Privacy Policy for BIMS Mobile Application

The National Building Review Board (NBRB) operates the Building Industry Management System (BIMS) mobile application. This page informs users of our policies regarding the collection, use, disclosure, and protection of personal data when using our mobile app, in full compliance with the Uganda Data Protection and Privacy Act, 2019.

1. Information We Collect

To provide structural workflows, permit applications, and professional verifications, we collect the following categories of information:

• Personal Identification Data: Full name, National Identification Number (NIN), Passport Number, passport photo, and digital signatures.
• Contact Information: Phone number, corporate/personal email address, and physical/postal address.
• Professional Credentials: Registration numbers, practicing certificates, stamps, and institutional affiliations (for Architects, Engineers, Surveyors, etc.).
• Device and Location Metadata: IP addresses, device operating system details, and precise geographical coordinates (GPS logs) to verify site inspection submissions.

2. How We Use Your Data

We process your personal information to fulfill our statutory mandates under the Building Control Act, 2013, including:

• Authenticating users across the Client/Developer, Professionals, and Local Authority portals.
• Processing building permit applications and occupation permits.
• Tracking site inspection submissions and monitoring building control workflows.
• Sending automated SMS notices and email notifications regarding project statuses.

3. Data Sharing and Third-Party Disclosures

We do not sell your personal data. Your information is only shared with authorized statutory bodies and stakeholders involved in the building control chain, including:

• Local Authorities: Municipal and City Councils for localized building review approvals.
• National Identification and Registration Authority (NIRA): Solely for validating NIN credentials during account creation.
• Professional Regulatory Bodies: To cross-reference active membership status (e.g., ERB, ARB, SRB).

4. Data Security

The security of your data is a core priority. We implement appropriate technical, administrative, and physical safety barriers to block unauthorized access, modification, or exposure of your building records and personal identifiers.

5. Data Retention and Archival Policies

Pursuant to Section 18 of the Uganda Data Protection and Privacy Act, 2019, personal information is retained only as long as necessary to fulfill the legal and functional goals of the platform. However, because structural computations, blueprint data, and building permits directly impact public safety, regulatory project data is archived in secure storage infrastructure for statutory auditing timelines.

6. Your Rights and Account Deletion

Under the law, you retain the right to access, rectify, or request the deletion of your personal profile data. If you choose to erase your platform identity:

• You may request complete profile erasure through our dedicated web terminal at BIMS Account Deletion Page.
• Upon identity verification, your application user profile and authentication tokens will be removed within 30 days. Historical building files tied to ongoing municipal approvals cannot be deleted dynamically due to statutory retention codes.

7. Changes to This Privacy Policy

We may refresh our Privacy Policy from time to time to mirror regulatory shifts. Any adjustments become active immediately upon posting the updated layout on this page.

8. Contact Us

If you possess queries or feedback regarding this data privacy declaration, please contact our Data Protection Officer:

• Web Portal: bims.go.ug / nbrb.go.ug
• Support Email: support@nbrb.go.ug