lawful basis applies.

8. Contact and complaints

Send privacy questions or requests to info@cog-studios.com. If you believe your personal data has been mishandled, you may also lodge a complaint with Uganda’s Personal Data Protection Office at pdpo.go.ug.

9. Changes to this policy

We may update this policy when our services, providers, or legal obligations change. The current version and review date will remain available on this page.