Privacy Policy

1. Introduction

JN Electronics (“we”, “us”, or “our”) respects your privacy and is committed to protecting personal data in accordance with the Data Protection and Privacy Act, 2019 (Uganda) and the Data Protection and Privacy Regulations, 2021.

This Privacy Policy explains what personal data we collect when you use our website and online shopping services, why we collect it, how we use and protect it, and the rights available to you as a data subject in Uganda.

We act as a data controller for personal data processed through the Platform. Where we use service providers to process data on our behalf, they act as data processors under appropriate contractual safeguards.

2. Personal Data We Collect

Depending on how you use the Platform, we may collect:

• Identity and contact data: full name, email address, phone number, delivery address, and branch selection for pickup
• Account data: login credentials (passwords are stored in hashed form), account preferences, and order history for registered customers
• Order and payment data: order references, items purchased, amounts, payment method selected, payment status, and records needed to confirm Mobile Money or bank transfer payments
• Communications: messages you send through our contact form, newsletter sign-up email, and correspondence with our staff
• Technical data: IP address, browser type, device information, session identifiers, and cookies or similar technologies used to operate and secure the Platform

We collect only data that is adequate, relevant, and limited to what is necessary for the purposes described in this policy, in line with Uganda's data protection principles.

3. How We Collect Personal Data

We collect personal data when you:

• Register for an account or sign in
• Place an order as a guest or registered customer
• Subscribe to our newsletter or submit the contact form
• Communicate with us by phone, email, or in-store in connection with an online order
• Browse the Platform, where technical data is collected automatically through cookies and logs

4. Legal Basis and Consent

Under the Data Protection and Privacy Act, 2019 (Uganda), we process personal data lawfully and fairly. We rely on one or more of the following, depending on the activity:

• Your consent, for example when you subscribe to marketing communications
• Performance of a contract, to process and fulfill your orders and manage your account
• Legal obligation, to comply with tax, accounting, or regulatory requirements in Uganda
• Legitimate interests, such as fraud prevention, Platform security, and improving our services, where those interests are not overridden by your rights

Where consent is required, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal. Withdraw marketing consent by using unsubscribe options or contacting us directly.

5. How We Use Personal Data

We use personal data to:

• Process, confirm, fulfill, and deliver orders, including pickup arrangements
• Manage payments and payment confirmation
• Provide customer support and respond to enquiries
• Send transactional notifications about your orders and account
• Operate, maintain, and secure the Platform
• Send marketing communications where you have opted in
• Meet legal, regulatory, and audit requirements
• Detect and prevent fraud, abuse, or unauthorized access

6. Sharing and Disclosure

We do not sell your personal data. We may share data with trusted third parties only where necessary and subject to appropriate safeguards, including:

• Payment service providers (present or future integrations)
• Email and notification service providers
• Cloud hosting and infrastructure providers
• Delivery or logistics partners engaged to fulfill orders
• Professional advisers or authorities where required by law

We require processors to protect personal data and use it only for the purposes we specify.

7. International Transfers

Some service providers may process data outside Uganda (for example, cloud hosting). Where this occurs, we take steps required under the Data Protection and Privacy Act, 2019 (Uganda) to ensure an adequate level of protection, including contractual measures and assessments appropriate to the transfer.

8. Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including to fulfill orders, maintain account history, resolve disputes, and comply with legal obligations. Order and payment records may be retained for extended periods where required for accounting, tax, or regulatory purposes. Cancelled orders remain recorded in our systems as part of our business audit trail.

9. Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration. These include secure authentication (including HTTP-only session cookies for logged-in users), access controls for staff systems, and logging of sensitive operations where applicable.

No method of transmission over the internet is completely secure. Please use a strong password and contact us immediately if you suspect unauthorized access to your account.

10. Your Rights

Under the Data Protection and Privacy Act, 2019 (Uganda), you have rights including, where applicable:

• To be informed about the collection and use of your personal data
• To access personal data we hold about you
• To request correction of inaccurate or incomplete data
• To object to or request restriction of certain processing
• To request deletion of personal data where the law permits
• To withdraw consent for consent-based processing
• To lodge a complaint with the Personal Data Protection Office (PDPO)

To exercise your rights, contact us using the details in Section 14. We may need to verify your identity before responding. You may also contact the Personal Data Protection Office (PDPO) at pdpo.go.ug.

11. Cookies and Similar Technologies

We use cookies and similar technologies to keep you signed in, remember preferences, maintain shopping session state, and understand how the Platform is used. You can control cookies through your browser settings, but disabling essential cookies may affect Platform functionality such as cart and checkout.

12. Children

The Platform is not directed at children under 18 without parental or guardian involvement. We do not knowingly collect personal data from children without appropriate consent. Contact us if you believe we have collected a child's data in error.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the date at the top of this page. We encourage you to review this policy periodically.

14. Contact and Data Protection Enquiries

For privacy questions or to exercise your data protection rights, contact:

• JN Electronics
• Email: kampala@jnelectronics.co.ug
• Phone: +256 700 100 001
• Contact form: Contact page

Kampala branch: William Street, Kampala Central, Kampala