1. Who We Are (Data Controller)
Lubstech IT Solutions (U) Limited operates Lubstech E-Shop and is the controller of your personal data when you use our Services.
- Company
- Lubstech IT Solutions (U) Limited
- Address
- Vaperse Towers - Wandegeya, Kampala, Uganda
- sales@lubstechitsolutions.com
- Phone
- +256-775 330615
2. Information We Collect
2.1 Information you provide
- Account & profile: name, email, phone number, password, and delivery addresses.
- Orders & delivery: items purchased, delivery address, delivery instructions, and contact person details.
- Payments: payment method and transaction details (processed via partners; we do not store full card details).
- Support & feedback: messages, inquiries, reviews, ratings, and attachments you submit.
2.2 Information collected automatically
- Device & usage data: IP address, device identifiers, app version, browser type, pages viewed, clicks, and timestamps.
- Approximate location: derived from IP address; precise location only if you grant app permission (for delivery estimates and nearby services).
- Cookies & similar technologies: cookies, pixels, and SDK signals (see Cookies).
2.3 Information from third parties
- Payment providers: confirmations, transaction references, and fraud checks.
- Delivery/logistics partners: delivery status updates and proof of delivery.
- Analytics partners: aggregated insights to help us improve performance and user experience.
3. How We Use Information
- To create and manage your account and provide our Services.
- To process orders, arrange delivery, and manage returns/refunds.
- To process payments and prevent fraud, abuse, and security incidents.
- To communicate with you about transactions, delivery updates, and customer support.
- To improve our website/app functionality, performance, and product offering (especially ICT gadgets and accessories).
- To comply with applicable laws, taxation, and regulatory obligations.
- With your consent, to send marketing updates and promotions (you can opt out anytime).
4. Legal Bases
Where applicable, we process personal data based on:
- Contract: to fulfil orders and deliver services you request.
- Consent: for optional features (e.g., marketing, precise location permissions).
- Legitimate interests: to secure and improve our Services, prevent fraud, and run our business efficiently—balanced against your rights.
- Legal obligation: to comply with applicable laws and lawful requests.
5. How We Share Information
- Payment processors: to securely complete transactions.
- Delivery/logistics providers: to fulfil deliveries and returns.
- Service providers: hosting, analytics, communications, and security vendors working under confidentiality obligations.
- Legal & safety: when required by law, court order, or to protect users, our business, or the public.
- Business transfers: in a merger, acquisition, or sale of assets, subject to applicable law and safeguards.
We do not sell your personal data.
6. International Data Transfers
Your data may be processed on servers located outside Uganda depending on our service providers. Where required, we apply appropriate safeguards to protect your data.
7. Data Retention
We keep your personal data only as long as necessary for the purposes described in this Policy, including for legal, accounting, or reporting obligations. Examples:
- Order and transaction records may be retained for audit/tax requirements.
- Account information is retained while your account remains active, and may be anonymised or deleted after a reasonable period of inactivity unless retention is required by law.
- Support records may be retained to resolve disputes and improve customer service.
8. Data Security
We use reasonable administrative, technical, and physical safeguards designed to protect your information. However, no method of transmission or storage is fully secure. Please protect your account credentials and notify us immediately if you suspect unauthorised access.
9. Your Rights
Subject to applicable law, you may request to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete information.
- Delete your personal data (where lawful and applicable).
- Object to or restrict certain processing in some cases.
- Withdraw consent where processing is based on consent.
To make a request, contact us using the details in Section 14. For security, we may verify your identity before processing requests.
11. Children’s Privacy
Our Services are not intended for children under 18 without guardian consent. If you believe a child has provided personal data, please contact us and we will take appropriate steps.
12. Third-Party Links
Our Services may contain links to third-party websites or services. We are not responsible for their privacy practices. Please review their privacy policies before sharing personal data.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. Continued use of the Services after changes indicates acceptance.
14. Contact Us
If you have questions or requests about this Privacy Policy, contact:
- Company: Lubstech IT Solutions (U) Limited
- Address: Vaperse Towers - Wandegeya, Kampala, Uganda
- Email: sales@lubstechitsolutions.com
- Phone: +256-775 330615