Privacy Notice

This notice explains how INGREND-TX ("we", "us") uses personal information on this website and the IDIOT platform. It is written to follow the Data Protection and Privacy Act, 2019 of Uganda and good international practice. 1. WHO IS RESPONSIBLE INGREND-TX decides how and why your personal information is used (the "data controller"). Contact us about privacy at the contact details on our Contact page. Our address: the address shown on our Contact page. 2. WHAT WE COLLECT - Account details: name, e-mail, phone, organisation, customer type, password (stored only as a one-way hash). - Requests, quotations, projects, orders, invoices and payments you make with us, including messages and files you upload. - Delivery details you give us, such as an address. - Technical data needed to run and protect the service: session records, IP address, browser type, login and security events. - Messages you send through the contact form or support cases. 3. WHY WE USE IT, AND OUR LEGAL BASIS - To provide the services and products you ask for (contract). - To keep accounts and the platform secure, prevent fraud and meet legal, tax and accounting duties (legal obligation and legitimate interests). - To send you service messages such as verification, quotations, order and project updates. You can switch off optional notifications in your profile. - With your consent where consent is required, for example optional marketing. You can withdraw consent at any time. 4. YOUR FILES AND PROJECT INFORMATION Project files are visible only to you and the team members working on your project. We keep your project information confidential. We do not use your files or project information to train AI models unless you have given us written permission for that specific use. 5. WHO WE SHARE IT WITH We do not sell personal information. We share it only with service providers who help us operate (hosting, e-mail delivery, payment services, delivery and sourcing partners), under duties of confidentiality and security, and with authorities where the law requires. If a provider processes data outside Uganda, we take steps to make sure it is protected to a comparable standard. 6. HOW LONG WE KEEP IT We keep information only as long as needed for the purposes above and to meet legal, tax and accounting requirements. Accounting records are kept for the period required by law. When information is no longer needed we delete or anonymise it. 7. SECURITY We use access controls, encrypted connections, hashed passwords, activity logging and optional two-step verification. No system is perfectly secure; if a breach affects you we will notify you and the regulator as the law requires. 8. YOUR RIGHTS You may ask to access, correct or delete your personal information, to object to or restrict certain uses, and to receive a copy of the information you gave us. Write to the contact details on our Contact page. We will respond within a reasonable time and the period required by law. Some information must be kept to meet legal duties. You may also complain to Uganda's Personal Data Protection Office. 9. COOKIES See our Cookie Notice at https://ingrend-tx.duckdns.org/cookies. 10. CHANGES We may update this notice. The date at the top of the page shows when it last changed.