Privacy Policy
Last updated: 09 November 2026
Who we are
eDuuka is operated by [PLACEHOLDER: Your registered company name], a company registered in Uganda under number [PLACEHOLDER: registration number], with offices at [PLACEHOLDER: physical address]. We run an online marketplace that lets Ugandan sellers create shops and accept orders via WhatsApp.
Questions? Email us at [PLACEHOLDER: privacy@yourdomain.com].
What data we collect and why
We collect only what we need to run the service.
- Account data (name, email, phone) — to create and manage your seller account.
- Shop data (shop name, description, location, photos, products) — to power your storefront.
- Order data (customer name, phone, delivery address, items ordered) — so sellers can fulfil orders.
- Payment references (MoMo or Airtel transaction IDs submitted by customers) — for sellers to verify payments. We never see or handle the actual money.
- Analytics events (page views, product views, cart actions) — to show sellers how their shop is performing. We do not sell this data and we respect the Do Not Track header.
- Device and usage data (IP address, browser type, pages visited) — stored in server logs for security and debugging, kept for 30 days.
Payments
eDuuka does not process payments. Customers pay directly to sellers using the seller's own MTN MoMoPay or Airtel Money merchant code. We never see card numbers, mobile money PINs, or bank details. A customer may upload a screenshot of a payment confirmation — that image is stored on our servers and shown only to the relevant seller.
How we use your data
- To run and improve the platform.
- To send you transactional emails (order alerts, password resets, billing receipts). We do not send marketing emails unless you opt in.
- To enforce our Terms of Service and keep the platform safe.
Who we share data with
We do not sell your data. We share it only with:
- Our hosting provider — servers are hosted on [PLACEHOLDER: hosting provider, e.g. DigitalOcean / Hetzner]. Data is stored in [PLACEHOLDER: server region, e.g. Frankfurt, Germany].
- Email delivery — transactional emails are sent via [PLACEHOLDER: e.g. Postmark / Mailgun].
- Error monitoring — we may use [PLACEHOLDER: e.g. Sentry] to log application errors. Error reports do not include passwords or payment details.
- WhatsApp — "Order on WhatsApp" buttons open a pre-filled message in WhatsApp. We do not send any data to WhatsApp ourselves; you choose what to send.
Data retention
- Active accounts and shops: kept for as long as the account is open.
- Deleted accounts: your personal data is deleted immediately. Your shop data is retained for 30 days so we can restore it if the deletion was accidental, then permanently removed.
- Order records: kept for 7 years to meet Ugandan tax and business record requirements.
- Analytics events: kept for 2 years.
- Server logs: 30 days.
Your rights
You can view, correct, or export your data at any time from your account settings. You can delete your account — and with it your shop and personal data — from the Account tab in Settings. For other requests (e.g. data portability, objection to processing), email us at [PLACEHOLDER: privacy@yourdomain.com] and we will respond within 14 days.
Cookies
We use one session cookie to keep you logged in. We do not use advertising or tracking cookies. No third-party cookie banners are needed.
Children
eDuuka is not directed at anyone under 18. If you believe a child has created an account, contact us at [PLACEHOLDER: privacy@yourdomain.com] and we will remove it.
Changes to this policy
If we make material changes we will notify sellers by email at least 14 days before the changes take effect. Continuing to use the platform after that date means you accept the new policy.