Privacy Policy

Introduction

This Privacy Policy explains how Uppkit (“we”, “us”) collects, uses, stores, and protects personal information when you use our website, create an account, or place an order. We are committed to transparency and to handling your data responsibly.

By using our services, you acknowledge this policy. If you do not agree, please do not use the platform.

Data we collect

We may collect the following categories of information:

• Identity & contact: name, email address, and phone number.
• Delivery: shipping address, region, and delivery instructions.
• Account & security: password (stored hashed), session identifiers, and security logs.
• Transaction: order details, items purchased, amounts, payment references (we do not store full card numbers).
• Technical: IP address, device/browser type, and approximate location derived from network data where relevant for fraud prevention.
• Communications: messages you send to support or feedback you provide.

How we use your data

We process personal data to:

• create and manage your account;
• process, fulfil, and deliver orders;
• communicate about your order, delivery, and account (including service emails);
• take payment and prevent fraud;
• improve our website, products, and customer support;
• comply with legal obligations (e.g. tax, accounting, regulatory requests).

We do not sell your personal information. Marketing communications, where sent, are based on legitimate interest or consent where required.

Payments

Payments are processed by certified third-party providers (for example Paystack). Card and mobile-money details are handled directly by the payment processor according to their privacy policy and industry security standards. We receive limited transaction metadata (such as status and reference) needed to confirm your order.

Delivery & logistics

To deliver your order, we share the minimum necessary contact and address information with couriers or logistics partners. Those partners are required to use data only for delivery and in line with applicable law.

Retention

We retain data only as long as necessary for the purposes above, including legal, tax, and dispute-resolution requirements. Account data may be deleted or anonymised when no longer needed, subject to statutory retention periods.

Security

We implement appropriate technical and organisational measures—including encryption in transit, access controls, and secure hosting—to protect your information. No method of transmission over the internet is completely secure; we continually review our practices.

Your rights

Depending on applicable law, you may have the right to access, correct, delete, or restrict processing of your personal data, and to object to certain processing. To exercise these rights, contact us using the details on our Contact page. You may also lodge a complaint with a supervisory authority where applicable.

Changes to this policy

We may update this Privacy Policy from time to time. The “last updated” date and version on this page will change when we do. Material changes may require renewed acceptance for registered users.

Contact

For privacy-related questions, use the contact options listed on our Contact page.