Data & Compliance

1. Regulatory alignment

Our data handling practices are designed to comply with Uganda's Data Protection and Privacy Act, 2019, and, for buyers and visitors in the European Union/United Kingdom, the General Data Protection Regulation (GDPR). See our Privacy Policy for the full legal basis, retained data categories, and your rights as a data subject.

2. Hosting & infrastructure

This platform is hosted on Vercel, region-pinned to Frankfurt, Germany (EU), with our database hosted on a managed Postgres instance. All traffic to and from this site is encrypted in transit via HTTPS (TLS).

3. Encryption

• All data in transit is encrypted via HTTPS/TLS — there is no unencrypted access to this platform.
• Passwords are never stored in plain text: only a one-way, salted cryptographic hash (bcrypt).
• Scheduled database backups are encrypted at rest (AES-256-GCM) before being stored.

4. Access control

Our admin platform enforces role-based access control: staff accounts are scoped to the specific sections their role requires, sessions expire automatically after 8 hours of use, and login attempts are rate-limited to defend against brute-force and credential-stuffing attacks.

5. Application security

We apply a locked-down Content Security Policy and standard security headers (HSTS, X-Content-Type-Options, Referrer-Policy, Permissions-Policy) platform-wide, and every database query goes through a parameterized query builder — no raw SQL string concatenation, eliminating the SQL-injection class of vulnerability entirely.

6. Backups & business continuity

Our database provider takes automatic daily snapshots, and we additionally run our own scheduled, verified, encrypted backups as a second layer of protection. Backups are checked for structural validity before being retained, so a failed backup never goes unnoticed.

7. Data retention

We retain order, shipment, and certification records rather than permanently erasing them, since they form part of our regulatory export and audit trail. Closed customer accounts and archived records are soft-deleted (retained but hidden from normal use) rather than destroyed. See our Privacy Policy for full retention details and how to request erasure where we are not legally required to retain your data.

8. Subprocessors

We share data only with service providers who process it on our behalf, under confidentiality obligations, strictly to operate this platform: our hosting provider, our database provider, and our transactional email delivery provider. We do not share data with third parties for their own marketing purposes.