Privacy Policy

Harco Consults Ltd is a health, safety, environment, and engineering consulting firm based in Kampala, Uganda. We provide HSE training, oil and gas consultancy, general construction oversight, and civil engineering services across East Africa.

Our registered address is Plot 3363, Tausi House, Namugongo Road, opposite Dowson Petro Station, Kampala, Uganda. You can reach us at info@harcoconsults.com or +256 784 169 730.

We only collect information that you choose to give us. This happens in a few ways:

• Contact form. When you fill in our enquiry form, we collect your name, email address, phone number, and the message you send us. We use this solely to respond to your enquiry.
• Account registration. If you create an account on our website, we collect your name, email address, and a password (stored securely as a hash, never in plain text).
• Reviews. If you submit a client review, we collect your name, email address, job title, company name, and the review text. We also record your IP address to help prevent abuse.
• Document access. When you access a document via a QR code link, we log standard web server data such as your IP address and browser type. We do not use this to identify you personally.

We do not purchase data from third parties, run advertising trackers, or collect information about you from any source other than your direct interaction with our website.

We use the information we collect for the following purposes:

• To respond to your enquiries and provide the services you have requested.
• To manage your account and allow you to access protected content.
• To display approved client reviews on our website, with your consent.
• To send you password reset emails when you request them.
• To keep our website secure and functioning correctly.

We will never sell your personal information to anyone. We will never send you unsolicited marketing emails. If we want to contact you for any reason beyond responding to your request, we will ask your permission first.

Our website uses a small number of strictly necessary cookies to function properly. These include a session cookie that keeps you logged in while you browse, and a CSRF cookie that protects form submissions from cross-site attacks. Neither of these contains personal information and neither is used for tracking or advertising.

We do not use Google Analytics, Facebook Pixel, or any other third-party tracking or advertising cookies. Your browsing behaviour on our site stays on our site.

We use a small number of trusted third-party services to run our website. Each service only receives the data it needs to do its job.

• Cloudinary stores the media files (images and documents) we host. Files are served over HTTPS. Cloudinary's privacy policy is available on their website.
• Google Fonts is used to load the Poppins typeface. This means a request is made to Google's servers when you visit the site. Google may log this request. You can learn more in Google's privacy policy.
• Our email provider receives a copy of messages you send through our contact form so we can reply to you. Messages are not shared further.

We do not share your personal information with any other third parties.

We keep your data for as long as it is needed to provide the service you requested and no longer.

• Contact form submissions are kept for up to two years so we have context if you contact us again, then deleted.
• Account information is retained for as long as your account is active. If you close your account, we will delete your personal data within 30 days.
• Reviews that have been published remain on the site until you ask us to remove them. Unpublished or rejected reviews are deleted within 90 days.

You have the right to know what personal information we hold about you and to ask us to correct or delete it. You can exercise any of the following at any time by emailing us at info@harcoconsults.com:

• Access. Ask us to send you a copy of the data we hold about you.
• Correction. Ask us to fix inaccurate or incomplete information.
• Deletion. Ask us to delete your personal data from our records.
• Withdrawal of consent. If you submitted a review and would like it taken down, simply send us an email and we will remove it promptly.

We aim to respond to all requests within 14 days. We will never make this process difficult or charge you a fee.

We take reasonable technical measures to protect your data. Our website is served over HTTPS, passwords are stored using strong one-way hashing, and access to our systems is restricted to authorised staff only.

No system connected to the internet can be guaranteed 100% secure. If you ever suspect your account has been compromised, please change your password immediately and contact us so we can investigate.

Our services are intended for working professionals and businesses. We do not knowingly collect personal information from anyone under the age of 18. If you believe a minor has submitted information through our website, please contact us and we will delete it right away.

We may update this policy from time to time as our services evolve or regulations change. When we do, we will update the "Last updated" date at the top of this page. We encourage you to check back occasionally if this is a concern.

Significant changes that affect how we use your data will be communicated more prominently, either via a notice on the site or by email if you have an account.