Legal
Privacy Policy
Effective Date: April 1, 2026
Last Updated: April 1, 2026
This policy explains how MyGarage collects, uses, shares, protects, and retains personal data when you use our website and related services.
1. Who We Are and How to Contact Us
MyGarage ("we", "us", or "our") is an online automotive parts store serving customers in Uganda and the East African region. We act as the data controller for personal data collected through our website, customer support channels, and delivery interactions.
For privacy-related requests, contact our Data Protection Officer at dpo@mygarage.ug, support@mygarage.ug, or +256 783 676 313.
2. Scope and Acceptance
This Privacy Policy applies when you browse our site, create an account, place orders, submit support requests, request returns or warranties, or subscribe to marketing communications.
By using our services, you acknowledge this Policy. If you do not agree, do not use the site or provide personal data.
3. Personal Data We Collect
- Identity data: name, optional gender/date of birth, and identity details where required for verification.
- Contact data: phone number, email, WhatsApp contact where used for order updates.
- Delivery data: address, district, landmarks, and optional location coordinates for delivery support.
- Vehicle data: make, model, year, engine type, and partial VIN/chassis for compatibility checks.
- Payment data: payment references and limited account details for refunds.
- Account data: encrypted password, saved addresses, wishlist, notification preferences.
- Communications: messages, support tickets, call records (with notice), and images shared for returns/fitment.
- Technical and usage data: IP, browser/device details, pages visited, cart events, session/cookie identifiers.
4. Sources of Data
- Directly from you during account creation, checkout, support, and communications.
- Automatically through cookies, analytics, logs, and security tools.
- From trusted partners such as payment providers, logistics partners, and fraud-prevention services.
5. Legal Bases for Processing
- Consent (for marketing, non-essential cookies, optional location sharing).
- Contract performance (processing and fulfilling orders, refunds, and support).
- Legal obligations (record retention, tax and regulatory compliance).
- Legitimate interests (fraud prevention, platform security, service improvement).
- Vital interests in rare emergency circumstances.
6. How We Use Personal Data
- Create and manage accounts.
- Process, confirm, ship, and deliver orders.
- Verify part compatibility and reduce fitment errors.
- Handle payments, returns, exchanges, and warranty requests.
- Provide customer support and service updates.
- Detect and prevent fraud, abuse, and cyber threats.
- Improve user experience, product planning, and internal analytics.
- Send marketing messages where you have opted in.
7. Sharing and Disclosure
We share personal data only when necessary with service providers such as payment processors, delivery partners, cloud infrastructure providers, analytics providers (with consent where required), and legal/regulatory authorities when required by law.
We do not sell your personal data.
| Recipient | Purpose | Safeguards |
|---|---|---|
| Payment processors (Pesapal, DPO, Flutterwave) | Secure payment processing | Contractual obligations and PCI-DSS aligned controls |
| Delivery and logistics partners | Delivery, tracking, and proof of delivery | Data processing agreements |
| IT and cloud providers | Hosting, backups, and platform operations | DPA terms and restricted access controls |
| Marketing and analytics providers | Usage insights and campaign performance | Consent controls and anonymization where possible |
| Law enforcement and regulators | Legal compliance and investigations | Disclosed only when legally required |
| Business successors | Mergers, acquisitions, or asset transfers | Continued protection and notice obligations |
8. International Data Transfers
Some providers may process data outside Uganda. Where this occurs, we implement safeguards such as contractual protections and other lawful transfer mechanisms required by applicable data protection law.
9. Data Security Measures
- Encryption in transit and at rest for sensitive data.
- Role-based access controls and strong authentication controls.
- Monitoring, logging, vulnerability checks, and incident response processes.
- Staff confidentiality obligations and data-protection training.
10. Data Retention
We retain personal data only for as long as necessary for the purposes in this Policy, including order fulfillment, legal compliance, dispute resolution, and fraud prevention.
When retention is no longer necessary, data is securely deleted or irreversibly anonymized.
| Data Type | Retention Period | Reason |
|---|---|---|
| Active account and order history | Duration of account + 7 years after closure | Tax, warranty, and consumer-claim compliance |
| Marketing consent records | Until withdrawal + 1 year | Proof of consent |
| Analytics and system logs | 24 months | Security and service improvement |
| Payment transaction metadata | 7 years | Financial and audit requirements |
| Fraud investigation records | While investigation is active and any legal follow-up period | Security and legal defense |
11. Your Data Rights
- Right of access to your personal data.
- Right to correct inaccurate or incomplete data.
- Right to request deletion where legally applicable.
- Right to restrict or object to processing in specific circumstances.
- Right to withdraw consent at any time for consent-based processing.
- Right to data portability where applicable.
| Right | Description | How to Exercise |
|---|---|---|
| Right of access | Obtain a copy of your personal data and confirmation of processing. | Email dpo@mygarage.ug |
| Right to rectification | Correct inaccurate or incomplete data. | Update account profile or email dpo@mygarage.ug |
| Right to erasure | Request deletion where data is no longer necessary or consent is withdrawn (subject to legal exceptions). | Email dpo@mygarage.ug |
| Right to restrict processing | Limit processing in specific legally permitted situations. | Email dpo@mygarage.ug |
| Right to object | Object to processing based on legitimate interests or direct marketing. | Use unsubscribe link or email dpo@mygarage.ug |
| Right to withdraw consent | Withdraw consent at any time for consent-based processing. | Use unsubscribe link or email dpo@mygarage.ug |
| Right to data portability | Receive eligible personal data in a structured, machine-readable format. | Email dpo@mygarage.ug |
We respond to valid rights requests within 30 calendar days, extendable for complex requests where permitted by law.
12. Automated Decision-Making
We do not currently use automated decision-making that produces legal or similarly significant effects without human review.
13. Cookies and Tracking Technologies
- Essential cookies for authentication, security, and cart/session functionality.
- Analytics cookies to understand and improve site performance.
- Advertising/retargeting technologies where consent is provided.
- You can manage cookie settings through browser controls and cookie preferences.
14. Children and Minors
Our services are not directed to children under 18. We do not knowingly collect personal data from minors without valid guardian authorization. If discovered, such data will be removed as appropriate.
15. Data Breach Notification
If a personal data breach is likely to result in high risk to your rights and freedoms, we will notify relevant authorities and affected individuals in accordance with legal requirements.
16. Changes to This Privacy Policy
We may update this Policy from time to time. Material changes will be communicated through site notices, email, and updated effective dates where appropriate.
Continued use of our services after updates constitutes acceptance of the revised Policy.
17. Complaints
If you have a privacy complaint, contact our Data Protection Officer first at dpo@mygarage.ug. If unresolved, you may escalate to the Personal Data Protection Office (PDPO) in Uganda.
Privacy contact: dpo@mygarage.ug. General support: support@mygarage.ug or phone: +256 783 676 313.
View our Terms and Conditions or return to Home.