Privacy Policy

1. Who We Are

Mirembe Beddings & Curtains
Kampala, Uganda
Email: info@mirembebeddingsandcurtains.com
Phone: +256 0742 087777

We are the data controller responsible for the personal information you provide to us through this website (mirembebeddingsandcurtains.com).

2. Information We Collect

We collect information in the following ways:

a) Information you give us directly

• Full name

• Email address

• Phone number (for delivery coordination and SMS order updates)

• Delivery address (street, city, district, delivery instructions)

• Account password (stored encrypted — we never see it in plain text)

• Payment details — we do not store your card number or mobile money PIN; these are handled entirely by Flutterwave (our payment processor)

• Product reviews and blog comments you choose to submit

• Messages sent via our contact form

b) Information collected automatically

• Your IP address (used for security and rate limiting)

• Browser type and operating system

• Pages visited and time spent on our site

• Referring website (how you found us)

• Device type (mobile, tablet, desktop)

We use session cookies to keep you logged in. We do not use tracking cookies for advertising purposes. See our Cookies Policy for details.

3. How We Use Your Information

We use your personal information to:

• Process and fulfil your orders — including contacting you about delivery status

• Send order confirmation emails and SMS — so you know when your order is placed, out for delivery, and delivered

• Manage your account — so you can view past orders, save addresses, and leave reviews

• Respond to your enquiries — when you contact us via the contact form or by phone

• Process payments — we pass your name, phone number, and order total to Flutterwave to initiate payment

• Improve our service — by understanding which products are popular and how customers use the website

• Prevent fraud and abuse — by monitoring unusual activity such as repeated failed payments

• Meet our legal obligations — including keeping financial records as required by Ugandan tax law

We do not sell your personal information to any third party. We do not use your data for unsolicited marketing.

4. Who We Share Your Information With

We only share your information with trusted service providers who help us deliver our service. All partners are bound by confidentiality obligations.

We may also disclose your information if required by Ugandan law, a court order, or to protect the rights and safety of our customers or staff.

5. Payment Security

All payments are processed by Flutterwave, a PCI-DSS compliant payment provider. When you enter card details or initiate a mobile money payment:

• Card numbers are encrypted on your device before transmission — we never receive them unencrypted

• Mobile money PINs are entered directly on your phone — we never have access to them

• All payment communication uses TLS 1.2+ encryption

• We verify every payment against Flutterwave's servers before marking an order as paid

6. How Long We Keep Your Data

• Account data — kept for as long as your account is active. You can request deletion at any time.

• Order records — kept for 7 years as required by Ugandan tax and business regulations (Uganda Revenue Authority requirements).

• Contact form messages — kept for 2 years, then deleted.

• Server logs (IP addresses) — kept for 90 days for security purposes.

• Product reviews and blog comments — kept until you request removal or your account is deleted.

7. Your Rights

Under the Data Protection and Privacy Act, 2019 (Uganda), you have the right to:

• Access — request a copy of the personal information we hold about you

• Rectification — ask us to correct inaccurate or incomplete information

• Erasure — request deletion of your account and personal data (subject to legal retention requirements)

• Restriction — ask us to stop processing your data in certain ways

• Objection — object to us processing your data for specific purposes

• Data portability — receive your data in a structured, commonly-used format

To exercise any of these rights, email us at info@mirembebeddingsandcurtains.com with the subject line "Privacy Request". We will respond within 14 working days.

You may also delete your account directly from your Account settings page.

8. Cookies

We use only essential cookies — small files stored in your browser that are necessary for the website to function. These include:

• Session cookie — keeps you logged in as you navigate the site

• Cart cookie — remembers the items in your shopping cart

• CSRF token — protects your account against cross-site request forgery attacks

We do not use advertising cookies, Facebook Pixel, Google Analytics, or any third-party tracking technology that follows you across the internet.

Read our full Cookies Policy for more details.

9. Data Security

We protect your data through:

• HTTPS encryption on all pages (your connection to our site is always secure)

• Passwords stored using bcrypt hashing (we cannot read your password)

• Database access restricted to authorised systems only

• Payment data handled exclusively by Flutterwave (PCI-DSS certified)

• Regular security testing and monitoring

• Rate limiting to prevent automated attacks

If we become aware of a data breach that affects your personal information, we will notify you by email within 72 hours and report it to the Personal Data Protection Office (Uganda) as required by law.

10. Children's Privacy

Our website and services are not directed at children under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately at info@mirembebeddingsandcurtains.com and we will delete it promptly.

11. Third-Party Links

Our website may contain links to third-party websites (such as social media pages). We are not responsible for the privacy practices of those websites and encourage you to read their privacy policies before providing any personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you by email. Continued use of our website after changes have been published constitutes your acceptance of the updated policy.

13. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data:

Mirembe Beddings & Curtains
Kampala, Uganda
Email: info@mirembebeddingsandcurtains.com
Phone: +256 0742 087777
Or use our Contact Form

You also have the right to lodge a complaint with Uganda's National Information Technology Authority (NITA-U) or the Personal Data Protection Office if you believe your data has been handled in breach of the Data Protection and Privacy Act, 2019.