1. Who we are

This Privacy Policy is issued by Vigo Paints ("we", "us", or "our").

We manufacture and supply paints and related products from our base in Uganda, and we welcome customers and project orders from other locations. Our registered / trading address is:

Plot 1215 Block 248, Kawuku, Bunga-Ggaba Rd, Kampala, Uganda, P.O. Box 127208

Website: https://www.vigopaints.com

If you have questions about this policy or how we handle your data, contact us using the details in Section 14.

2. Scope of this policy

This Privacy Policy applies to personal information we collect when you:

• Visit or use our website at www.vigopaints.com and related pages
• Submit our online contact or inquiry form
• Contact us by phone, email, WhatsApp, or in person at our premises
• Browse our colour chart or request a quote
• Interact with product, colour, gallery, or service pages and related features

It does not cover websites, apps, or services controlled by third parties that we may link to (for example WhatsApp or Google). Those services have their own privacy policies.

3. Information we collect

We collect only what we need to run our business and respond to you. This may include:

3.1 Information you provide

• Identity and contact details — name, phone number, email address, and any business or organisation name you share
• Inquiry and project details — project type, products or colours of interest, message content, location of a property or job site, quantities, timelines, and other details you choose to send
• Order and customer records — information needed to quote, confirm, deliver, or invoice products and services (for example delivery address, purchase history, and payment references), when you become a customer
• Communications — content of emails, WhatsApp messages, calls notes, and other correspondence with our team

3.2 Information collected automatically

When you browse our website, we and/or our service providers may collect:

• IP address, approximate location derived from IP, browser type, and device information
• Pages visited, referring/exit pages, time spent, and click or interaction events
• Technical logs needed for security, performance, and troubleshooting (for example request timestamps and error records)

If Google Analytics (or similar analytics) is enabled on our site, usage data may be processed by Google as described in Section 7.

3.3 Information we do not intentionally collect

We do not operate user accounts on this website, and we do not intentionally collect sensitive personal data (such as health, biometric, or religious information) through the site. Please do not include sensitive personal data in inquiry forms or messages unless we specifically and lawfully request it for a clear purpose.

4. How we collect information

• Directly from you — via the contact form, email, phone, WhatsApp, trade inquiries, site visits, or when you place an order
• Automatically — through cookies, analytics tags, and standard server or hosting logs when you use the website
• From your devices and browser — when your email client opens after a form submission (our current contact form prepares a message to info@vigopaints.com using details you entered)

5. How we use your information

We use personal information to:

• Respond to inquiries, provide quotes, and advise on products, colours, and applications
• Process, fulfil, and support orders and deliveries
• Communicate about your project, appointments, invoices, warranties, or after-sales issues
• Improve our website, product information, and customer experience
• Measure website performance and campaign effectiveness (where analytics is enabled)
• Protect our business, website, staff, and customers against fraud, abuse, or security risks
• Comply with legal, tax, accounting, and regulatory obligations in Uganda
• Send business-related updates you have requested or that relate to an existing customer relationship (you can ask us to stop non-essential marketing messages at any time)

We do not sell your personal information to third parties.

6. Legal bases for processing

Where the Data Protection and Privacy Act, 2019 (Uganda) and related regulations apply, we process personal data on one or more of these bases:

• Consent — where you voluntarily submit information or opt in to communications
• Contract / pre-contract steps — to respond to quotes, provide services, or fulfil orders you request
• Legitimate interests — to operate, secure, and improve our website and business, balanced against your rights
• Legal obligation — where the law requires us to keep or disclose certain records

7. Sharing your information

We share personal information only when reasonably necessary for the purposes above. Typical recipients include:

• Service providers — website hosting, analytics (for example Google Analytics when configured), email infrastructure, and IT support, under appropriate confidentiality arrangements
• Messaging platforms— if you contact us via WhatsApp, your messages are also processed under Meta/WhatsApp's terms and privacy policy
• Professional advisers — lawyers, accountants, insurers, or auditors when required
• Authorities — courts, regulators, or law enforcement when required by law or to protect rights and safety
• Business transfers — if we restructure, merge, or sell assets, relevant customer data may transfer to the successor entity subject to this policy or equivalent protections

We require service providers who process data for us to use it only for the agreed purposes and to apply reasonable security measures.

8. Cookies and analytics

Our website may use cookies and similar technologies (including local storage) to remember preferences, understand traffic, and improve performance.

If Google Analytics is enabled via our configuration, Google may collect usage data such as page views, device/browser information, and approximate location. We may also send anonymised/custom event labels (for example WhatsApp clicks, form submissions, colour inquiries, PDF downloads, or call clicks) to understand which features people use.

You can limit this tracking by:

• Adjusting your browser cookie or tracking settings
• Using browser privacy tools or extensions
• Installing Google's analytics opt-out tools where available for your browser

Blocking cookies or analytics may limit some non-essential site features but should not stop you from browsing product information or contacting us.

9. Data retention

We keep personal information only as long as needed for the purposes described in this policy, including:

• Inquiry records — typically for a reasonable period to follow up and for internal reference
• Customer, order, and tax-related records — for the period required by Ugandan law and good business practice
• Website analytics and logs — for shorter operational periods unless needed for security investigations

When information is no longer needed, we delete it or irreversibly anonymise it where practicable.

10. Security

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, or alteration. No method of transmission over the internet or electronic storage is completely secure; we cannot guarantee absolute security.

Please protect your own devices and email accounts when communicating with us, especially when sharing payment or delivery details.

11. International transfers

Our primary operations are in Uganda. Some service providers (for example website hosting, analytics, or email/cloud tools) may process data on servers outside Uganda. Where that happens, we take steps we consider reasonable in the circumstances to ensure appropriate safeguards consistent with applicable law.

12. Your rights

Subject to the Data Protection and Privacy Act, 2019 and any applicable exceptions, you may have the right to:

• Request access to personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request deletion or restriction of processing in certain cases
• Object to certain processing, including direct marketing
• Withdraw consent where processing is based on consent (without affecting prior lawful processing)
• Lodge a complaint with Uganda's data protection regulator where applicable

To exercise these rights, contact us using Section 14. We may need to verify your identity before responding. We will aim to respond within a reasonable time and as required by law.

13. Children

Our website and services are directed to adults and businesses. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us so we can delete it where appropriate.

14. Third-party links and tools

Our site may link to third-party platforms (including WhatsApp, maps, social networks, or payment tools). We are not responsible for the privacy practices of those third parties. Review their policies before sharing information with them.

15. Changes to this policy

We may update this Privacy Policy from time to time to reflect operational, legal, or technical changes. The "Last updated" date at the top will change when we do. Continued use of the website after an update constitutes acceptance of the revised policy, unless applicable law requires a different approach (for example fresh consent).

16. Contact us

For privacy requests or questions, contact:

You can also reach us via our Contact page.