Privacy Policy

Fabrication Media Uganda Limited operates the Fabrication Media Project Tracker mobile application and web platform, referred to in this Privacy Policy as the “App,” “Platform,” “we,” “us,” or “our.”

This Privacy Policy explains how information is collected, used, stored, shared, and protected when authorised users access the App.

1. About the App

The App is a project and production tracking platform used by Fabrication Media Uganda Limited and its authorised personnel to manage:

The App is intended primarily for authorised employees, project managers, administrators, reviewers, and other approved users.

• Clients and projects
• Project items
• Project stages and workflow assignments
• Production and delivery quantities
• Measurements and specifications
• Stage notes and comments
• Project files and photographs
• Approvals and status updates
• Project notifications

2. Information We Collect

Depending on the features used, we may collect the following information.

Account information

Passwords are stored using secure hashing and are not stored as readable plain text.

• Name
• Email address
• User role
• Department
• Account login information
• Internal user identification number
• Account status and permissions

Project and work information

• Client information
• Project titles and descriptions
• Project locations entered by users
• Project stages
• Stage assignments
• Due dates
• Notes and comments
• Approval decisions
• Work status updates
• Production quantities
• Delivery quantities
• Product or project item information
• Measurements and specifications
• Activity and audit records

Files, photographs, and documents

Where authorised, users may upload project photographs, measurement photographs, delivery evidence, design files, reports, quotations, supporting documents, and other project-related attachments.

The App accesses photographs or files only when a user chooses to upload or attach them.

Device and technical information

We may automatically receive limited technical information, including device type, operating system, app version, IP address, error and diagnostic information, login and session information, and notification subscription identifiers.

This information is used to operate, secure, troubleshoot, and improve the App.

Push notification information

The App may use OneSignal to send push notifications relating to project assignments, review and approval requests, stage status changes, due-date updates, overdue tasks, production updates, and delivery updates.

OneSignal may process device identifiers, push subscription information, and limited technical information needed to deliver notifications. Users can disable push notifications through their device settings.

3. How We Use Information

We do not use project information for unrelated advertising.

• Authenticate users
• Manage user roles and permissions
• Assign projects and stages
• Track project progress
• Track production and delivery quantities
• Capture measurements and specifications
• Review and approve project items
• Store project files and photographs
• Send operational notifications
• Maintain audit and activity history
• Protect the Platform against unauthorised access
• Diagnose technical problems
• Maintain, support, and improve the App
• Meet contractual, legal, accounting, or operational obligations

4. Legal and Operational Basis

Information is processed where necessary to provide and operate the App, manage the company’s projects and employees, fulfil contractual and operational responsibilities, protect the security and integrity of the Platform, comply with applicable laws, and support legitimate business operations.

5. How Information May Be Shared

Information may be shared only where reasonably necessary with authorised employees and administrators, project managers, assigned staff, reviewers and approvers, service providers supporting hosting, notifications, email, storage, security, or maintenance, and government or regulatory authorities where required by law.

Access is controlled according to user roles, stage assignments, and permissions. We do not sell users’ personal information.

6. Third-Party Service Providers

OneSignal

OneSignal is used to deliver push notifications. OneSignal may process push subscription identifiers and technical device information necessary to provide notification services.

Hosting providers

The Platform and its database may be hosted through third-party web-hosting infrastructure. Hosting providers may process or store information solely to provide hosting, security, backup, and technical services.

Google Play services

Android users may interact with Google Play services for app distribution, updates, security, and notification-related functionality.

7. Data Storage and Security

We use reasonable administrative, organisational, and technical safeguards designed to protect information, including authenticated access, role-based permissions, encrypted HTTPS connections, password hashing, session controls, restricted administrative access, activity and audit logging, database access controls, backup and recovery procedures, and server and application security measures.

No electronic system can be guaranteed to be completely secure. Users should keep their login credentials confidential and immediately report suspected unauthorised access.

8. Data Retention

We retain information for as long as reasonably necessary to maintain active user accounts, manage ongoing and completed projects, maintain production, delivery, approval, and audit history, meet legal and operational obligations, resolve disputes, and protect the company’s rights and systems.

Project and audit records may be retained after an individual user account has been deactivated where they form part of the company’s legitimate business records.

9. User Choices and Rights

Subject to applicable law and company policy, users may request access to personal information held about them, correction of inaccurate information, deactivation of their account, deletion of eligible personal information, information about how their data is used, and withdrawal from optional push notifications.

Some project, transaction, security, and audit records may need to be retained even after an account is disabled or a deletion request is received.

10. Account Deactivation and Deletion

Accounts are normally created and managed by authorised company administrators. A user who wants their account deactivated or personal information reviewed or deleted should contact the company using the details below.

Where deletion is permitted, we will delete or anonymise eligible account information. We may retain records required for legal, security, audit, contractual, or legitimate business purposes.

11. Children’s Privacy

The App is intended for authorised business users and is not directed to children. We do not knowingly collect personal information from children through the App.

12. International Processing

Some service providers may process or store information outside Uganda. Where this occurs, reasonable measures will be used to protect the information in accordance with applicable obligations.

13. Changes to This Privacy Policy

We may update this Privacy Policy when the App, our data practices, or applicable requirements change. The revised policy will be published on this page with an updated effective date.

14. Contact Us

Fabrication Media Uganda Limited