Privacy policy

1.Who we are

1.1SixStores Limited (“SixStores”, “we”) runs the marketplace at sixstores.com and decides how the personal data described here is used. We handle it in line with the Data Protection and Privacy Act, 2019 and its regulations.

1.2This policy covers shoppers, vendors and visitors. It forms part of our Terms of Service.

2.What we collect

2.1What you give us. Your name, email address, phone number and profile photo; delivery addresses; the mobile money number you pay with; reviews, messages and anything you send through the contact form. If you sign in with Google, we receive your name, email address and profile photo from Google.

2.2Vendors. Business name and details, identity and registration documents, tax number, payout details, and the products and prices you list.

2.3What we record. Your orders, payments, refunds, installment and Save to Own plans, gift cards, points and referrals; the payment references our payment provider returns (we never receive your PIN); and basic technical data such as IP address, browser, device and the pages you visit.

2.4We do not collect your precise location, and we do not knowingly collect data about anyone under 18.

3.Why we use it

We use personal data to:

run your account and keep it secure
take payment, deliver orders, and handle returns and refunds
run installments, Save to Own, gift cards, points, referrals and promotions
send you order, payment and account messages
answer your questions and resolve complaints
prevent fraud, misuse and security incidents
understand how the Platform is used so we can improve it
send offers, if you have agreed to receive them
meet our legal, tax and accounting obligations, and protect our legal rights

3.1We rely on: the contract with you (orders, payments, your account); your consent (marketing, which you can withdraw at any time); our legitimate interests (security, fraud prevention, improving the Platform); and legal obligations (tax and regulatory records).

4.Who we share it with

4.1We do not sell personal data. We share it only as needed:

Vendors receive the name, phone number, delivery address and items of orders they fulfil, and may use them only to fulfil those orders
Delivery agents receive the name, phone number and address needed to deliver
Payment providers (our mobile money aggregator, MTN and Airtel) receive the phone number and amount needed to take or return a payment
Service providers who host our database, website, files and email, and who provide sign-in with Google and usage statistics, under agreements that limit their use of the data
Authorities, such as the police, the Uganda Revenue Authority or the Personal Data Protection Office, when the law requires it
A buyer of our business, if SixStores is sold or merged, on the same terms as this policy

4.2Discreet orders. For wellness orders, the outside of the package does not name the products, and order emails do not list them.

5.Data stored outside Uganda

5.1Some of our service providers store data on servers outside Uganda. We use providers whose security and data protection standards are at least as strong as Ugandan law requires, and we transfer only what each provider needs. By using the Platform you consent to these transfers.

6.Keeping it safe

6.1Data is encrypted in transit. Access to it is limited by account and role, so customers, vendors and staff see only what they need. Staff and vendor sessions expire, and admin access is limited by role.

6.2No system is completely secure. Keep your password and devices safe and tell us at once if you think your account has been misused. If a breach is likely to affect you, we will notify you and the Personal Data Protection Office as the law requires.

7.Cookies and storage on your device

7.1We use cookies and your browser’s storage to keep you signed in, remember your cart, theme and recent searches, and keep a copy of your account details so pages load quickly and work offline. These are needed for the Platform to work.

7.2If you are not signed in, a cookie links your activity on SixStores (products you save or add to your cart) for up to 30 days so we can show you relevant products. It is used only on SixStores and is not shared with advertisers.

7.3We measure visits with an analytics service that does not use cookies or build advertising profiles. We do not use advertising cookies or cookies that track you on other websites.

7.4Signing out clears the account details kept on that device.

8.How long we keep it

account details: while your account is open, and up to 2 years after it closes
orders, payments and refunds: 10 years, for tax and accounting records
support messages: up to 2 years after the matter is closed
technical logs: up to 12 months
marketing preferences: until you change them

9.Your rights

9.1Under the Data Protection and Privacy Act, 2019 you can ask us to:

tell you what personal data we hold about you and give you a copy
correct data that is wrong or incomplete
delete data we no longer need or have no lawful reason to keep
stop using your data for marketing, or for purposes you object to

9.2You can update most details yourself in Account settings. To stop marketing messages, or for anything else, email support@sixstores.com. We may ask you to confirm your identity, and will reply within 30 days.

9.3Some data must be kept even if you ask us to delete it, such as order and payment records we are required to keep by law, or data needed for an open dispute.

9.4If you are unhappy with how we have handled your data, please tell us first so we can put it right. You may also complain to the Personal Data Protection Office.

10.Changes to this policy

10.1We may update this policy. The current version is always on this page with its effective date. For significant changes we will also tell you by email, SMS or on the Platform.

11.Contact

Questions about your data: support@sixstores.com, or our contact form. SixStores Limited, Kampala, Uganda.