Skip to content
PleasureZone

Privacy Policy

Last updated: 14 August 2026

Who we are

PleasureZone Uganda ("we", "our", "us") operates pleaures.com, an online store for intimate wellness products serving customers in Uganda. This policy explains what personal data we collect, why, who it is shared with, how long we keep it, and the rights you have under Uganda's Data Protection and Privacy Act, 2019 and its 2021 Regulations.

Privacy questions and requests: [email protected] or +256 752 052 202.

What we collect, and why

When you order or create an account

  • Name, phone number, email address — to process and deliver your order and send order updates. Phone numbers are stored encrypted.
  • Date of birth — collected at account creation solely to verify you are 18 or older (a legal requirement for this store). Never displayed, never used for marketing, deleted with your account.
  • Delivery address, including an optional precise GPS pin if you choose to set one at checkout — riders use it to find you. The pin is optional; a text address works.
  • Order history — receipts, refunds and buyer protection depend on it.
  • Payment records — we store the payment method, amount and status. We never see or store card numbers: card and Mobile Money payments are entered directly with our payment processor (Flutterwave). Saved payment methods keep only the type, network and last digits.

When you browse

  • Page views and searches — with IP address and approximate location, used for store analytics (kept 180 days, see Retention).
  • Login history and device information for account security (new-device alerts, session management).
  • Analytics and advertising cookies only if you accept the cookie banner. If you decline, no analytics or marketing trackers load — only cookies essential for the cart, login and security. This is enforced technically, not just stated.

Who your data is shared with

We do not sell personal data. We share it only with the services needed to run the store:

  • Flutterwave — payment processing.
  • CJ Dropshipping and AliExpress (China) — for products marked "From Abroad", your name, phone number and delivery address are sent to the fulfillment partner so the item can be shipped to you. This is a transfer of your data outside Uganda; we send only what delivery requires. If you prefer not to have your details sent abroad, order locally-stocked items only.
  • Cloudflare — content delivery and DDoS protection (traffic passes through it).
  • Telegram — only if you connect the Telegram bot or order through it.
  • Google Analytics, Meta and TikTok pixels, Microsoft Clarity — only after you accept the cookie banner.
  • Couriers and our delivery riders — name, phone, address and landmark for your delivery only.

Our email is self-hosted on our own servers — order confirmations and receipts are not handed to a third-party email provider.

How long we keep it

  • Guest orders: personal details (name, address, phone, email) are automatically scrubbed about 30 days after delivery. The financial record survives without your identity.
  • Account holders: your data is kept while your account exists. You can delete your account yourself at any time (Account → Settings), which scrubs your personal data across our systems; anonymized order totals are retained for accounting. You can also enable automatic scrubbing of order history older than a period you choose.
  • Browsing analytics (page views, searches): deleted after 180 days.
  • Login history: 90 days.
  • Marketing suppression list: kept indefinitely — deleting an unsubscribe would re-subscribe you.
  • Statutory records: when your personal data is deleted, a minimal identity snapshot (name, contact, order references) is retained in an encrypted, access-restricted archive for 5 years — the record-keeping period Ugandan tax and financial law requires — and is then destroyed automatically. It is not used for anything except responding to lawful requests from authorities.

Your rights

Under the Data Protection and Privacy Act, 2019, you have the right to:

  • Access the personal data we hold about you — download it yourself anytime from Account → Settings ("Download Your Data"), or email us;
  • Correct inaccurate data (most details are editable in your account);
  • Delete your data — self-service account deletion is built in, and guest data can be deleted on request (we may need to retain records tied to open disputes, active payment plans, or legal obligations);
  • Object to direct marketing — every marketing email has an unsubscribe link, the toggle lives in Account → Settings, and the opt-out is enforced for all marketing, not just newsletters;
  • Complain to the regulator — the Personal Data Protection Office (PDPO) of Uganda, pdpo.go.ug, if you believe we have mishandled your data.

Discretion, by design

  • Orders ship in plain, unmarked packaging with a neutral sender name.
  • Payments are handled by the payment processor — statements show the processor's billing reference, not a list of what you bought.
  • Order receipts can be masked at checkout so item names don't appear.
  • Incognito gift orders let a recipient enter their own address — the buyer never sees it, and the recipient doesn't see prices.

Security

  • All traffic is encrypted (HTTPS/TLS); passwords are hashed; stored phone numbers are encrypted.
  • Sessions use secure, httpOnly cookies; two-factor authentication and passkeys are available for your account.
  • Card data never touches our servers (processed by Flutterwave).

Age restriction

This store is for adults 18 years or older. We do not knowingly collect data from minors; if you believe a minor has used the site, contact us and we will delete the data.

Changes to this policy

When our practices change, this page changes with them — the "last updated" date above reflects the most recent revision. Material changes will be announced on the site.

Contact