Privacy Notice

Last updated 13 June 2025

SUUQ ONLINE (U) LTD ("SUUQ", "we", "our") respects your privacy and is committed to protecting your personal data. This Notice explains how we collect, use, disclose, and safeguard your information when you visit or make a purchase from suuqonline.ug or our mobile channels (the "Platform").

1. Who we are

SUUQ ONLINE (U) LTD is a private company limited by shares, incorporated in Uganda (Reg No. G250212-3037) with its registered office at Makindye I, Luvuma, Makindye Division, Kampala. For the purposes of the Data Protection and Privacy Act 2019, we are the data controller.

2. Data we collect

  • Account Data – name, email, telephone, delivery address, password (hashed).
  • Order Information – products purchased, delivery instructions, payment references (e.g. Mobile Money ID).
  • Usage Data – log files, IP address, device information, cookies and similar tracking technologies.

3. How we use your data

  • To register and manage your customer account.
  • To process and deliver your orders and to arrange refunds or replacements.
  • To communicate with you about your order status, promotions or service updates.
  • To improve and secure our Platform through analytics and fraud-prevention tools.

4. Legal bases

We rely on the following bases under the Act: (i) consent (for marketing), (ii) performance of a contract (to deliver your order), (iii) legitimate interests (to keep our Platform secure), and (iv) legal obligation (tax and accounting records).

5. Sharing of information

We share your data only with:

  • Delivery couriers to bring your order to you.
  • Payment processors and Gateways that offer(MTN MoMo, Airtel Money, Card transactions) to handle transactions.
  • Analytics or IT-hosting providers who support our infrastructure.

We do not sell or rent your personal data to third parties.

6. Cookies & similar tech

We use session cookies for login and small first-party cookies to remember your cart. Optional analytic cookies from Google Analytics help us improve performance. You can control cookies via your browser settings.

7. Data retention

Order records are retained for 7 years to comply with tax regulations. Inactive accounts are anonymised after 24 months. Back-ups are securely purged on a rolling 30-day cycle.

8. Your rights

You have the right to access, correct, erase, or transfer your personal data, and to object to or restrict certain processing. Requests can be sent to privacy@suuqonline.ug. You may also complain to the Personal Data Protection Office (PDPO).

9. International transfers

Our primary servers are located in Uganda. Should we transfer data abroad, we will ensure equivalent protection in line with section 19 of the Act.

10. Updates

We may amend this Notice; material changes will be announced via the Platform 14 days before taking effect.