Privacy Policy

1Who we are

Vendora Digitals Limited (registration no. Bk8036Ci975B) ("Vendora", "we", "us" or "our") is a software company based in Uganda. We make Vendora POS and Vendora School, and we build websites and custom software.

We are responsible for the personal information described in this policy, except where section 5 says otherwise. We handle personal information in line with Uganda's Data Protection and Privacy Act, 2019 and its regulations. Where customers in other countries are protected by their own data protection laws, we respect those rights too.

2What this policy covers

This policy explains what personal information we collect, why, and what we do with it when you:

• visit our website, vendoradigitals.com;
• contact us by WhatsApp, phone, SMS or email;
• buy, install or use Vendora POS, including Online mode and the online dashboard at monitor.vendoradigitals.com;
• join the Vendora School waiting list; or
• hire us to build a website or custom software.

It works alongside our Terms and Conditions and Website Terms of Use.

3Information we collect

When you visit our website. The website has no accounts, no database, no cookies and no analytics or advertising tools, and it loads nothing from other companies. Our hosting provider keeps standard technical logs (such as IP address, browser type, the page requested and the time) to keep the website secure and working. The contact form does not send anything to us by itself. It prepares a WhatsApp message on your own device, which you choose whether to send.

When you contact us. Your name, phone number, email address (if you give one), business or school name, and what you tell us in your message or call.

When you buy and use Vendora POS.

• Account and billing details: the owner's name, business name, phone number, email address, location, the licence or plan you bought, and payment records.
• Your shop's records (Standalone): sales, stock, prices, customers, debtors and staff records are stored on your own computer. Vendora does not receive them, unless you send us a copy or give our support team access to help you.
• Your shop's records (Online mode): when you switch on Online mode, your shop's sales, stock levels and each cashier's cash records are sent securely to our servers so that you can see them on your dashboard and your tills can share one stock count. This includes the names you give to staff and cashier accounts, and the sign-in details for your dashboard.
• Support: details of problems you report, and information we see while helping you, with your permission.

When you join the Vendora School waiting list. Your name, school name, role and phone number.

When you hire us for a website or software project. Contact and billing details, and the content and information you give us for the project.

4How we use it

We use personal information only for these purposes:

• To provide what you asked for: to reply to you, give quotes and demos, install and set up our products, run Online mode, provide support and training, and deliver projects. This is needed to perform our agreement with you.
• To run our business: to issue invoices, take payments, keep accounts and meet tax and legal obligations.
• To keep things secure: to protect our website, products and customers from fraud, abuse and attacks.
• To improve our products: using anonymous, combined statistics that do not identify you or any person.
• To keep you informed: about important product updates, security notices and changes to your service. We will send you marketing messages only if you agree, and you can stop them at any time.

We do not sell personal information, and we do not use your shop's records for advertising.

5Your customers' and staff's data

When your business or school records information about your own customers, staff, students or parents in a Vendora product, you decide what is collected and why, so you are responsible for it as the data collector under the law. For Online mode, Vendora processes that information only on your instructions, to provide the service to you.

You are responsible for having a lawful reason to collect that information and for telling those people how it is used, where the law requires it. We will help you respond if one of them asks to see or correct their information.

6Who we share it with

We share personal information only when needed, and only with:

• Service providers who help us run our business, such as our website and server hosting providers, WhatsApp, phone and SMS providers, and payment providers (mobile money, M-Pesa, card processors, PayPal, crypto payment processors and banks). They may use the information only to provide their service to us. Card details are entered on the payment provider's secure page; we never receive or store your full card number. Crypto transactions are recorded on a public blockchain by design.
• Authorities, when the law requires it, or to protect the rights, safety and property of our customers, the public or Vendora.
• A buyer or successor, if Vendora's business is ever sold or merged, under the same protections as this policy.

We never share one customer's shop records with another customer.

7Storage outside your country

Our hosting providers may store information on servers outside Uganda, or outside your own country. When that happens, we use providers that protect information to a standard at least as strong as Ugandan law requires, as section 19 of the Data Protection and Privacy Act sets out.

8How we protect it

• Our website and online dashboard use encrypted connections (HTTPS).
• Online mode is designed so that each shop can only see its own data. One customer can never see another customer's sales, stock or cash.
• Only staff who need information to do their job can access it, and our team accesses your shop's data only to provide support you ask for, to fix a problem, for security, or where the law requires it.
• Our website has strict security settings that block injected code and stop it from sending data to other websites.

No system is completely secure. You can help by keeping passwords and PINs secret, giving each staff member their own login, and signing in to your dashboard only at monitor.vendoradigitals.com. Vendora will never ask for your password by WhatsApp, SMS or phone.

If a data breach is likely to put your information at risk, we will tell you and the Personal Data Protection Office as the law requires.

9How long we keep it

• Enquiries that do not lead to a sale: up to 24 months after our last contact.
• Account, billing and payment records: while you are a customer, and afterwards for as long as tax and accounting laws require.
• Online mode shop data: while your Online mode account is active. After it ends, you can ask for an export within 30 days, and then we delete it, unless the law requires us to keep it.
• Website logs: kept by our hosting provider for a short period, normally no more than 30 days.

10Your rights

Under the Data Protection and Privacy Act, 2019, you have the right to:

• ask whether we hold personal information about you, and get a copy of it;
• ask us to correct information that is wrong or incomplete;
• ask us to delete information we no longer need or have no right to keep;
• object to, or ask us to stop, using your information for a particular purpose, including marketing;
• withdraw your consent at any time, where we rely on it; and
• complain to the Personal Data Protection Office (section 14).

To use any of these rights, contact us using the details in section 14. We may need to confirm who you are first. We will reply as soon as we can, and within the time the law allows.

11Children and schools

Our website and Vendora POS are meant for adults running businesses, and we do not knowingly collect information from children through them. Vendora School, when it launches, will hold information about students, which the school controls as described in section 5. We will publish more detail before Vendora School launches.

12Cookies and similar technology

Our website does not use cookies. It has no analytics, advertising or social media trackers, and it loads nothing from other companies.

The only things it saves are two small notes in your own browser (called local storage): vd-privacy-notice, which remembers that you closed our privacy notice so we don't show it again, and vd-theme, which remembers whether you chose the light or dark look. They contain no personal information, are never sent to us, and you can clear them at any time in your browser settings.

If we ever add cookies or tools that are not strictly necessary, we will update this policy and ask for your consent first. Our Cookie Policy has the full details.

The online dashboard at monitor.vendoradigitals.com uses only what is strictly necessary to keep you signed in securely. It does not use tracking or advertising cookies.

13Changes to this policy

We may update this policy from time to time. The latest version will always be on this page with its effective date. For important changes, we will also tell customers through the product, by WhatsApp, SMS or email.

14Contact us and complaints

For privacy questions or to use your rights, contact:

Vendora Digitals
Phone and WhatsApp: +256 744 683 189
Phone: +256 773 896 074
Email: malesjames27@gmail.com
Address: Kampala, Uganda

If you are not happy with how we handled your information, you can complain to Uganda's Personal Data Protection Office (PDPO), part of the National Information Technology Authority (NITA-U), at www.pdpo.go.ug. If you live in another country, you can also contact your own data protection authority.