Privacy Policy
At Ugandan Crafts, we are committed to protecting your privacy and ensuring the security of your personal information. This policy outlines how we collect, use, and safeguard your data in compliance with international data protection regulations.
Last Updated: December 29, 2025
Introduction
Welcome to Ugandan Crafts ("we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website, use our services, or make purchases from our marketplace.
By accessing or using our services, you agree to the collection and use of information in accordance with this policy. We are committed to maintaining the trust and confidence of all visitors to our website and customers who purchase our authentic Ugandan handcrafted products.
Our Commitment: We respect your privacy and are dedicated to protecting your personal data. We will be transparent about what information we collect and why we collect it, and we will never sell your personal information to third parties.
Information We Collect
Personal Information You Provide
When you interact with our marketplace, we collect information you voluntarily provide to us:
- Account Information: Name, email address, phone number, shipping and billing addresses
- Payment Information: Credit card details, mobile money account information (processed securely through payment processors)
- Order History: Details of products purchased, order dates, delivery information
- Communication Data: Messages sent through contact forms, customer service inquiries, reviews and feedback
- Marketing Preferences: Newsletter subscriptions, communication preferences, promotional interests
Information Collected Automatically
When you visit our website, we automatically collect certain information about your device and browsing behavior:
- Device Information: IP address, browser type and version, operating system, device identifiers
- Usage Data: Pages visited, time spent on pages, click patterns, referral sources
- Location Data: General location based on IP address (country, city level)
- Cookies & Tracking Technologies: Session cookies, persistent cookies, web beacons, analytics tools
| Data Category | Purpose | Legal Basis |
|---|---|---|
| Contact Information | Order fulfillment, customer support | Contractual necessity |
| Payment Data | Processing transactions | Contractual necessity |
| Browsing Behavior | Website optimization, analytics | Legitimate interest |
| Marketing Preferences | Promotional communications | Consent |
How We Use Your Information
We use the information we collect for various purposes to provide, maintain, and improve our services:
Order Processing & Fulfillment
- Process and fulfill your orders, including payment processing and delivery
- Send order confirmations, shipping notifications, and delivery updates
- Handle returns, exchanges, and refunds
- Provide customer support and respond to inquiries
Account Management
- Create and manage your customer account
- Store your order history and preferences
- Enable wishlist and saved items functionality
- Authenticate your identity and prevent unauthorized access
Communication & Marketing
- Send newsletters, promotional offers, and updates about new products (with your consent)
- Notify you about special events, sales, and artisan stories
- Request feedback, reviews, and ratings on purchased products
- Provide personalized product recommendations
Website Improvement & Analytics
- Analyze website usage patterns to improve user experience
- Conduct research and development for new features
- Monitor and prevent fraudulent activities
- Ensure website security and troubleshoot technical issues
Information Sharing & Disclosure
We do not sell your personal information. However, we may share your information with third parties in the following circumstances:
Service Providers
We share information with trusted third-party service providers who assist us in operating our business:
- Payment Processors: To process credit card and mobile money transactions securely
- Shipping Partners: To fulfill and deliver your orders
- Email Service Providers: To send transactional and marketing communications
- Analytics Providers: To analyze website traffic and user behavior
- Cloud Storage Providers: To securely store data and backups
Legal Requirements
We may disclose your information when required by law or to:
- Comply with legal obligations, court orders, or government requests
- Enforce our Terms of Service and other agreements
- Protect the rights, property, or safety of Ugandan Crafts, our users, or others
- Detect, prevent, or address fraud, security, or technical issues
Business Transfers
In the event of a merger, acquisition, or sale of assets, your personal information may be transferred to the acquiring entity. We will notify you of any such change and how it affects your data.
Our Promise: We require all third-party service providers to respect the security of your personal data and treat it in accordance with applicable data protection laws. They are only permitted to process your data for specified purposes and according to our instructions.
Data Security
We implement comprehensive security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction:
Technical Security Measures
- Encryption: All data transmission is encrypted using SSL/TLS protocols (256-bit encryption)
- Secure Servers: Data is stored on secure servers with restricted access and regular security audits
- Payment Security: We comply with PCI-DSS standards for payment card data handling
- Access Controls: Limited employee access to personal data based on job responsibilities
- Regular Monitoring: Continuous monitoring for security threats and vulnerabilities
Organizational Security Measures
- Employee training on data protection and privacy best practices
- Confidentiality agreements with all staff members
- Regular security assessments and penetration testing
- Incident response procedures for data breaches
- Regular backups and disaster recovery plans
Important Note: While we implement robust security measures, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but strive to use commercially acceptable means to protect your personal information.
Your Privacy Rights
Under data protection laws, you have several rights regarding your personal information:
Access & Information Rights
- Right to Access: Request a copy of the personal data we hold about you
- Right to Rectification: Request correction of inaccurate or incomplete data
- Right to Erasure: Request deletion of your personal data ("right to be forgotten")
- Right to Data Portability: Receive your data in a machine-readable format
Control & Restriction Rights
- Right to Restrict Processing: Limit how we use your personal data
- Right to Object: Object to processing based on legitimate interests or direct marketing
- Right to Withdraw Consent: Withdraw consent for data processing at any time
- Right to Lodge a Complaint: File a complaint with the relevant data protection authority
Exercising Your Rights
To exercise any of these rights, please contact us at privacy@ugandancrafts.com. We will respond to your request within 30 days. You may need to verify your identity before we can process your request.
Marketing Communications: You can opt-out of marketing emails at any time by clicking the "unsubscribe" link at the bottom of any promotional email or updating your preferences in your account settings.
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy:
- Account Data: Retained for the duration of your account plus 3 years after closure for legal compliance
- Order History: Retained for 7 years to comply with tax and accounting regulations
- Marketing Data: Retained until you withdraw consent or we determine it's no longer needed
- Website Analytics: Anonymized data retained for 26 months
- Customer Support Records: Retained for 3 years after resolution
After the retention period expires, we securely delete or anonymize your data. Some information may be retained in backup systems for a limited time before permanent deletion.
Children's Privacy
Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18.
If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately at privacy@ugandancrafts.com. We will take steps to delete such information from our systems.
Age Verification: By using our services, you confirm that you are at least 18 years old or have obtained parental/guardian consent to use our platform.
International Data Transfers
Ugandan Crafts is based in Uganda, and we serve customers worldwide. Your personal information may be transferred to and processed in countries outside of your residence.
Data Protection Standards
When transferring data internationally, we ensure adequate protection through:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- Data Processing Agreements with all international service providers
- Compliance with GDPR for EU customers and other applicable data protection laws
- Privacy Shield certification where applicable
Cross-Border E-Commerce
For international orders, we share necessary information with:
- International shipping carriers for customs clearance and delivery
- Payment processors operating in multiple jurisdictions
- Tax authorities for compliance with import/export regulations
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations.
When we make material changes, we will:
- Update the "Last Updated" date at the top of this policy
- Notify you via email if you have an account with us
- Display a prominent notice on our website
- Seek your consent if required by law for significant changes
We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information. Your continued use of our services after changes are posted constitutes acceptance of the updated policy.
Version History: Previous versions of this Privacy Policy are archived and available upon request at privacy@ugandancrafts.com.
Your Data, Your Control
Exercise your privacy rights with our easy-to-use data management tools. Request your data, update preferences, or delete your account.
Download Your Data
Request a complete copy of your personal data in a portable format.
Update Your Information
Review and update your personal information and account details.
Delete Your Account
Permanently delete your account and associated personal data.
Questions About Privacy?
Our Data Protection Team is here to help. Contact us with any questions or concerns about your privacy and data protection.
Kampala, Uganda
(as required by GDPR)