Deployment review required: The Secretariat must approve this privacy notice against Uganda's applicable data protection obligations before collecting live personal data.
The portal collects identity, contact, media organisation, role and optional professional-credential information to review access applications and provide football communications services. It logs administrative actions, access approval decisions and match accreditation requests.
If provided during registration, passport-style photos and identity/credential files are stored outside the publicly served website directory. Only authorised Secretariat reviewers may download them. Profile photographs are limited to 1 MiB (maximum dimensions after processing 1080 × 1080); ID PDFs to 2 MiB. These files are used for registration review, not stadium-access authorisation. Administrators can remove an ID attachment from active storage; any encrypted backups remain subject to the Secretariat's approved retention and deletion schedule.
Only authorised Secretariat administrators review applications. Club administrators cannot access private media applicant information. Stored files are protected by access controls. Operational retention and deletion requests are governed by the Secretariat's approved retention schedule.
Applicants should be provided with an official data controller contact, lawful-basis notice, retention periods, rights-request procedure and third-party service provider information before production launch.