1. Introduction

Welcome to ndozereho flavoured water ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website ndozerehoflavouredwater.com or make a purchase from us.

This policy complies with the Data Protection and Privacy Act, 2019 of Uganda and other applicable data protection laws. By using our website, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

2.1 Personal Information

When you interact with our website, we may collect the following personal information:

• Identity Data: Your full name
• Contact Data: Email address, phone number, delivery address
• Transaction Data: Details about purchases, payment methods, order history
• Technical Data: IP address, browser type, operating system, device information
• Usage Data: How you use our website, pages visited, time spent
• Marketing Data: Your preferences in receiving marketing communications

2.2 How We Collect Information

• Direct interactions: When you place an order, submit a review, or contact us
• Automated technologies: Cookies and similar tracking technologies
• Third parties: Analytics providers, payment processors, social media platforms

3. Legal Basis for Processing (Uganda DPPA Compliance)

Under the Data Protection and Privacy Act, 2019 of Uganda, we process your personal data based on the following lawful grounds:

• Consent: You have given clear consent for us to process your personal data
• Contract: Processing is necessary for the performance of a contract with you
• Legal obligation: Processing is necessary for compliance with a legal obligation
• Legitimate interests: Processing is necessary for our legitimate business interests

4. How We Use Your Information

We use the information we collect for the following purposes:

• To process and fulfill your orders
• To communicate with you about your orders, inquiries, and requests
• To provide customer support and respond to your feedback
• To send you marketing communications (with your consent)
• To improve our website, products, and services
• To comply with legal obligations under Ugandan law
• To prevent fraud and ensure website security

5. Data Sharing and Disclosure

We may share your information with:

• Service Providers: Payment processors, delivery services, IT service providers
• Legal Authorities: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not sell your personal data to third parties.

6. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data
• Regular security assessments
• Access controls and authentication
• Secure server infrastructure

7. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements in Uganda.

Typical retention periods:

• Order information: 7 years (for tax compliance)
• Customer contact information: Until you request deletion
• Marketing data: Until you withdraw consent

8. Your Rights Under Ugandan Law

Under the Data Protection and Privacy Act, 2019, you have the following rights:

• Right to Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request restriction of processing
• Right to Data Portability: Request transfer of your data
• Right to Object: Object to processing of your data
• Right to Withdraw Consent: Withdraw consent at any time

To exercise these rights, please contact us using the details below.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our website and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

Types of cookies we use:

• Essential Cookies: Necessary for website functionality
• Analytics Cookies: Help us understand how visitors use our site
• Marketing Cookies: Used to track visitors across websites

10. International Data Transfers

Your information may be transferred to and maintained on computers located outside of Uganda. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy.

11. Children's Privacy

Our website is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.