UPass Store (U) – Privacy Notice & Data Protection Policy (Kampala, Uganda)

Last Updated: January 2026

1. Introduction and Purpose of This Privacy Notice

UPass Store (U) is recognized as Kampala’s number one online store and multi-vendor digital marketplace, designed to connect buyers, sellers, service providers, and delivery partners through one secure and intelligent platform. As a technology-driven eCommerce ecosystem operating in Uganda, UPass Store (U) places data privacy, transparency, and user trust at the core of its operations.

This Privacy Notice explains how we collect, use, store, share, protect, and retain personal data when you access or use our website, mobile applications, seller dashboards, delivery apps, payment services, and related digital tools. It also explains your rights as a data subject, the choices available to you, and how you can exercise those rights.

UPass Store (U) is committed to complying with:

1. The Uganda Data Protection and Privacy Act, 2019
2. Applicable regulations issued by the National Information Technology Authority – Uganda (NITA-U)
3. International best practices in data protection, security, and ethical data use

This Notice applies to customers, sellers, delivery partners, merchants, agents, employees, and visitors who interact with UPass Store (U) in Kampala and across Uganda.

2. Who We Are

UPass Store (U) is a Ugandan-owned digital commerce platform headquartered in Kampala, built to support the growth of online trade, digital payments, and logistics services across the country.

Our ecosystem consists of three tightly integrated components:

a) The UPass Marketplace

A centralized online marketplace that connects:

1. Individual sellers
2. Businesses and brands
3. Service providers
4. Consumers across Kampala and Uganda

The marketplace supports a wide range of categories including:

1. Digital products and services
2. Electronics and gadgets
3. Fashion and accessories
4. Sports equipment
5. Home & living products
6. Health & beauty
7. Groceries and essentials
8. Education and utility services

b) UPass Logistics & Delivery Network

A smart delivery system that coordinates order fulfillment using:

1. Registered delivery partners
2. Real-time tracking
3. Location-based dispatching
4. Proof-of-delivery tools

c) UPass Payments & Financial Services

A secure transaction layer that enables:

1. Mobile money payments (MTN MoMo, Airtel Money)
2. Local and regional bank transfers
3. Wallet-based transactions
4. Vendor settlements and withdrawals

UPass Store (U) operates through:

1. A Laravel-powered website and admin dashboard
2. Flutter-based mobile applications for Users, Sellers, and Delivery Partners
3. Available on Android and iOS

For data protection purposes, UPass Store (U) acts as the Data Controller for all personal data collected through its platforms, unless otherwise stated.

3. Scope of This Privacy Notice

This Privacy Notice applies to personal data collected when you:

1. Register an account on UPass Store (U)
2. Browse, search, or purchase products
3. Sell products or services as a vendor
4. Deliver orders as a delivery partner
5. Make or receive payments
6. Contact customer support
7. Participate in promotions, surveys, or campaigns
8. Use our mobile applications or website
9. Interact with UPass Store (U) on social media or partner platforms

4. What Personal Data Means

Personal data refers to any information that can identify you directly or indirectly. This includes obvious identifiers such as your name and phone number, as well as technical or behavioral data that can be linked to you.

UPass Store (U) only collects personal data that is necessary, relevant, and proportionate to delivering its services.

5. Categories of Personal Data We Collect

A. Information You Provide Directly

When you create an account, place an order, sell products, or communicate with us, you may provide:

i. Identity Information

1. Full name
2. Username
3. Profile photo (optional)
4. National ID or business registration details (for sellers, agents, or compliance purposes)

ii. Contact Information

1. Phone number(s)
2. Email address
3. Physical delivery address
4. City and location details within Kampala or Uganda

iii. Account & Authentication Data

1. Login credentials (encrypted)
2. Passwords (hashed and secured)
3. Security questions or verification codes

iv. Payment & Transaction Data

1. Mobile money numbers
2. Wallet balances
3. Payment confirmations
4. Billing details

UPass Store (U) does not store raw PINs or sensitive payment authorization data.

v. Seller & Merchant Information

1. Business name and category
2. Product listings
3. Pricing details
4. Tax or regulatory information (where applicable)

vi. Customer Communications

1. Messages sent to customer support
2. Reviews, ratings, and feedback
3. Dispute or complaint records

B. Information We Collect Automatically

When you use UPass Store (U), we automatically collect technical and usage data, including:

i. Device & Technical Data

1. Device type (phone, tablet, computer)
2. Operating system and version
3. Browser type
4. App version
5. IP address
6. Device identifiers

ii. Usage & Activity Data

1. Pages viewed
2. Products searched, viewed, or purchased
3. Time spent on the platform
4. Click patterns and interactions
5. Order history

iii. Location Data

1. Approximate geographic location (city or area)
2. Delivery coordinates (for order fulfillment)

C. Information from Third Parties

We may receive data from:

1. Payment service providers
2. Delivery partners
3. Marketing platforms
4. Identity verification services
5. Social media platforms (if you link accounts)

All third-party data is processed only for lawful and defined purposes.

6. Cookies and Similar Technologies

UPass Store (U) uses cookies, pixels, and similar technologies to:

1. Remember your preferences
2. Keep you logged in securely
3. Analyze platform performance
4. Improve speed and usability
5. Personalize content and offers

You can manage or disable cookies through your browser or device settings, though some features may not function properly if cookies are disabled.

7. How We Use Your Personal Data

UPass Store (U) uses personal data for the following purposes:

A. Platform Operations

1. Creating and managing user accounts
2. Processing orders and payments
3. Facilitating deliveries
4. Managing seller and delivery partner activities

B. Customer Experience Improvement

1. Personalizing product recommendations
2. Enhancing search and navigation
3. Improving app and website performance

C. Communication

1. Sending order updates and notifications
2. Responding to inquiries and complaints
3. Sending important service-related messages

D. Marketing and Promotions

1. Informing you about offers, discounts, and campaigns
2. Conducting surveys and market research
3. (You can opt out at any time.)

E. Security and Fraud Prevention

1. Detecting suspicious activity
2. Preventing unauthorized access
3. Protecting users, sellers, and the platform

F. Legal and Regulatory Compliance

1. Meeting obligations under Ugandan law
2. Responding to lawful requests from authorities
3. Maintaining audit and compliance records

8. Legal Basis for Processing Personal Data

We process personal data based on one or more of the following legal grounds:

1. Consent – where you have explicitly agreed
2. Contractual necessity – to deliver services you request
3. Legal obligation – to comply with laws and regulations
4. Legitimate interests – to operate, secure, and improve our platform without overriding your rights

9. How We Share Your Personal Data

UPass Store (U) may share your data with:

A. Sellers and Merchants

Only information necessary to fulfill your order.

B. Delivery Partners

Limited data such as name, phone number, and delivery address.

C. Payment Providers

To process and verify transactions securely.

D. Service Providers

Technology, analytics, hosting, and customer support partners.

E. Legal Authorities

When required by law or to protect rights and safety.

All third parties are contractually required to:

1. Use data only for specified purposes
2. Maintain confidentiality
3. Apply appropriate security measures

10. International Data Transfers

Where data is processed outside Uganda, UPass Store (U) ensures:

1. Adequate data protection safeguards
2. Compliance with applicable laws
3. Secure data transfer mechanisms

11. Data Retention

We retain personal data only for as long as necessary to:

1. Provide services
2. Meet legal obligations
3. Resolve disputes
4. Enforce agreements

When data is no longer needed, it is securely deleted or anonymized.

12. Data Security Measures

UPass Store (U) uses:

1. Encryption
2. Secure servers
3. Access control policies
4. Regular system audits
5. Employee confidentiality agreements

We continuously improve our security practices to protect against data breaches and unauthorized access.

13. Your Rights as a User

You have the right to:

1. Access your personal data
2. Correct inaccurate information
3. Request deletion of your data
4. Object to certain processing activities
5. Withdraw consent
6. Close your account permanently

Requests can be made through the app or by contacting us.

14. Account Closure and Data Deletion

When you close your account:

1. Access to services is terminated
2. Personal data is deleted or anonymized, subject to legal retention requirements

15. Contact Information

Data Protection Office – UPass Store (U)

📍 Kampala, Uganda

📧 privacy@upassstore.ug

📞 Customer Support via App or Website