Data Privacy Notice

INTRODUCTION

LivePay ("we", "our", "us") is committed to protecting your privacy and ensuring the security of your personal data. This Data Privacy Notice explains how we collect, use, disclose, and safeguard your information when you use our services, in compliance with the Data Protection and Privacy Act, 2019 of Uganda.

DATA CONTROLLER

LivePay is the data controller for the personal data we process. Our registered address is:

INFORMATION WE COLLECT

We collect several types of information from and about users of our services:

• Personal Identification Information: Name, date of birth, national ID number, passport details
• Contact Information: Email address, phone number, physical address
• Financial Information: Bank account details, transaction history, payment information
• Technical Information: IP address, browser type, device information, usage data
• Business Information: Company registration details, tax information, business activities

HOW WE COLLECT YOUR DATA

We collect data through various methods:

• Direct interactions: When you register for an account, use our services, or contact our support team
• Automated technologies: As you interact with our website and mobile applications
• Third parties: From business partners, financial institutions, and identity verification services
• Public sources: From publicly available sources for compliance purposes

HOW WE USE YOUR INFORMATION

We use your personal data for the following purposes:

• To provide and maintain our services
• To process transactions and prevent fraud
• To comply with legal and regulatory obligations
• To communicate with you about our services
• To improve our products and services
• To protect the security of our systems and users

LEGAL BASIS FOR PROCESSING

We process your personal data based on the following legal grounds:

• Performance of contract: To provide the services you have requested
• Legal obligation: To comply with anti-money laundering and other regulatory requirements
• Legitimate interests: To operate and improve our business, prevent fraud, and ensure security
• Consent: For specific purposes where we have obtained your explicit consent

DATA SHARING AND DISCLOSURE

We may share your personal data with:

• Financial institutions: Banks and payment processors to facilitate transactions
• Regulatory authorities: As required by law for compliance purposes
• Service providers: Companies that provide services on our behalf (e.g., cloud hosting, customer support)
• Business transfers: In connection with a merger, acquisition, or sale of assets
• Legal requirements: When required by law, court order, or governmental authority

DATA RETENTION

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Our standard retention periods are:

• Account information: 7 years after account closure
• Transaction records: 7 years from transaction date
• Marketing data: Until consent is withdrawn
• Support communications: 3 years from last interaction

YOUR DATA PROTECTION RIGHTS

Under the Data Protection and Privacy Act, you have the following rights:

• Right to access: You can request copies of your personal data
• Right to rectification: You can request correction of inaccurate or incomplete data
• Right to erasure: You can request deletion of your personal data under certain circumstances
• Right to restrict processing: You can request limitation of how we use your data
• Right to data portability: You can request transfer of your data to another organization
• Right to object: You can object to our processing of your personal data

To exercise these rights, please contact us using the details provided below.

INTERNATIONAL DATA TRANSFERS

We primarily store and process your data within Uganda. When international transfers are necessary, we ensure appropriate safeguards are in place to protect your data in accordance with Ugandan data protection laws.

DATA SECURITY

We have implemented appropriate technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, secure network architecture, and regular security assessments.

CHANGES TO THIS NOTICE

We may update this Data Privacy Notice from time to time. We will notify you of any changes by posting the new notice on this page and updating the "Last updated" date. We encourage you to review this notice periodically.

CONTACT US

If you have any questions about this Data Privacy Notice or our data practices, please contact our Data Protection Officer:

• By email: support@livepay.me
• By phone: +256 76 323 3480
• By post: Data Protection Officer, LivePay Uganda Limited, Plot 123, Innovation Hub, Kampala, Uganda