Privacy & Cookie Policy

1. Who we are

Grange Investments Ltd (registered company 126926, registered office Plot 1 Cooper Road, Kampala) is the data controller responsible for personal data processed in connection with this website and our consulting engagements.

2. The personal data we collect

• Contact details you provide when you message our Business & Legal Team (name, email, telephone, organisation).
• Correspondence and engagement records relating to consulting, partnership or procurement enquiries.
• Limited technical information collected automatically by our website, such as IP address and browser type.

3. How and why we use it

We process personal data only on a lawful basis under the Act — principally your consent, the performance of a contract, compliance with a legal obligation, or our legitimate business interests. We use it to respond to enquiries, deliver and administer engagements, meet legal and regulatory duties (including anti-money-laundering checks), and maintain the security of our operations.

4. Consent

Where we rely on consent, you may withdraw it at any time by contacting us. The Act treats consent as a central principle, and we will not process your data for a new, incompatible purpose without a lawful basis to do so.

5. Sharing and transfers

We do not sell personal data. We may share it with professional advisers, partners and government counterparties strictly where necessary for an engagement, and with competent authorities where required by law. Any transfer of personal data outside Uganda is made only where the conditions in the Act and Regulations are satisfied, including adequate protection at the destination.

6. Storage, security and retention

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or disclosure, and retain it only for as long as necessary for the purpose collected or as required by law.

7. Your rights

• To be informed about, and to access, the personal data we hold about you.
• To request correction of inaccurate or incomplete data.
• To object to or restrict certain processing, and to withdraw consent.
• To request erasure where there is no lawful reason for us to continue holding it.
• To complain to the Personal Data Protection Office.

8. Cookies

Our website uses a small number of cookies to operate correctly and to understand how the site is used. By default we set only essential cookies; non-essential analytics cookies are used only with your agreement, which you may decline or withdraw through your browser settings or our cookie banner.

9. Contact

To exercise any right, or to raise a privacy concern, contact our Business & Legal Team at info@grangeinvestments.cloud. If you are not satisfied with our response, you may refer the matter to the Personal Data Protection Office (PDPO), NITA-U, Kampala.