Privacy
Policy.

Ernst Planning Engineers (“EPE”, “we”, “us”, or “our”) respects your privacy and is committed to protecting the information entrusted to us.

This Privacy Policy explains how we handle information when you use EPEsitetrack, also referred to simply as SiteTrack (the “App”), and the services associated with the App.

SiteTrack is a project and construction site management application designed to help authorised users monitor projects, activities, progress, site reports, project teams, and related project information.

By using SiteTrack, you acknowledge that you have read and understood this Privacy Policy.

EPEsitetrack is operated by Ernst Planning Engineers (EPE), a professional engineering and project management organisation based in Uganda.

The SiteTrack website is sitetrack.ernstplanning.com.

For privacy questions, requests, or concerns, please contact Ernst Planning Engineers through the contact details provided on the SiteTrack website.

The information we collect depends on how you use SiteTrack and the features available to your account.

3.1 Account Information

When you create or use a SiteTrack account, we may collect your name, email address, telephone or mobile number, account identifier, user role, organisation or company information where provided, account permissions, and authentication information required to securely access your account.

We use this information to create and maintain your account, authenticate users, manage permissions, and provide access to SiteTrack.

3.2 Project Information

SiteTrack processes information entered by authorised users in connection with construction and other projects. This may include project names and references, project descriptions, project locations entered into project records, project dates, activities, tasks, activity status, progress information, milestones, site observations, site reports, project notes, issues, actions, assigned personnel, project teams, comments, and other project information entered by authorised users.

This information is used to provide project monitoring, reporting, coordination, and management functionality.

3.3 Photographs and Documents

Where SiteTrack provides functionality for uploading or attaching files, authorised users may submit site photographs, project documents, reports, supporting records, and other files associated with a project, activity, or site report.

Users should only upload information that they are authorised to provide. If an uploaded photograph, document, or report contains personal information about another individual, the person uploading that material is responsible for ensuring that the upload is appropriate and authorised.

3.4 Information We Do Not Intentionally Collect

SiteTrack does not intentionally collect precise device location information, device identifiers, or similar device-tracking information as part of its normal operation.

SiteTrack also does not intentionally collect information from your device for advertising or behavioural tracking purposes.

We use information processed through SiteTrack to create and manage user accounts, authenticate users, provide access to authorised projects, manage user roles and permissions, monitor construction projects and activities, record project progress, create and manage site reports, manage project tasks and milestones, facilitate coordination between authorised project participants, and store and retrieve project documents and photographs.

We may also use information to maintain the security of SiteTrack, prevent unauthorised access or misuse, provide technical and customer support, maintain and improve the functionality and reliability of SiteTrack, comply with applicable legal, regulatory, contractual, and professional obligations, and protect the rights, property, security, and legitimate interests of EPE, our users, and project participants.

SiteTrack is designed around controlled access to project information. Depending on a user's role and permissions, an authorised user may be able to view, create, edit, submit, or otherwise interact with project information.

Project participants may be given access to information relevant to their responsibilities. Users must not attempt to access projects, documents, reports, or other information for which they have not been authorised.

We do not sell personal information.

6.1 Project Participants

Project information may be accessible to authorised users participating in the relevant project. The information available to a user depends on the user's role and permissions.

6.2 Service Providers

We use selected third-party service providers to operate and support SiteTrack. These providers may provide cloud database infrastructure, authentication, cloud storage, hosting, application infrastructure, website infrastructure, security, and technical services.

These providers process information as necessary to provide their services to EPE and SiteTrack.

6.3 Legal Requirements

We may disclose information where reasonably necessary to comply with applicable law, respond to a lawful request from a public authority, comply with a court order or legal process, investigate suspected fraud, abuse, or unlawful activity, or protect the rights, safety, property, or security of EPE, SiteTrack users, project participants, or other persons.

SiteTrack uses third-party technology providers to support certain application functions. For example, SiteTrack may use Supabase for services including authentication, database infrastructure, and storage.

Third-party providers may process information according to their own privacy policies, contractual obligations, and applicable law.

SiteTrack is also distributed through Google Play. Google may process information associated with the distribution, installation, updating, and security of Android applications. Google's processing is governed by Google's own privacy policies and terms.

Information associated with SiteTrack may be stored using cloud-based infrastructure. We take reasonable technical and organisational measures designed to protect information against unauthorised access, unauthorised disclosure, unauthorised alteration, loss, misuse, and destruction.

However, no Internet transmission or electronic storage system can be guaranteed to be completely secure. Users are also responsible for taking reasonable steps to protect their accounts and devices.

We retain information for as long as reasonably necessary to provide SiteTrack, maintain project records, fulfil contractual obligations, comply with legal requirements, resolve disputes, and protect our legitimate interests.

The retention period may vary depending on the type of information, the purpose for which it was collected, the nature of the project, contractual requirements, legal or regulatory requirements, and other legitimate business requirements.

You may request deletion of your SiteTrack account or personal information, subject to applicable law and legitimate retention requirements.

Some information may need to be retained even after an account is deleted. For example, project records may need to be retained for contractual purposes, professional records, legal compliance, auditing, accounting, dispute resolution, or protection of legal rights.

To request account or personal-data deletion, contact EPE through the contact details provided on the SiteTrack website. We may request information necessary to verify your identity before processing a deletion request.

Depending on your location and applicable law, you may have the right to request access to personal information we hold about you, request correction of inaccurate information, request deletion of personal information where legally permitted, request restriction of certain processing, object to certain processing, withdraw consent where processing is based on consent, and lodge a complaint with an appropriate data-protection authority.

These rights may be subject to applicable legal, contractual, and other limitations.

Where applicable, EPE processes personal information in accordance with the data-protection requirements applicable to its operations in Uganda, including the Data Protection and Privacy Act, 2019, and applicable regulations and guidance.

Where applicable law provides additional rights or protections, those rights continue to apply.

SiteTrack is intended for professional and project-related use and is not directed specifically at children.

We do not knowingly collect personal information from children where doing so would be prohibited by applicable law.

Users are responsible for maintaining the security of their SiteTrack accounts and authentication credentials.

Users should keep authentication credentials confidential, avoid sharing accounts, log out when using a shared device, keep their device and software reasonably up to date, report suspected unauthorised access, and only access information they are authorised to access.

EPE may suspend or restrict access where reasonably necessary to protect SiteTrack, users, projects, or information.

SiteTrack may contain confidential commercial, contractual, technical, construction, financial, or project information.

Users must only access, use, download, share, or disclose project information in accordance with their role, applicable agreements, professional responsibilities, and applicable law.

Depending on the third-party infrastructure used to operate SiteTrack, information may be stored or processed outside Uganda.

Where applicable, we take reasonable steps to ensure that international processing is subject to appropriate safeguards and applicable data-protection requirements.

The SiteTrack mobile application does not use browser cookies in the same manner as a conventional website.

The SiteTrack website or associated web services may use cookies, local storage, or similar technologies where necessary for functionality, security, authentication, or preferences.

We may update this Privacy Policy from time to time to reflect changes to SiteTrack, changes to our data practices, changes to third-party services, changes in applicable law, or changes to security and operational requirements.

Where appropriate, we may notify users of material changes through the App, the SiteTrack website, or another appropriate communication channel.

The Last Updated date at the beginning of this Privacy Policy indicates when the policy was most recently revised.

If you have questions about this Privacy Policy, your personal information, your privacy rights, or the handling of information through SiteTrack, please contact Ernst Planning Engineers (EPE), Uganda.

You can visit the SiteTrack website at sitetrack.ernstplanning.com for available contact information.