Privacy Policy

Lady Thrifter ("we," "us," "our") is a women's fashion online store based in Kampala, Uganda, operating at ladythrifter.com. This policy explains what personal data we collect when you use our site, why we collect it, and what rights you have over it.

We collect personal data you give us directly, including:

• Your name, email address, and phone number when you create an account
• Delivery details — city, area, address, and any delivery notes — when you place an order
• Your order history and the items you've purchased
• Product reviews you choose to leave
• Whether you've opted in to marketing emails

We do not collect or store your card or Mobile Money PIN details — online payments are processed directly by Pesapal, our payment provider, who handle that information under their own security standards.

Some information — your cart, wishlist, and recently viewed items — is stored locally in your own browser rather than sent to us, unless you're signed in.

• To process and fulfil your orders, including contacting you about delivery
• To send order confirmation and status emails
• To send marketing emails about new arrivals or offers — only if you've opted in, and you can opt out anytime
• To respond to your questions or support requests
• To improve our store, products, and service

We don't sell your personal data. We share limited data with:

• Delivery riders — your name, phone number, and delivery address, only as needed to deliver your order
• Suppliers — for items sourced from a third-party supplier, limited order details needed to fulfil that item
• Pesapal — for processing online payments
• Our service providers — Supabase (database hosting), Resend (order emails), Vercel (website hosting), and Google (if you sign in with Google) — each only processes data on our behalf, under their own security and privacy commitments
• Law enforcement or regulators, only where we're legally required to

Lady Thrifter processes the personal data of people in Uganda, and is therefore subject to Uganda's Data Protection and Privacy Act, 2019 and its 2021 Regulations. Under this law, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion of your data, where permitted
• Object to your data being used for direct marketing at any time
• Request that we restrict how your data is processed
• Lodge a complaint with the Personal Data Protection Office (PDPO) at NITA-U if you believe your rights have been breached

To exercise any of these rights, contact us using the details at the bottom of this page.

We keep your account and order data for as long as your account is active, and as needed to meet our legal, accounting, and dispute-resolution obligations. You can request deletion of your account data at any time by contacting us.

We use reasonable technical and organizational measures to protect your data, including encrypted connections (HTTPS), access-controlled databases, and password hashing for account credentials. No method of transmission or storage is ever 100% secure, but we work to protect your information appropriately.

We use your browser's local storage to remember your cart, wishlist, and recently viewed items — this stays on your device. We don't currently use third-party advertising or tracking cookies. If that changes in future (for example, to run ads), we'll update this policy accordingly.

Lady Thrifter is intended for adults. We don't knowingly collect personal data from anyone under 18.

We may update this policy from time to time. Significant changes will be reflected by updating the "Last updated" date above.

For any questions about this policy or your data, reach us at support@ladythrifter.com or +256 772 586 700.