Privacy policy.

1. Who we are

This website is operated by Grid Innovations Ltd, P.O. Box 165469, Kampala, Uganda (“Grid”, “we”, “us”). For the purposes of Uganda’s Data Protection and Privacy Act, 2019, Grid is the data controller for personal data described in this policy. You can reach us at info@gridinnovations.net or on +256 707 540 203.

2. Information we collect

We collect personal data in two ways only.

• Information you give us. If you email or telephone us, we receive your name, contact details, organisation, the content of your message and anything else you choose to tell us.
• Technical information. Like any website, the server that delivers these pages records basic access logs: your IP address, the date and time, the page requested and your browser or device type. This is kept by our hosting provider for security and to keep the site running.

This website has no registration, accounts, payment, newsletter sign-up or contact form. We do not use analytics, advertising or tracking tools. The evidence-card builder runs entirely in your browser: what you type into it is not sent to us or saved by us.

3. How and why we use it

We use personal data to:

• respond to your enquiry and, where you ask us to, discuss or scope an assignment;
• operate, secure and troubleshoot this website;
• meet legal and regulatory obligations and protect our legal rights.

Our lawful bases are your consent (which you give when you contact us, and may withdraw at any time), steps taken at your request before entering into a contract, our legitimate interest in running a secure website, and compliance with the law. We do not use personal data for automated decision-making, and we do not send marketing messages unless you have asked to receive them.

4. Who we share it with

We do not sell or rent personal data. We share it only with: service providers that host this website and provide our email, who act on our instructions; professional advisers bound by confidentiality; and public authorities where the law requires. Where we later engage a specialist collaborator on an assignment you commission, we will tell you before sharing your information with them.

5. Storage and transfers outside Uganda

Our hosting and email providers may store information on servers outside Uganda. Where personal data leaves Uganda, we rely on your consent or on the recipient country or provider offering protection at least equivalent to Ugandan law, and we keep a record of the basis for the transfer.

6. How long we keep it

We keep correspondence only for as long as it is needed to answer you, to carry out any work you commission and to meet legal obligations, and then delete or anonymise it. Server logs are kept by the hosting provider for a short, routine period.

7. Security

We use reasonable technical and organisational measures to protect personal data, including access controls on our email and hosting accounts and encrypted connections to this website. No method of transmission over the internet is completely secure. If a breach affecting your personal data occurs, we will respond and notify the Personal Data Protection Office and affected people as the law requires.

8. Your rights

Under Uganda’s Data Protection and Privacy Act, 2019 you may ask us to:

• confirm whether we hold personal data about you and give you a copy;
• correct information that is inaccurate or incomplete;
• delete or destroy information we no longer need or have no right to keep;
• stop or restrict processing, or object to it;
• withdraw your consent at any time, without affecting earlier processing.

To exercise a right, email info@gridinnovations.net. We may ask you to confirm your identity first. If you are unhappy with how we handle your data, please tell us so we can put it right. You may also complain to the Personal Data Protection Office, the data protection regulator in Uganda.

9. Please do not send sensitive material

Please do not send identifiable customer records, financial account details, health information or other sensitive personal data to us by email or telephone before an appropriate written arrangement is agreed.

10. Children

This website is intended for business, research and institutional audiences and is not directed at children. We do not knowingly collect personal data from children.

11. Links to other websites

This website links to publishers and other organisations. They have their own privacy practices and we are not responsible for them.

12. Cookies

We do not use cookies or similar tracking technologies. See our cookie notice.

13. Changes to this policy

We will update this page if our practices change, for example if we add a contact form or analytics. The effective date at the top of the page shows the latest version.