SpareHub – Privacy Policy

Effective Date: May 21, 2026

SpareHub ("we," "our," or "us") is committed to protecting the privacy and personal data of our users. This Privacy Policy outlines how we collect, use, store, and protect your personal information when you use our marketplace website and mobile application (the "Platform").

This policy is drafted in strict compliance with the Data Protection and Privacy Act, 2019 (Republic of Uganda) and the Data Protection and Privacy Regulations, 2021.

1. Data Protection Principles

In accordance with Ugandan law, SpareHub adheres to the following core principles:

  • Accountability: We are responsible for the personal data we collect from you.
  • Fairness & Lawfulness: Data is processed transparently and with your explicit consent.
  • Minimization: We only collect the specific data required to operate our marketplace.
  • Data Quality: We take reasonable steps to ensure your data remains accurate and up-to-date.
  • Security: We deploy robust security protocols to prevent unauthorized access, leaks, or destruction of your information.

2. Information We Collect

We collect personal data directly from you to provide, maintain, and optimize our digital marketplace services:

2.1 For Buyers (Mechanics, Garages, and Vehicle Owners)

  • Account Information: Full name, phone number, and email address.
  • Location Data: GPS or physical location data used exclusively to show you the closest available spare parts vendors.

2.2 For Vendors

  • Business Information: Shop or business name, physical store location, and official business phone number.
  • Identity Verification: Valid government-issued identification (National ID or Passport) and business registration certificates where required to prevent fraud.
  • Product Data: Images, pricing, descriptions, and availability of parts you list on the platform.

2.3 Technical Data

  • Usage Information: IP addresses, device types, operating system details, and interaction logs with the platform to improve app performance and security.

3. Legal Basis for Processing

We process your personal information under the following legal grounds:

  • Consent: By registering an account and accepting this policy, you explicitly consent to the processing of your data.
  • Contractual Necessity: Processing is required to facilitate connections, communications, and operations between buyers and vendors on the platform.
  • Legal Obligation: Processing may be executed to satisfy statutory requirements under the laws of Uganda.

4. How We Use Your Information

SpareHub uses your data to:

  • Enable communication between Buyers and Vendors.
  • Verify vendor authenticity and preserve marketplace safety.
  • Maintain, repair, and optimize platform user interfaces.
  • Issue updates, safety alerts, and account-related support messages.
  • Comply with regulatory requirements from Ugandan authorities.

5. Sharing and Disclosure of Data

SpareHub does not sell or rent user data to third parties. Your data is shared strictly in the following scenarios:

  • Between Platform Users: When a buyer expresses interest in a part, relevant contact information is visible to facilitate the transaction.
  • Service Providers: We may share data with vetted third-party technical providers under strict confidentiality agreements.
  • Law Enforcement: We will disclose data if legally required by a court of law or under statutory mandates of the Republic of Uganda.

6. Cross-Border Data Transfers

As a digital platform, SpareHub utilizes secure cloud hosting infrastructure. We ensure that any storage or processing of your data outside the territory of Uganda strictly complies with Section 19 of the Data Protection and Privacy Act, 2019, utilizing hosting providers that offer security frameworks equivalent to or stronger than Ugandan data laws.

7. Data Retention

We retain your personal data only for as long as your account remains active, or as long as necessary to fulfill our service commitments, resolve disputes, and comply with commercial and tax laws in Uganda. Inactive accounts and associated data will be securely deleted or anonymized after a prolonged period of non-use, subject to regulatory guidelines.

8. Your Legal Rights as a Data Subject

Under Part V of the Data Protection and Privacy Act, 2019, Ugandan citizens and residents have explicit rights regarding their personal information:

  • Right to Access: You may request a copy of the personal data SpareHub holds about you.
  • Right to Rectification: You can request correction of inaccurate or incomplete personal information.
  • Right to Object/Restrict: You have the right to object to the processing of your data for direct marketing purposes.
  • Right to Erasure: You may request the deletion of your account and associated personal records, provided there are no overriding legal dependencies.

9. Security Measures

We implement rigorous technical and organizational security protocols (including data encryption, firewalls, and secure access controls) to safeguard your data. In the event of a data breach, SpareHub will immediately notify the Personal Data Protection Office (PDPO) and communicate the breach to affected users within statutory timelines mandated by the Data Protection and Privacy Regulations, 2021.

10. Changes to This Privacy Policy

SpareHub reserves the right to modify this Privacy Policy at any time. When updates occur, we will adjust the "Effective Date" at the top of this document. Continued use of the platform after changes implies consent to the updated terms.

11. Contact Us / Data Protection Enquiries

  • Company Name: SpareHub
  • Email: support@sparehub.app
  • Phone: +256 760 242 207
  • Physical Location: Kampala, Uganda