Statutory & Regulatory Governance

GRICOSIG Legal Center

Official statutory disclosures, data protection frameworks, intellectual property declarations, and enterprise contracting terms for GRICOSIG SMC LTD.

REG: 80034289893873 | TIN: 1047641375 | INCORPORATED IN UGANDA

Privacy Policy & Data Protection Charter

Effective: 1 January 2026 • Rev. 2026.2

GRICOSIG SMC LTD ("GRICOSIG", "we", "our", or "the Company") is registered in the Republic of Uganda under Registration No. 80034289893873 and Tax Identification Number 1047641375. We operate with strict adherence to the Data Protection and Privacy Act, 2019 of Uganda and international data stewardship standards.

Institutional Commitment: We never sell, monetize, or broker corporate, engineering, or client operational telemetry data. All processing is conducted solely to execute engineering, statutory governance, or enterprise SaaS commitments.

1. Information We Collect

We collect information necessary to fulfill commercial engagements, provide client support, maintain facility telemetry, and comply with Ugandan laws:

Institutional & Identity Data: Client corporate name, registered office, tax identification number, authorized signatory names, professional titles, and contact information.
Project & Technical Telemetry: Engineering drawings, CAD/BIM models, asset schedules, sensor telemetry (via MaintGRI), and maintenance records uploaded to our platforms.
Recruitment Data: Curriculum vitae, engineering council registration (ERB/UIPE), and qualifications submitted via the Careers portal.
Confidential Whistleblower Data: Reports filed through the Confidential Ethics Hotline are processed strictly on a need-to-know basis, with full anonymity protection options.

2. Lawful Basis for Processing

Under Section 7 of the Data Protection and Privacy Act, 2019, GRICOSIG processes data based on: (a) Performance of a contract to which the data subject or corporate partner is party; (b) Compliance with statutory legal obligations (URSB, URA); and (c) Legitimate operational interests in safeguarding physical assets and infrastructure security.

3. Data Security & Storage

All client and platform data is protected using AES-256 encryption at rest and TLS 1.3 in transit. Access to sensitive engineering dossiers and corporate records is restricted using strict role-based access controls (RBAC) managed through our ISO-aligned infrastructure protocols.

4. Data Subject Rights & Officer Contact

You have the right to request access, rectification, erasure, or restriction of your personal data held by GRICOSIG. Direct all privacy inquiries or data requests to:

Data Protection Officer
GRICOSIG SMC LTD
Banda B9A, Central Road, Wakalimira Lane, Nakawa Division, Kampala, Uganda
Email: privacy@gricosig.com

Terms of Use for Digital Platforms & Portals

Effective: 1 January 2026 • Rev. 2026.2

These Terms of Use govern access to and use of GRICOSIG’s public websites, client portals, and proprietary digital software platforms, including MaintGRI, PollectGRI, TraceGRI, CrediGRI, and ProcureGRI.

1. Acceptance of Terms

By accessing or interacting with our websites or SaaS portals, you agree to be bound by these Terms of Use and all statutory laws governing electronic transactions in Uganda (Electronic Transactions Act, 2011).

2. Intellectual Property Rights

All intellectual property, proprietary software code, UI designs, engineering workflows, trade dress, and brand assets (including the GRICOSIG wordmark and heraldic emblem) are the exclusive property of GRICOSIG SMC LTD. Unauthorized reproduction, reverse engineering, or data scraping is strictly prohibited.

3. Permissible & Authorized Use

You agree to use our digital portals only for legitimate business purposes. You must not:

Introduce malware, exploit vulnerabilities, or execute automated bots or scraping tools without written consent.
Submit falsified credentials, fraudulent tenders, or unauthorized corporate claims.
Interfere with real-time IoT facility telemetry streams or database synchronization mechanisms.

4. Limitation of Liability

While GRICOSIG strives for 99.9% portal uptime and telemetry accuracy, our websites and informational publications are provided on an "as is" and "as available" basis. Contractual liabilities for turnkey engineering and SLA retainers are governed exclusively by executed commercial contracts.

Cookie & Client Telemetry Policy

Effective: 1 January 2026 • Rev. 2026.2

This Cookie Policy explains how GRICOSIG uses cookies and similar telemetry storage technologies to ensure seamless platform operations, user authentication, and secure session management.

1. What Are Cookies?

Cookies are small text files stored on your browser or device by web servers. They allow platforms to remember your authentication session, cart items, language preferences, and security state across navigation steps.

2. Categories of Cookies We Use

Essential Operational Cookies: Required for fundamental security, CSRF protection, session integrity, and authentication state (e.g., Frappe session tokens, user ID, system session expiry). These cannot be disabled.
Functional Cookies: Remember your interface preferences, such as selected category filters on the Projects or Solutions showcases.
System Telemetry & Performance: Anonymous server performance metrics to monitor latency, page render performance, and API endpoint uptime. We do not use intrusive third-party cross-site advertising trackers.

3. Managing Your Preferences

You can manage or clear cookies through your browser settings at any time. Please note that disabling essential cookies will prevent authenticated access to client portals, LMS academies, and support ticket submission.

Commercial Terms & Conditions of Engagement

Effective: 1 January 2026 • Rev. 2026.2

These General Commercial Conditions apply to all turnkey engineering, EPC works, facility management retainers, technical procurement, and corporate advisory mandates undertaken by GRICOSIG SMC LTD, unless superseded by an executed formal commercial engineering contract.

Professional Engineering Standards: Unless specifically agreed in writing, engineering works and construction assignments are executed in compliance with recognized engineering codes of practice and national statutory standards.

1. Scope of Works & Quotations

All engineering and procurement quotations are valid for thirty (30) calendar days from issuance unless otherwise specified. Works commence upon formal contract execution or receipt of an authorized Purchase Order (PO) and initial mobilization payment.

2. Statutory Assurance & Compliance

GRICOSIG maintains full statutory compliance with URSB, Uganda Revenue Authority (URA), National Social Security Fund (NSSF), and the Engineers Registration Board (ERB). All technical filings and structural certifications are endorsed by licensed registered engineers.

3. Payment Milestones & Retention

Commercial payments are structured around verified engineering milestones, bills of quantities (BoQ) valuations, or monthly retainer certificates. Defects Liability Periods (DLP) and retention sums adhere strictly to contract terms.

4. Governing Law & Dispute Resolution

These terms and all commercial agreements entered into by GRICOSIG SMC LTD are governed by the substantive laws of the Republic of Uganda. Any dispute arising out of or in connection with engagements that cannot be settled amicably shall be referred to arbitration in Kampala, Uganda under the Arbitration and Conciliation Act, Cap. 4.