Privacy Policy
How Lizimas Store collects, uses and protects your personal data, in accordance with the Data Protection and Privacy Act, 2019 of Uganda.
Who we are
Lizimas Store is an online retail store operating in Uganda at lizimasstore.com. The business is a sole proprietorship. Registration formalities are ongoing with the support of our legal advisers, and this page will be updated once registration is complete.
We sell our own products directly to customers. We are not a marketplace and we do not host third-party sellers. Lizimas Store is the data controller for all personal data described on this page.
What we collect
Information you give us
- Your name, email address and phone number
- Delivery address, including district, county, sub-county, parish and village, plus any landmark or instruction you add
- Your password — stored only in hashed form, never visible to our staff, including administrators
- Order details: products, quantities, sizes, colours and delivery method
- Messages you send us through chat, WhatsApp, email or social media, including any photographs you attach
- Product reviews and ratings you submit
Information we collect automatically
- Your IP address, browser, device type and operating system
- Pages and products you view or search for, and when
- Records of logins to your account, kept for account security
Payment information
When you pay by mobile money, the payment is processed by the mobile money provider. We never receive, store or see your mobile money PIN, and we do not store card numbers. We keep only the transaction reference, the amount, and whether the payment succeeded — so we can match your payment to your order.
Cookies and local storage
We use only the storage strictly necessary to make the site work: your shopping cart, keeping you signed in, and your support chat if one is open. We do not use advertising cookies and we do not share your browsing behaviour with advertising networks. If we introduce optional cookies later, we will publish a separate Cookie Notice and ask your consent first.
How we use your data
- Creating and managing your account
- Processing, packing and delivering your orders
- Calculating the delivery charge for your location
- Contacting you about an order
- Answering your questions through customer support
- Verifying your phone number or email to secure your account
- Handling returns, refunds and complaints
- Protecting the store and our customers against fraud and abuse
- Understanding which products and pages are popular, so we can improve
- Complying with our legal obligations
Legal basis for processing
We process your data only where we have a lawful basis under the Data Protection and Privacy Act, 2019:
- Performance of a contract — where we need your details to process and deliver an order
- Your consent — for example, promotional messages. You can withdraw consent at any time
- Legal obligation — where the law requires us to keep or disclose records
- Legitimate interests — keeping the store secure, preventing fraud and improving our service, provided this does not override your rights
International transfers
Some providers we rely on operate servers outside Uganda. In particular, the servers hosting our website and customer database are located in the European Union, and our image hosting and email providers may process data outside Uganda.
This means your data may be transferred outside Uganda during normal operation of the store. We take reasonable steps to ensure it continues to receive an appropriate level of protection, and your rights under Ugandan law continue to apply.
How long we keep it
- Account information — while your account remains open
- Order and payment records — as long as required for accounting, tax and dispute resolution
- Support conversations — so we can handle any follow-up about the same order
- Login and security records — for a limited period, for account security
When data is no longer needed we delete it securely, or anonymise it so it can no longer be linked to you.
How we protect your data
- Encrypted connections (HTTPS) across the entire site
- Passwords stored only in hashed form, never in plain text
- Mandatory two-factor authentication for all staff accounts
- Role-based access, so staff reach only what their role requires
- Rate limiting and protective filtering against automated attacks
No system can be guaranteed completely secure. We have procedures for dealing with any suspected data breach, and will notify you and the Personal Data Protection Office where legally required.
Your rights
Under the Data Protection and Privacy Act, 2019 you have the right to:
- Be informed about how your data is used
- Access the data we hold about you
- Have inaccurate or incomplete data corrected
- Request deletion, subject to records we must keep by law
- Object to or restrict certain processing
- Withdraw consent where processing is based on consent
- Unsubscribe from marketing messages at any time
To exercise any of these, contact us using the details below. We may ask for information to confirm your identity first. We may decline a request that is unreasonable or where we cannot verify who you are, and we will explain why.
If you are not satisfied with how we have handled your data, you may lodge a complaint with the Personal Data Protection Office of Uganda.
Contact us
Questions about this policy, or to exercise any of your rights:
- Data protection and compliance: compliance.alert@lizimasstore.com
- Legal enquiries: legal@lizimasstore.com
We investigate every complaint about how we handle personal data and respond within the timelines prescribed by law.
Social media
Lizimas Store maintains pages on Facebook, Instagram, WhatsApp, X and TikTok. Where you contact us through one of them, we see the information your profile makes visible to us and the content of your message. Anything you post publicly there is governed by that platform's own terms and privacy policy, not by this page.
Never send your password, mobile money PIN, one-time codes or full payment details through social media. Our staff will never ask you for them.