Privacy policy
This policy explains what personal information Duka Trading Limited (trading as Duka, "we") collects when you use our website, order from us or ask us to source an item, why we collect it, and the choices you have. We follow the Data Protection and Privacy Act, 2019 of Uganda and its Regulations, and we use the standards of the European General Data Protection Regulation (GDPR) as our guide to good practice.
Who we are
Duka Trading Limited
Plot 00, Example Road
Kampala, Uganda
Email: privacy@example.com
Phone: +256 700 000 000
For any question about your personal information, contact us at privacy@example.com.
What we collect
| Information | Why we need it | How long we keep it |
|---|---|---|
| Your name, phone number, WhatsApp number and email (if you give it) | To confirm your order or quote, contact you about delivery and send you updates you asked for | While you are a customer, and as long as we must keep your orders (below) |
| Delivery area and address notes | To deliver your order | As long as we keep the order |
| Items, links and photos you send for a quote | To find and price the items you asked for | Quotes that do not become orders: 12 months, then deleted |
| Order history (items, prices, payments) | To deliver, handle returns and keep the accounting and tax records the law requires | As long as tax law requires |
| Messages you send through the contact form | To answer you | 12 months |
| Your IP address and basic device details | To protect the website against spam, fraud and abuse | A short time in our security logs |
We do not ask for payment card details: you pay in cash on delivery. We do not create accounts for customers.
Our legal basis
- To carry out your order or quote request (a contract you ask us to enter into).
- To meet legal duties, such as keeping accounting and tax records.
- Our legitimate interests, such as preventing fraud and keeping the website secure.
- Your consent, where we ask for it. We do not send marketing messages unless you agree to receive them.
Who we share it with
We only share what is needed with:
- our delivery riders, who see your name, phone number and delivery details;
- suppliers we buy sourced items from, who see the item details but not your contact details unless delivery requires it;
- service providers that run our website and email (hosting, email delivery and Google reCAPTCHA, which checks that forms are filled in by people and not bots);
- authorities, when the law requires it.
We never sell your personal information.
Cookies
Our website only uses cookies that are needed for it to work: one that keeps your shopping cart, one that protects forms against misuse, and Google reCAPTCHA, which checks forms for automated abuse. We do not use advertising or tracking cookies. If this changes, we will ask for your consent first.
Your rights
You can ask us to:
- tell you what personal information we hold about you and give you a copy;
- correct information that is wrong;
- delete your information, unless we must keep it by law (for example order records needed for tax);
- stop using your information for a purpose you object to.
Send your request to privacy@example.com or WhatsApp +256 700 000 000. We may ask you to confirm it is you, for example by replying from the phone number you used. We answer within 30 days. If you are not happy with our answer, you can complain to the Personal Data Protection Office of Uganda.
How we protect it
Only staff who need your information can see it. Staff accounts use strong passwords and two-step sign in, and every access to the staff system is recorded. Our website uses an encrypted connection (https).
Changes to this policy
We will post any changes on this page and update the date below.
Last updated: 19 Oct 2026