Privacy Policy

1. Who we are

HANDYUG coordinates plumbing, electrical, maintenance, and related professional services in Uganda. For personal data collected through this website and our service operations, HANDYUG acts as the data controller.

This policy is intended to reflect Uganda’s Data Protection and Privacy Act, 2019 and applicable regulations.

2. Personal data we collect

Service requests and bookings

Your name, telephone number, optional alternative number, location, requested service or professional, job description, booking source, assignment and status history, completion information, and rating.

Professional applications and profiles

Your name, telephone number, trade, operating area, experience, application status, and any certification, licence, specialization, service-area, availability, or profile details added during review. If approved, selected professional information—such as your name, trade, specialization, service areas, certification or licence status, experience description, ratings, and completed-job statistics—may appear in the public directory. We do not display a professional’s telephone number as part of the visible profile.

Accounts and security

For registered users, we process names, email addresses, encrypted passwords, email-verification status, administrator access, appearance preferences, session information, two-factor authentication data, passkey credentials, and account-security activity.

Communications and technical information

We keep SMS recipients, message content, submission and delivery status, provider reference information, costs, callbacks, and retry history. Our systems may also process IP addresses, browser or device information, timestamps, security events, and server logs needed to operate and protect the service.

Please do not include unnecessary sensitive information in a job description or other free-text field.

3. How and why we use personal data

We process personal data with your consent, to take steps you request or provide a service, for legitimate service-administration and security purposes, and where necessary to meet legal obligations. We use it to:

• receive, identify, and manage bookings and applications;
• contact you and provide private status tracking;
• match and assign suitable professionals;
• give an assigned professional the information needed to perform the job;
• send operational SMS messages and monitor delivery;
• review, approve, and publish professional profiles;
• manage users, authentication, security, support, and misuse prevention;
• measure service completion and professional ratings; and
• keep records, resolve disputes, enforce agreements, and comply with law.

HANDYUG does not use the information described in this policy for solely automated decisions that produce legal or similarly significant effects.

4. When we share personal data

We do not sell personal data. We disclose only what is reasonably necessary to:

• Assigned professionals: the customer’s name, contact details, location, service description, assignment details, and a private job link;
• SMS provider: EgoSMS receives telephone numbers and message content required to send and report on operational messages;
• Hosting and technology providers: providers supporting hosting, storage, security, authentication, backups, and website operation;
• Professional reviewers and administrators: authorized HANDYUG personnel who operate the service; and
• Authorities or advisers: where required by law, necessary to protect rights and safety, handle a dispute, or obtain professional advice.

If a provider processes data outside Uganda, we will take reasonable steps required by applicable law to ensure an appropriate level of protection.

5. Private links and cookies

Booking, application, and assignment links are private bearer links: anyone who receives the link may be able to view the information it protects. Keep links confidential and tell us promptly if one is disclosed accidentally. Professional assignment links are revoked when an assignment ends or the job is completed or cancelled.

We use essential cookies and similar browser storage for security, sessions, authentication, CSRF protection, and preferences. The current website does not use advertising cookies or third-party analytics. If that changes, we will update this policy and request consent where required.

6. How long we keep data

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including completing services, managing professional relationships, maintaining security and audit records, resolving complaints, and satisfying legal, accounting, or reporting duties. Retention varies by record type and the status of a booking, application, account, or dispute. When information is no longer required, we will delete, anonymize, or securely isolate it, subject to technical backup cycles and lawful retention needs.

7. How we protect data

We use access controls, administrator verification and two-factor authentication, hashed passwords, optional passkeys, private tokenized links, security headers, validation, audit records, and other reasonable organizational and technical measures. No internet service can guarantee absolute security, so please use strong credentials and protect private links.

8. Your privacy rights

Subject to applicable law and any lawful exceptions, you may ask us to:

• confirm whether we process your personal data and provide access to it;
• correct inaccurate information or complete information that is incomplete;
• delete personal data that should no longer be held;
• stop or restrict particular processing, or withdraw consent where processing relies on consent; and
• explain how your information has been used or shared.

We may need to verify your identity before acting on a request. We will respond within the period required by applicable law and explain if a request cannot be fulfilled in full.

9. Children’s privacy

HANDYUG services are intended for adults. A parent or legal guardian should submit and manage any request involving a child. If we learn that a child’s personal data was submitted without appropriate authority, please contact us so we can review and address it.

10. Changes to this policy

We may update this policy when our services, providers, or legal duties change. We will publish the revised version here, change the “last updated” date, and provide a prominent notice when a change materially affects how we use personal data.

11. Contact us or make a complaint

Contact HANDYUG first with a privacy question, request, or complaint:

If you are not satisfied with our response, you may contact or file a complaint with Uganda’s Personal Data Protection Office (PDPO).