Privacy Policy | Bags & Beyond

Bags & Beyond sells bags in Uganda. This page explains what personal information we collect when you use this website, why we collect it, who sees it and what your choices are. We handle your information in line with Uganda's Data Protection and Privacy Act, 2019.

What we collect

Your account: your email address and a password. We keep only a scrambled version of the password, never the password itself. If you continue with Google, Google gives us your name and email address. We never see your Google password.
Your orders: your name, phone number, email address, delivery address, city or area, delivery notes and the bags you ordered. You can order without creating an account.
Saved bags: the bags you choose to save are kept in your shopping session, or in your account when signed in. Signing in or registering brings this browser's saved bags into your account. Saving a bag does not reserve it or subscribe you to marketing.
Checkout in progress: when you enter your contact and delivery details during checkout, we save the information you entered, the bags in your cart and any referral campaign label temporarily to help complete your requested checkout. These drafts are not orders, do not reserve stock, and do not authorise marketing contact. You can select "Forget saved details" on checkout to remove a draft immediately. Unfinished drafts without follow-up permission become eligible for deletion after one day, through routine housekeeping.
Cookies: we use cookies to keep you signed in, remember your cart, saved bags and access to guest order receipts, and protect our forms from forgery. We also use a first-party analytics cookie named bnb_visitor, lasting up to one year, to recognize repeat visits in the same browser. It is not used for advertising or tracking across other websites. Your light, dark or system appearance preference is saved in this browser's local storage until you change it or clear the browser's site data. We ask separately before loading the optional Meta advertising pixel; your marketing-cookie choice lasts up to 180 days.
Visit statistics: we count which pages and bags are opened, what is searched for, what kind of phone or computer is used and which website or app sent the visit. A random browser cookie lets us count repeat visits once across days, including before and after signing in. We store a pseudonymous code, not your account identity or raw IP address. Clearing cookies resets this identifier. Nothing is counted when your browser sends a "Do Not Track" or Global Privacy Control signal. Search text helps us plan stock; please do not enter personal details there. Common email and phone number patterns are filtered before recording. Detailed visit statistics are normally removed after 400 days. We keep a browser's first and latest visit times and visit count to distinguish new and returning visitors, until that browser has been inactive for 400 days. A new visit starts after 30 minutes of inactivity.
Bag suggestions: during a browsing visit, we use up to 12 recently opened bags in this browser's shopping session to suggest similar products. These preferences stop affecting suggestions after 30 minutes of inactivity. We do not use browsing history for these suggestions when your browser sends Do Not Track or Global Privacy Control. The bag you are viewing still guides the suggestions.
Advertising measurement: when you accept optional marketing cookies, Meta may receive product views, cart additions, checkout starts and order-submission events, including bag IDs, value and currency. We do not deliberately send names, email addresses, telephone numbers or delivery addresses in these events. Meta may set its own cookies. When an ad link includes UTM labels, we may retain its source/campaign with an order to compare results. We do not store raw Facebook click identifiers in order records.
Fonts: our pages load the Archivo font from Google Fonts, so your browser contacts Google to fetch it.

How we use it

To take, confirm, deliver and support your order, including a phone or WhatsApp call to confirm your drop-off location.
To email you about your order (received, confirmed, on the way, delivered or cancelled) and to reset your password.
To see which bags and pages are popular, so we can stock and improve the shop.
To temporarily preserve details entered during a checkout you requested, without sending unfinished-basket marketing messages.
Only with your separate marketing-cookie consent, to measure Meta advertising performance.
To keep our records and meet tax and accounting rules.
To keep the website secure and prevent misuse.

We do not sell your information. We normally email about orders and accounts; starting an unfinished checkout does not subscribe you to marketing.

Who sees it

Only the people and services we need to run the shop:

Our team, and the delivery rider who brings your order (your name, phone number and address).
The services that help us run the website: the host that runs it, the provider that stores our database, the service that sends our emails, the service that stores our product photos, and Google if you choose to sign in with it. Geoapify receives the address or place you enter so we can suggest locations and help our team identify the drop-off address. Delivery-area eligibility is checked using the details you provide; we no longer calculate delivery fees by road distance. We also keep order email delivery records to identify failed messages and retry them. They handle your information only to provide their service to us.
When Mobile Money payment is enabled and you select it, pawaPay and the selected MTN or Airtel Mobile Money provider receive your wallet number, requested amount, currency and transaction reference to process and verify the payment. We keep the result and payment reference for customer support, accounting and fraud prevention. We do not collect your Mobile Money PIN.
Meta, but only when you accept its optional advertising measurement cookies, receives the shopping events described above.
The authorities, when the law requires it.

Some of these services are outside Uganda, so your information may be processed or stored in other countries.

How long we keep it

We keep order records for as long as we need them for deliveries, returns, accounting and the law. We keep your account until you ask us to delete it. Unfinished checkout drafts without follow-up consent are eligible for deletion after one day, using routine housekeeping; older historic drafts and cleared summaries are removed after 30 days. Use "Forget saved details" on checkout or contact us to request earlier deletion. Housekeeping should run daily.

Marketing-cookie choice

Keeping it safe

This website uses HTTPS, passwords are stored in scrambled form and only our authorised staff can open the order records. No system is perfectly secure, so please choose a strong password and keep it private.

Browsing preferences

Keep your guest receipt email private: its link opens that order without a password. Clearing cookies or signing out removes this browser's guest access and saved selections. The receipt link can reopen the order, and bags already saved to an account remain in that account.

When you view another photo of a bag, we may bring up to three other bags from that category forward in your remaining mixed catalogue results. This preference is stored in your shopping session and expires after 30 minutes without a new photo-interest signal. Catalogue ordering resets after 30 minutes without browsing the mixed catalogue. We do not use this preference when your browser sends Do Not Track or Global Privacy Control.

Your rights

You can ask us to show you the information we hold about you, to correct it or to delete it (we may have to keep order records that the law requires us to keep). You can also object to how we use it. Tell us and we will reply as soon as we can. If you are not happy with our answer, you can complain to Uganda's Personal Data Protection Office.

Changes

If we change this policy, we will update the date at the top of this page.

Contact us

Questions about your information? Message us on WhatsApp or call +256 789 000 053 between 8:00 AM and 8:00 PM EAT.

Continue shopping