Privacy Policy
Effective date: August 2026 · VYB-TECH HUB, trading as CampusPlug UG (registered with the Uganda Registration Services Bureau, commencement date 24 August 2026; "we," "us") operates campusplugug.com, in compliance with the Data Protection and Privacy Act, 2019 and the Data Protection and Privacy Regulations, 2021 of Uganda
1. Information We Collect
For Buyers: email address, display name, and saved listing preferences. For Sellers: email address, university student email, business name, university, campus, WhatsApp phone number, optional biography, and payment-related details where billing features are used. For all Users: IP address, device and browser type, pages visited, time spent, referring URLs, and approximate location, collected via cookies and similar technologies (see our Cookie Policy). Where you register or log in via a third-party service, we may receive basic profile information from that provider, subject to your permissions with them.
2. Legal Basis and Purpose of Processing
We process personal data on the basis of: your consent; performance of a contract with you (operating your account and listings); our legitimate interest in operating, securing, and improving the Platform; and compliance with legal obligations. We use your data to: create and manage your account; verify student status via OTP to your student email; enable listings and buyer-seller communication; process billing and payments; detect and prevent fraud, scams, or abuse; send service notifications and transactional emails; respond to support requests; and comply with lawful requests from Ugandan authorities. We do not use your data for automated decision-making that produces legal effects concerning you, and we do not sell your personal data to third parties.
3. Public Information
If you are a Seller, the following information is visible to all Users, including guests who are not registered: your business name, campus, university, WhatsApp phone number, biography, and all active listings. By registering as a Seller you consent to this public disclosure.
4. Disclosure of Information
We may share your data with: other Users, limited to what is necessary to facilitate a transaction (e.g., your listing contact details, at your choice); service providers who support hosting, payments, analytics, or communications, under confidentiality obligations; law enforcement or regulatory bodies, where required by Ugandan law or a valid legal order; and a successor entity in the event of a merger, acquisition, or sale of assets, subject to equivalent privacy protection.
5. Payment Data
We do not store your full mobile money account details or full payment card details. Subscription payments are processed through PesaPal (our payment gateway), which supports MTN Mobile Money and Airtel Money as payment channels and is PCI DSS compliant. We store only the transaction reference ID, amount, provider, channel, and status for reconciliation. We never see or store your full mobile money PIN or credentials. PesaPal's own privacy policy applies to data processed on their platform. See also our Billing Policy.
6. Data Retention
We retain personal data only as long as necessary to fulfil the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce our agreements. Active account data is retained for the duration of your account; if you delete your account, your personal information is anonymised within 30 days. Payment records are retained for 7 years for legal and audit compliance.
7. Data Security
We implement reasonable technical and organizational measures — including access controls, encryption in transit, and restricted internal access — to protect personal data against unauthorized access, loss, or misuse. No system is completely secure, and we cannot guarantee absolute security.
8. Your Rights
Under the Data Protection and Privacy Act, 2019, you have the right to: access the personal data we hold about you; request correction of inaccurate data; request deletion of your data, subject to legal retention requirements; object to or restrict certain processing; withdraw consent at any time where processing is based on consent; and lodge a complaint with the Personal Data Protection Office (PDPO) of the National Information Technology Authority – Uganda (NITA-U). To exercise these rights, contact us at privacy@campusplugug.com.
9. Children's Data
The Platform is not directed at children under 16. We do not knowingly collect personal data from children under 16 without verifiable parental consent. If we learn we have done so, we will delete the data.
10. Cross-Border Transfers
If personal data is transferred or stored outside Uganda (e.g., via cloud hosting providers), we take steps to ensure such transfers comply with the Data Protection and Privacy Act, 2019, including ensuring the receiving country or entity provides an adequate level of data protection.
11. Cookies
We use cookies and similar tracking technologies as described in our separate Cookie Policy.
12. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated via the Platform or by email. Continued use of the Platform after changes take effect constitutes acceptance.
13. Contact and Data Protection Queries
For privacy-related questions or to exercise your data rights, contact: CampusPlug UG Privacy Team, privacy@campusplugug.com. We are based in Kampala, Uganda.