Privacy Policy

1. Introduction

97s Engineering Services Limited ("97s Engineering," "we," "us," or "our") respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy describes how we collect, use, disclose, and safeguard personal information when you visit our website at 97sengineerings.com, submit an enquiry, engage us for engineering services, or otherwise interact with us as a client, contractor, supplier, or partner.

This policy is issued in accordance with the Data Protection and Privacy Act, 2019 of the Republic of Uganda and the Data Protection and Privacy Regulations, 2021, and reflects internationally accepted principles of data protection.

2. Who we are

97s Engineering Services Limited is a private limited company registered in Uganda with over a decade of experience in the delivery of electrical, civil, and mechanical engineering works. Our services include powerline construction and maintenance, substation works, generator and solar installations, mechanical fabrication, building construction, and road and bridge engineering.

Our head office is located at Bunamwaya, Wankulukuku Road, Kampala, Uganda. For the purposes of this policy, 97s Engineering Services Limited is the data controller of the personal information described below.

3. Information we collect

We collect only the information we need to conduct our business responsibly and deliver engineering services to our clients. This includes:

3.1 Information you provide directly

• Your full name and the name of your organisation
• Your job title or role (for example, project manager, procurement officer, site engineer)
• Your email address and telephone number
• Your postal, billing, or site address
• The subject and content of any message you send through our contact form or by email
• Details of the enquiry, quotation request, tender, or project you are discussing with us
• Payment-related information required to process invoices (for example, billing contact, organisation tax identification number)
• Information contained in contracts, purchase orders, work permits, and other project documentation

3.2 Information collected automatically when you visit our website

• Your device's IP address and approximate location
• Browser type and version, operating system, and device information
• Pages you visit on our site, time spent, and referring website
• Cookie identifiers (see Section 12)

3.3 Information collected during project delivery

• Site location details and access arrangements
• Names and contact details of personnel assigned to a project by your organisation
• Photographs of project sites and completed works (excluding identifiable individuals unless their consent has been obtained)
• Health and safety information required for site induction, as mandated by applicable regulations

4. How we collect information

We collect personal information through the following channels:

• Our website contact form — when you submit a message through the form at 97sengineerings.com/contact-1
• Direct contact — when you call us, email us, visit our office, or meet with our team
• Tender submissions and project documents — purchase orders, contracts, site access permits, method statements, and invoices exchanged with your organisation
• Site visits and project meetings — during pre-construction surveys, site inspections, and project handover
• Referrals — when an existing client, partner, or supplier introduces you to us
• Website analytics — automatically, through cookies and similar technologies

5. How we use your information

We use personal information only for purposes directly connected to our engineering services and business relationship with you. Specifically, we use information to:

• Respond to enquiries submitted through our contact form, by phone, or by email
• Prepare tender submissions, quotations, method statements, and project proposals
• Negotiate, execute, and manage contracts with our clients and subcontractors
• Plan, design, supervise, and deliver engineering works on site
• Coordinate with utility providers (for example, UMEME Limited, UEDCL) for powerline relocation and network works
• Issue invoices, process payments, and maintain financial records
• Comply with health, safety, environmental, and other statutory obligations
• Maintain records of our projects for quality assurance and future reference
• Improve our website, services, and customer experience
• Comply with our legal, tax, and regulatory obligations in Uganda

We do not sell, rent, or trade your personal information to third parties under any circumstance. We do not use your information for unsolicited marketing.

6. Legal basis for processing

We process personal information on the following lawful bases recognised under the Data Protection and Privacy Act, 2019:

• Performance of a contract — to deliver engineering services, issue invoices, and fulfil our obligations to you
• Legitimate business interests — to respond to enquiries, manage project communications, and maintain client, contractor, and supplier relationships
• Legal obligation — to keep transactional, employment, safety, and tax records required by Ugandan law
• Consent — where you have explicitly agreed, for example when submitting an enquiry through our website contact form

7. Sharing & third parties

We share personal information only when necessary, and only with parties who are bound by confidentiality or equivalent obligations. These may include:

• Main contractors and project clients with whom we are jointly executing a project (for example, construction firms engaging us for powerline relocation or substation works)
• Subcontractors, consultants, and specialist suppliers engaged to deliver parts of a project on our behalf
• Utility companies and regulators such as UMEME Limited, UEDCL, the Electricity Regulatory Authority, and the Uganda National Roads Authority, where required to obtain permits, approvals, or handover documentation
• Service providers that support our operations, including our website hosting provider, email provider, and accounting software providers
• Professional advisers such as auditors, accountants, and legal counsel, where disclosure is necessary
• Government and regulatory authorities where we are required by law to disclose information (for example, the Uganda Revenue Authority or a court order)

Some of our service providers may process data outside Uganda. Where this occurs, we take reasonable steps to ensure that your personal information continues to be protected to a standard consistent with the Data Protection and Privacy Act, 2019.

8. Data security

We apply reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration, or disclosure. These measures include:

• Access controls on our computer systems and business records
• Password protection on user accounts and devices
• Secure storage of physical project documents, drawings, and contracts at our offices
• Confidentiality clauses in our employment and subcontractor agreements
• Staff awareness of data protection and professional confidentiality obligations

No method of transmission or storage can be guaranteed to be completely secure. If you believe your interaction with us is no longer secure, please contact us immediately using the details in Section 16.

9. Data retention

We retain personal information only for as long as necessary to fulfil the purposes for which it was collected, including:

• The duration of the active project and our business relationship with you or your organisation
• Any defects liability or warranty period associated with works we have executed
• Any additional period required by Ugandan tax, accounting, construction, or commercial law (typically up to ten years for transactional and project records)
• A reasonable period thereafter to resolve disputes, respond to regulatory audits, or enforce agreements

When personal information is no longer required, we securely delete or anonymise it.

10. Your rights

Under the Data Protection and Privacy Act, 2019, you have the following rights in relation to your personal information:

• Right of access — to request a copy of the personal information we hold about you
• Right of correction — to request that inaccurate or incomplete information be corrected
• Right to object — to object to our processing of your information in certain circumstances
• Right to erasure — to request deletion of your information, subject to our legal and contractual record-keeping obligations
• Right to withdraw consent — where we rely on consent as our legal basis, you may withdraw it at any time
• Right to lodge a complaint — with the Personal Data Protection Office (PDPO) under the National Information Technology Authority – Uganda (NITA-U)

To exercise any of these rights, please contact us using the details in Section 16. We will respond within the timelines required by law.

11. Email communications

The emails we send are strictly transactional and business-related — for example, replies to your enquiries, quotations and tender submissions, project updates, site coordination messages, and invoices. We do not send bulk marketing campaigns or unsolicited promotional emails.

If you no longer wish to receive emails from us, please reply to any of our messages requesting to be removed, or write to us at the address in Section 16. Your request will be honoured and your email address will be added to our internal suppression list.

12. Cookies & analytics

Our website may use cookies and similar technologies to function correctly, remember your preferences, and understand how visitors use the site. These may include essential cookies (required for the website to operate), preference cookies (to remember your choices), and analytics cookies (to help us understand traffic patterns).

You can configure your browser to refuse cookies or alert you when cookies are being sent; however, some parts of the site may not function properly if cookies are disabled.

13. Project & site information

In the course of delivering engineering works, we may capture photographs, drawings, as-built records, and other documentation of project sites and completed works. These are used for quality control, handover, portfolio, and archival purposes.

Where such material includes images or personal details of identifiable individuals, we obtain appropriate consent before use on our website, in our company profile, or in marketing materials. If you believe material on our site identifies you and you would like it removed, please contact us.

14. Children's privacy

Our services are directed at businesses, contractors, and professional stakeholders. We do not knowingly collect personal information from children under the age of 18. If you believe a child has provided us with personal information, please contact us and we will take steps to delete it.

15. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our operations, the services we offer, or applicable law. The "Last updated" date at the top of this page will indicate when changes were made. For material changes, we will take reasonable steps to notify you directly where appropriate.

16. Contact us

If you have questions about this Privacy Policy, wish to exercise any of your rights, or would like to raise a concern, please contact us:

If you are not satisfied with our response, you may lodge a complaint with the Personal Data Protection Office (PDPO) of Uganda, hosted under the National Information Technology Authority – Uganda (NITA-U).