Privacy Policy

Last updated: 1 November 2026.

This policy explains how Sankofa Consulting Engineers Limited ("Sankofa", "we", "us") handles personal information when you use sankofaconsultingengineers.com, ask us for a quotation, apply for a job, use the client portal, receive our newsletter or otherwise deal with us. It also explains your rights and how to use them.

We process personal data in line with the Data Protection and Privacy Act, 2019 of Uganda and, where it applies to you, the EU General Data Protection Regulation (GDPR). We are the data controller of the information described here.

Information you give us

Enquiries and quotation requests: your name, organisation, email, phone number, project location and description, any files you attach, and your consent.
Clients and projects: contact details of the people we deal with at client organisations, and the quotations, project records, documents, invoices and payments connected with our work.
Client portal accounts: your name, email, position, password and the company and projects you have access to.
Job applications: the details and answers you give on our application form, and any CV we later ask for. See "Recruitment" below.
Talent network: your name, email, discipline and any CV you choose to send.
Newsletter: your email address, your name if you give it, and the topics you choose.

Information collected automatically

Our servers record technical information needed to run and protect the website, such as your IP address, your browser type and the pages requested. With the forms you send us we keep your IP address only in scrambled form. We note the page and any campaign tag you arrived with, so that we can tell which of our outreach brings enquiries. If you arrive from one of our Google adverts, we note only that, not the advert's own identifier.

Counting visits. The website counts its own page views: the day, the page, the site or campaign you came from and whether you use a phone or a computer. It sets no cookie for this and keeps neither your IP address nor your browser details; a code that changes every day, and cannot be traced back to you, lets it count you once a day.

Cookies and Google Analytics. Essential cookies keep you signed in, protect forms and remember your analytics choice. We use Google Analytics, which sets its own cookies, to see how the website is used; its advertising features are switched off. You can switch analytics off at any time from "Cookie preferences" in the footer, and it stays off if your browser sends a Global Privacy Control signal. We keep a record of your choice, without your name.

The chat. The chat on our pages answers automatically, on this website's own server, from what the website publishes; no outside service reads your questions. We keep each question, with email addresses and long numbers removed, the page you asked it on and the answer given, for 12 months, so that we can improve our answers. We do not keep your IP address with it or link your questions together. The conversation itself stays in your browser tab and is gone when you close it. Please do not type personal or confidential details into the chat; use the contact form instead.

Maps. Project maps load from OpenStreetMap only when you press "Show map", which then receives your IP address as any website you visit does. The places shown are deliberately approximate.

How we use your information

To answer your enquiry, prepare quotations and carry out our contracts with you or your organisation.
To run the client portal and keep you informed about your projects.
To issue invoices and receipts, record payments and meet our accounting and tax obligations.
To consider job applications and contact applicants.
To send the newsletter to those who asked for it.
To understand how the website is used and improve it, and to keep our systems secure.
To comply with the law and to establish or defend legal claims.

Our legal bases are your consent, the performance of a contract or steps before one, our legal obligations, and our legitimate interests in running and protecting our business. We rely on consent for the newsletter, and you can withdraw it at any time. We measure how the website is used on the basis of our legitimate interest in running and improving it, and you can switch Google Analytics off at any time.

Client portal

The portal is optional and by invitation only: you can receive quotations, invoices and receipts from us without it. Each account sees only its own company's records, and only those its role allows. To keep a reliable record, we log what you do there that has business effect: your acceptance of a quotation or change order, approvals, document sign-offs and acknowledgements, and document downloads, with your name and the time. Downloaded documents may carry a watermark showing who they were issued to. Messages you send us in the portal are kept with the project or client record.

Each person chooses which portal emails they receive, under "Email preferences". Messages about your account and its security are always sent.

Recruitment

We recruit in-house. We do not use recruitment agencies and never charge a fee. We contact applicants only from info@sankofaconsultingengineers.com and +256 766 055 271.

You apply on our standard form. We do not normally ask for a CV, testimonials or certificates at this stage.
Reviewers score applications without your name or contact details, using a code in their place, so please do not identify yourself in your answers. Your name is shared with the panel if you are shortlisted.
We record the scores, interview notes, any declared conflict of interest, and what we told you, including the reason if you were unsuccessful.
Before hiring a successful candidate we carry out reference and anti-terrorism checks.
Access to who applied is limited to the staff handling recruitment.

The same applies to team biographies: we publish a member of staff's profile and portrait only with their consent.

Asking us for a quotation or using the portal does not put you on our mailing list. You join only by asking on the newsletter page and confirming from a link in an email. Every newsletter has a link to change your choices or unsubscribe. After you unsubscribe we keep your email address, without your name, solely so that we do not write to you again.

Who we share information with

We do not sell personal information. We share it only as needed with:

Service providers who work for us under confidentiality, such as our website hosting and email delivery providers.
Cloudflare Turnstile, which checks that forms are sent by people, and receives technical information from your device for that purpose.
Google Analytics, unless you switch analytics off. Figures shown to our staff from Google Analytics and Search Console are totals and do not identify visitors.
Google (YouTube and Maps), only when you choose to play a video or open a map on our site, which then loads from Google.
WhatsApp, only if you choose to contact us that way.
Professional advisers, partners and authorities where a project, the law or the protection of our rights requires it, including in connection with a merger or sale of our business, when we would tell you first.

We do not currently use advertising or remarketing cookies on this website. If that changes, we will update this policy and ask for your consent first.

Some providers process data outside Uganda. Where they do, we take reasonable steps to see that your information is protected to the standard this policy describes.

Payments

This website does not take card payments or store card details. We record the payments you make by bank transfer or mobile money, with their references, to issue receipts.

How long we keep information

Job applications: 12 months after the closing date, then deleted. A successful applicant's details pass to their employment record.
Talent network details and CVs: 12 months, then deleted.
Newsletter requests never confirmed: about 14 days, then deleted.
Spam and security logs: sign-in records for about 6 months and blocked form attempts for about 3 months.
Cookie consent records: 24 months.
Client, project, contract and financial records: for as long as our contracts, accounting and tax law, and the limitation of legal claims require.

Backups may hold information for a short further period until they are overwritten. We also keep a record of important actions in our systems, for security and accountability; it does not contain the content of applications or messages.

Security

Staff accounts use two-factor authentication and see only what their role needs. Documents and CVs are held in private storage, not on public addresses. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work to protect your information and to respond promptly if something goes wrong.

Your rights

Subject to the law, you may ask to see the personal information we hold about you, correct it, delete it, object to or restrict how we use it, receive a copy of it, and withdraw consent you have given. Withdrawing consent does not affect what we did before. Some records, such as financial records, we must keep even if you ask us to delete them, and we will tell you if so.

To use these rights, contact us at the address below. If you are not satisfied, you may complain to the Personal Data Protection Office in Uganda or, in the EU, to your local data protection authority.

Children

Our services are not directed at anyone under 18, and we do not knowingly collect their information. If you believe a child has given us information, please contact us and we will delete it.

Links to other websites

Our site links to other websites whose privacy practices we do not control. Please read their policies.

Changes to this policy

We may update this policy and will change the date at the top when we do. Where a change is significant, we will say so on this website or by email.

Contact us

Sankofa Consulting Engineers Limited
Kireka Business Centre, 2nd Floor, Suite 205, Kampala, Uganda
Email: info@sankofaconsultingengineers.com
Phone: +256 766 055 271

Privacy policy