Version: 1.0
Audience: Vendors, Tourists, Guides, Artisans
Jurisdiction: Uganda Data Protection & Privacy Act, Cap 97
This Privacy Policy explains in detail how e-BETP (operated by Likana Safaris Uganda Ltd) collects, uses, stores, secures, and shares your personal data when you use our platform. We are committed to transparency, security, and compliance with Ugandan law.
Below is a complete breakdown of each data point collected at this stage of the platform.
What it is: Your first name and last name.
Why we collect it:
How it is used: Account display, receipts and confirmations, vendor verification.
Retention: As long as the account is active.
What it is: The registered name of your craft shop, tourism business, or service entity.
Why we collect it:
How it is used: Vendor profile, payout documents, compliance reporting.
Retention: 5 years after business deactivation (URA compliance rule).
What it is: The number you use to register and receive notifications.
Why we collect it:
How it is used: SMS confirmations, password resets, vendor–customer communication (masked when needed).
Retention: As long as your account exists.
What it is: An email used for login, receipts, and support.
Why we collect it:
How it is used: Transaction emails, customer care, policy updates.
Retention: Active account lifetime.
What it is: Secure, encrypted references from payment processors (NOT your full card/mobile money details).
Why we collect it:
How it is used: Matching orders to successful payments, resolving disputes, financial reporting.
Retention: 5 years (URA requirement).
What it is: Information on items purchased or tours booked, including:
Why we collect it: To fulfill your order, to manage your bookings, to support dispute resolution.
How it is used: Receipts, vendor dashboards, delivery of services.
Retention: 5 years.
What it is: Record of when and where your account logs in.
Why we collect it: Security monitoring, fraud detection, user support.
How it is used: Account protection, suspicious activity alerts, authentication troubleshooting.
Retention: 12–24 months.
What it is: Pages visited, actions taken, buttons clicked — without tracking deeper behavioral analytics.
Why we collect it: To improve platform performance, understand user journeys, detect errors.
How it is used: Dashboard improvements, service reliability, troubleshooting.
Retention: 6–12 months.
What it is: The network address used when you connect to our platform.
Why we collect it: Security and fraud prevention, location-based service adjustments, error detection.
How it is used: Blocking suspicious activity, content optimization, system diagnostics.
Retention: 12 months.
What it is: Your browser version (e.g., Chrome) and device type (e.g., mobile/desktop).
Why we collect it: To ensure the platform displays correctly, for bug fixes, to optimize website experience.
How it is used: UI/UX improvements, device compatibility enhancements.
Retention: 6–12 months.
What they are: Small data files stored on your device for:
Why we collect them: Security, smooth navigation, preventing repeated logins.
Retention: 7–30 days, depending on session settings.
For each purpose, here is what we do and why:
We comply with:
We rely on:
We only share your data with essential partners:
Shared Data: Payment token, transaction amount, order reference.
Why: To complete your booking or purchase.
Shared Data: Encrypted account and session data.
Why: To operate the platform securely.
Shared Data (when required by law): Transaction totals, vendor details, compliance records.
Why: For audits or legal reporting.
Shared Data: Email address, ticket content.
Why: To assist you when you submit a support request.
We apply the following safeguards:
| Data Type | Retention Period |
|---|---|
| Account details | Active account lifetime |
| Payment records | 5 years |
| Bookings/orders | 5 years |
| Login logs | 12–24 months |
| Cookies | 7–30 days |
| Support messages | 12–24 months |
After expiry, data is securely deleted or anonymized.
It is the responsibility of every member/staff, or any person who comes across Personal Data on the e-BETP platform or third parties interacting with e-BETP staff, vendors, customers or agents to protect the platform's information or collected data.
e-BETP shall communicate any personal data breach to the data subject without undue delay.
e-BETP shall not process personal data for direct marketing purposes.
You (the data subject) may request at any time:
To exercise your rights: privacy@ebetp.africa
If a breach occurs:
We update this policy when:
Users will be informed of major updates.
The organization will verify compliance to this policy through various methods, including but not limited to, business tool reports, internal and external audits and feedback to the policy owner.
An employee found to have violated this policy may be subject to disciplinary action, up to and including termination of employment.
“Personal Data” means information about a person from which the person can be identified, that is recorded in any form and includes data that relates to:
“Data subject” means an individual from whom or in respect of whom personal information has been requested, collected, processed or stored.
Data Protection Officer (DPO)