Privacy Policy

1. Who we are

GiftHub UG is a gift retail and delivery service operated by Creed Motions in Kampala, Uganda. For purposes of Uganda’s Data Protection and Privacy Act, 2019, GiftHub UG determines why and how personal data is used for its retail operations.

Service and contact address: Liberty Tower, Shop L3A-04, opposite King Fahad Plaza, Kampala Road, Kampala, Uganda.
Email: info@creedmotions.store
WhatsApp/telephone: +256 771 956 299

2. Information we collect

Information you provide

• Customer name, telephone number, email address and preferred contact method.
• Recipient name, telephone number, delivery address, landmark and delivery instructions.
• Order selections, occasion, budget, delivery date, gift message and surprise-delivery preference.
• Personalisation content such as names, photographs, dates, artwork, inscriptions and company branding.
• Payment method, transaction reference and payment confirmation. We do not ask for or store your Mobile Money PIN, OTP, password or full payment-card details.
• Messages, enquiries, complaints, refund requests and voluntary customer reviews.

Information collected automatically

The website may receive basic technical information such as IP address, browser type, requested pages, device information, timestamps and security events through our hosting and content-delivery providers. Your bag and theme preference are stored locally in your browser.

Information about another person

When you provide recipient details, you confirm that you are authorised to use them for arranging the requested gift and delivery. We use those details only as reasonably necessary to fulfil the order, communicate about delivery and handle related support.

3. Why and how we use information

• To prepare, personalise, confirm, deliver and support orders.
• To contact customers and recipients about availability, access, timing, substitutions and delivery.
• To generate order references, verify payment and maintain transaction records.
• To respond to enquiries, resolve disputes, prevent fraud and protect customers and the business.
• To publish a review only after order verification and with the reviewer’s consent.
• To improve product selection, website performance, accessibility and customer service.
• To comply with tax, accounting, court, regulatory and other legal obligations.

We process information where it is necessary to perform or prepare an order contract, where you have consented, where the law requires it, or where a legitimate operational or security interest applies without overriding your rights.

4. Who may receive information

We share only what is reasonably necessary with:

• delivery riders and logistics partners, who receive recipient contact and delivery information;
• approved florists, bakers, printers, decorators and product suppliers helping fulfil a specific order;
• Mobile Money operators, banks or payment providers used by the customer;
• website hosting, security, email and communications providers, including WhatsApp where you choose that channel;
• professional advisers, insurers or authorities where required to establish rights, prevent harm or comply with law.

Service providers are expected to use information only for the assigned service and to protect it appropriately. Some communications or hosting providers may process information outside Uganda. Where applicable, we use suitable safeguards or rely on your informed choice of the service.

5. How long we keep information

We keep information only for its stated purpose and any period required by law. Order, payment-confirmation, tax and dispute records may generally be retained for up to seven years. Uncompleted enquiries are normally removed or anonymised after 12 months. Personalisation photographs and artwork are normally deleted within 90 days after successful delivery unless you ask us to keep them for a repeat order or the law requires longer retention. Review records remain while the review is published or until a valid removal request is resolved.

6. Security

We use access controls, limited staff access, HTTPS, secure hosting, transaction references and verification procedures designed to protect information. No internet service can guarantee absolute security. If a breach creates a real risk to affected people, we will take reasonable containment steps and provide notifications required by applicable law.

7. Your data-protection rights

Subject to applicable law and verification of identity, you may ask us to:

• confirm whether we hold personal data about you and provide access to it;
• correct information that is inaccurate, incomplete, excessive or out of date;
• stop processing that causes or is likely to cause unwarranted substantial damage or distress;
• stop using your information for direct marketing;
• delete, block or destroy information when legally appropriate;
• withdraw consent for future consent-based processing;
• explain or reconsider a significant decision based solely on automated processing.

Send requests to info@creedmotions.store. We may request reasonable proof of identity and details that help locate the record. You may also lodge a complaint with Uganda’s Personal Data Protection Office.

8. Cookies and browser storage

The website uses local browser storage to remember your bag and selected colour theme. Our hosting and security providers may set strictly necessary cookies to deliver the site, balance traffic and detect abuse. We do not currently use behavioural advertising cookies. Clearing browser storage removes saved bag and theme information from that device.

9. Children

Our store is intended for customers able to enter a purchase transaction. We do not knowingly request personal data directly from children. A parent or guardian should place an order involving a child and should provide only the details needed to prepare or deliver the gift.

10. Changes to this policy

We may update this policy when our services, providers or legal obligations change. The effective date above will be revised, and material changes will be highlighted on the website where appropriate.