1. Who we are

Catalogue Shoppers (catalogueshoppers.com) is operated by FIT Insights Group, the data controller for personal data collected on this website. Contact our data protection officer at catalogueshoppers@fitinsightsgroup.com.

2. What we collect

• Sellers: name, shop name, email, phone, WhatsApp number, address, country, business registration/TIN (optional), payout details, product content.
• Buyers: name, email, phone, delivery address, order history.
• Service providers (classifieds): name, photo, logo, contact, address, location, areas of operation, rates, licence number.
• Identity verification (providers and optionally shop owners): ID type and number and an image of the national ID/passport. These are stored in a private, access-restricted area, viewed only by authorised verification staff to confirm the ID matches the person’s photo, never published, and deleted within 90 days after an account closes.
• Reviews and reports: rating, feedback text, reviewer name and email (email not shown).
• Technical: IP address, device and browser, cookies, login and security logs.

Card and mobile money details are processed by Flutterwave; we do not store full card numbers or PINs.

3. Why we use it

• To create and run accounts and shops (contract).
• To pass order details to the seller so they can deliver (contract).
• To collect rent and keep financial records (legal obligation).
• To prevent fraud and secure the platform, including identity checks and anonymous, aggregated visitor statistics (legitimate interest).
• To send marketing, only with your consent – you can opt out at any time.

4. Sharing

When you order, your name, phone and delivery address are shared with that seller only. We use processors such as Flutterwave (payments), our web host, email delivery and security services. We never sell personal data.

5. Sellers’ duties

Sellers receive buyer data only to fulfil orders. They must not use it for unrelated marketing, share it, or keep it longer than necessary. Misuse leads to shop closure.

6. International transfers

Some processors may store data outside Uganda. We use providers with adequate safeguards.

7. Retention

Account data is kept while your account is active. Closed shops are deleted after 30 days; financial records are kept as required by tax law (typically 5–7 years).

8. Security

HTTPS encryption, firewall and malware scanning, brute-force login protection, two-factor authentication for administrators, role-based access, regular backups and updates.

9. Your rights

You may request access, correction, deletion or a copy of your data, object to processing, or withdraw consent by emailing catalogueshoppers@fitinsightsgroup.com. You may also complain to Uganda’s Personal Data Protection Office (PDPO).

10. Cookies

We use essential cookies for login and cart, and optional analytics cookies with your consent.

Last updated 9 November 2026.