Privacy Policy

CarFinder ("we", "us", "our") is an online car marketplace operating in Uganda, accessible at www.carfinder.co.ug. We are the data controller responsible for your personal information collected through this platform.

For privacy matters, contact us at: privacy@carfinder.co.ug

When you register:

• Full name and email address
• Phone number (for seller verification and buyer contact)
• Password (stored as a secure hash — we never see it in plain text)

When you list a car:

• Car details (make, model, year, mileage, price, description)
• Photos you upload
• Your location (district/city)

Automatically collected:

• IP address and device type
• Browser type and version
• Pages visited and time spent (via analytics)
• Cookies (see Section 7)

• To create and manage your account
• To publish and manage your car listings
• To verify sellers and prevent fraud
• To facilitate communication between buyers and sellers
• To send you transactional emails (listing approved, messages received)
• To improve the platform and detect abuse
• To comply with legal obligations under Ugandan law

We do not sell your data. We may share limited information with:

• Other users: Your display name, phone number (if opted in), and listing details are visible to buyers/sellers as part of normal platform use.
• Service providers: Hosting (Vercel), Supabase (database), cloud storage, email delivery, and analytics tools — all bound by data processing agreements.
• Law enforcement: Only when required by a valid legal order under Ugandan law.

We keep your data for as long as your account is active. If you delete your account, we remove your personal data within 30 days, except where required by law (e.g., transaction records may be kept for 5 years for tax purposes).

You have the right to:

• Access a copy of the data we hold about you
• Correct inaccurate personal data
• Delete your account and associated data
• Withdraw consent for marketing emails at any time
• Lodge a complaint with Uganda's Personal Data Protection Office (PDPO)

To exercise any of these rights, email privacy@carfinder.co.ug. We will respond within 14 days.

We use the following types of cookies:

• Essential cookies: Required for login sessions and security. Cannot be disabled.
• Analytics cookies: Help us understand how people use the site.
• Preference cookies: Remember your search filters and settings.

You can manage cookies in your browser settings at any time.

We implement industry-standard security measures including HTTPS encryption, hashed passwords, server-side input validation, and rate limiting on authentication endpoints. If you discover a vulnerability, please report it responsibly to security@carfinder.co.ug.

We may update this policy from time to time. We will notify you of significant changes via email or a prominent notice on the site. The "Last updated" date at the top reflects the most recent version.