Privacy Policy

This Privacy Policy explains how Grange Investments Ltd (“we”, “us”, “our”) handles personal information collected through the trackandtrace.legal website (“the website”). Track & Trace is a justice-sector project of Grange Investments Ltd. We are committed to handling personal information lawfully, fairly and transparently.

Important scope note. This policy relates to the website only. The website does not operate monitoring or tracking devices and does not collect or process the personal data of individuals subject to electronic monitoring or judicial supervision. Any operational monitoring is carried out separately, under the lawful authority of the relevant justice institutions and their own data-protection arrangements.

Who we are (data controller)

Grange Investments Ltd is the data controller for personal information collected through this website.
Grange Investments Ltd, PO Box 161649, Kampala GPO, Plot 1 Cooper Road, Kampala, Uganda.
Email: info@grangeinvestments.cloud.

Legal framework

We handle personal information in accordance with the Data Protection and Privacy Act 2019 of Uganda and the Data Protection and Privacy Regulations 2021, overseen by the Personal Data Protection Office within the National Information Technology Authority, Uganda (NITA-U). Where visitors access the website from other jurisdictions, we seek to apply equivalent standards of protection, consistent with recognised international frameworks.

Information we collect

We collect only limited personal information through this website:

• Information you provide directly — when you contact us by email or through an enquiry, such as your name, organisation, email address and the content of your message.
• Information collected automatically — basic technical and usage information such as your IP address, browser and device type, the pages you visit and the time of your visit, collected through cookies and analytics tools (see our Cookie Policy).

We do not intentionally collect special categories of personal data through this website, and we ask that you do not send sensitive personal information by email.

How we use your information

• To respond to your enquiries and correspond with you about the project.
• To provide information you have requested.
• To operate, maintain, secure and improve the website.
• To understand, in aggregate, how the website is used.
• To comply with our legal obligations.

Lawful basis for processing

We process personal information on the basis of your consent, which you may withdraw at any time; our legitimate interest in responding to enquiries and operating a secure, effective website, balanced against your rights and interests; and, where applicable, our need to comply with a legal obligation.

Sharing your information

We do not sell personal information. We may share it only with:

• service providers who help us operate the website and our communications (for example hosting, security and analytics providers), under appropriate confidentiality and data-protection terms; and
• authorities or third parties where required by law, or to establish, exercise or defend legal rights.

International transfers

Some service providers may process information outside Uganda. Where personal information is transferred outside Uganda, we take steps to ensure it is protected to a standard consistent with the Data Protection and Privacy Act 2019, transferring only where adequate protection exists.

Data security

We use appropriate technical and organisational measures to protect personal information, including encrypted connections (SSL/TLS), access controls and secure hosting. No method of transmission over the internet is completely secure, but we work to protect your information and review our measures regularly.

Retention

We keep personal information only for as long as necessary for the purposes described in this policy — for example, to deal with your enquiry and any reasonable follow-up — after which it is securely deleted or anonymised, unless a longer period is required by law.

Your rights

Subject to applicable law, you have the right to:

• access the personal information we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion of your information;
• object to, or request restriction of, our processing;
• withdraw consent at any time; and
• lodge a complaint with the Personal Data Protection Office (NITA-U).

To exercise any of these rights, contact us at info@grangeinvestments.cloud. We will respond within the timeframes required by law.

Cookies

This website uses cookies and similar technologies, described in our Cookie Policy.

Children

This website is intended for government, justice-sector and professional audiences and is not directed at children. We do not knowingly collect personal information from children.

Third-party links

The website may link to external websites. We are not responsible for the privacy practices or content of those sites and encourage you to review their privacy policies.

Changes to this policy

We may update this policy from time to time. The current version will always be published on this page with the date it was last updated.

Contact and complaints

For any question about this policy or your personal information, contact Grange Investments Ltd at info@grangeinvestments.cloud, or by post at PO Box 161649, Kampala GPO, Plot 1 Cooper Road, Kampala, Uganda. You also have the right to complain to the Personal Data Protection Office within NITA-U.

Last updated: July 2026.