1. Who controls your data
iPhone UG is operated by CreedStack Motions Ltd, an independent retailer operating from Kampala and delivering in Uganda and East Africa. For information handled through this website, numbered orders, WhatsApp, email and repair coordination, CreedStack Motions Ltd trading as iPhone UG is the data controller. Privacy contact / Data Protection Officer contact: info@creedmotions.store, telephone/WhatsApp +256 771 956 299, Kyisa Kyamaria · Shop No. K438, Kampala.
2. Information we collect
Depending on how you interact with us, we may collect your name, phone number, email, delivery town and address, product choices, order and payment confirmation details, communications, repair-device details, warranty and return history, review content, optional order reference, consent records, and basic technical records such as timestamps, browser information, security logs and IP-derived anti-abuse signals.
Please do not send passwords, PINs, full payment-card details, intimate information or unrelated content. Before a repair, back up and remove personal data where possible. We do not intentionally access device content unless necessary for an agreed diagnostic step.
3. Why and on what basis we use it
- Contract and steps you request: quotations, stock checks, orders, delivery, returns, warranty and repair coordination.
- Consent: optional marketing, publishing a review and any use that the law requires you to choose.
- Legitimate interests: customer service, fraud and abuse prevention, service improvement, record accuracy and protecting customers and the business—balanced against your rights.
- Legal obligations: tax, accounting, lawful requests, consumer protection, product safety and dispute records.
If required information is not supplied, we may be unable to fulfil the relevant order, delivery, repair or support request.
4. Product reviews
Published reviews display the chosen reviewer name, rating, title, review text, date and verification label. Email addresses are converted into a one-way hash for duplicate prevention and are never displayed. An optional order reference may be used to check purchase status. We may moderate, reject or remove unlawful, abusive, private, irrelevant, fraudulent or promotional content. Starter “editorial product notes” are written by iPhone UG and are clearly identified; they are not represented as customer purchases.
5. Sharing and international transfers
We share the minimum necessary information with service providers involved in hosting and database services, email, WhatsApp/Meta communications, optional Telegram administrator alerts, YouTube privacy-enhanced video embeds, delivery, repair coordination, professional advisers, fraud prevention and payment confirmation. Delivery outside Uganda may require sharing recipient and customs information with regional logistics providers.
Some providers may process information outside Uganda. Before transferring personal data, we use appropriate providers and safeguards and consider whether the destination offers protection consistent with Ugandan law. We may disclose information where required by law, a lawful authority, safety, fraud investigation, business reorganisation or the establishment or defence of legal claims.
6. Retention
We retain information only for its purpose and legitimate legal needs. Typical periods are: unsuccessful sales enquiries up to 24 months; repair and support records up to 24 months after closure; security logs up to 90 days; reviews until removed or a valid deletion request is completed; and completed transaction, tax, warranty and dispute records for the legally required period, commonly up to seven years. We may keep a restricted record longer where a dispute, fraud concern or legal hold requires it.
7. Security and incidents
We use access controls, limited collection, encrypted transport, private high-entropy order-tracking links, administrator-only sessions, one-way email hashing for reviews, provider safeguards and staff/process controls appropriate to the risk. A customer must keep their private tracking link confidential and report accidental disclosure so it can be replaced. No internet service is completely secure. If a personal-data breach creates a legal notification duty, we will notify the relevant authority and affected people as required.
8. Your rights
Subject to applicable law, you may ask whether we hold your information and request access, correction, completion, deletion, restriction, objection, portability where applicable, withdrawal of consent and review of a decision materially based only on automated processing. Withdrawing consent does not invalidate earlier lawful processing. We may request reasonable identity proof and may retain information the law requires.
Send requests to info@creedmotions.store. We aim to respond within the period required by law. You may also complain to Uganda’s Personal Data Protection Office.
9. Cookies, links and third parties
The site may use essential storage needed for security and functionality. Embedded YouTube videos use the privacy-enhanced youtube-nocookie.com domain, but playing a video may still connect to Google/YouTube. WhatsApp, maps, email and third-party links operate under their own privacy terms. We are not responsible for another service’s independent processing.
Our services are not directed to children. A person under 18 should use the site with a parent or guardian and should not submit an order, repair request or review without appropriate supervision.
10. Changes, contact and complaints
We may update this policy when services, providers or law change. Material changes will be identified by the updated date and, where appropriate, an additional notice. Questions or complaints should first be sent to info@creedmotions.store so we can investigate promptly. This policy is intended to reflect Uganda’s Data Protection and Privacy Act, 2019 and applicable regulations; it does not reduce rights granted by law.