Privacy Policy

Last updated: 10 August 2026

1. Who we are

VendorPlus is an inventory, point-of-sale and business management platform owned and operated by Band Contractors Ltd ("we", "us", "our"), a company registered in Uganda. This Privacy Policy explains what information we collect when you use VendorPlus (the "Service"), why we collect it, and what rights you have over it.

This policy should be read together with our Terms of Service.

2. Information we collect

Category	Examples
Account information	Name, username, email address, phone number, business name, branch/store name, location, and your encrypted password.
Business records	Items, stock levels, sales and purchase transactions, invoices, expenses, payments and the reports generated from them.
Contact records you enter	Details of your customers, suppliers and staff that you choose to record, such as names, phone numbers, email addresses and tax identification numbers.
Billing information	Subscription plan, billing history and payment references. Card details are handled by our payment providers, not stored by us.
Technical information	IP address, browser and device type, pages visited, timestamps, and application logs used for security and troubleshooting.

3. How we use your information

to create and administer your account and provide the Service;
to store, process and display the business records you enter;
to manage subscriptions, trials, billing and renewals;
to provide customer support and respond to your enquiries;
to secure the Service, detect and prevent fraud, abuse and unauthorised access;
to maintain backups and restore data after a failure;
to improve performance, fix defects and develop new features;
to send service notices about your account, and — where you have not opted out — occasional product updates;
to comply with legal, tax and regulatory obligations.

We do not sell your personal information, and we do not share your business records with other customers or use them for advertising.

4. Your role as data controller

Where you enter personal information about your own customers, suppliers or staff, you are responsible for that information: for having a lawful basis to collect it, for its accuracy, and for responding to requests from those individuals. We process it on your behalf and only as needed to provide the Service.

5. When we share information

We share information only in these circumstances:

Service providers — hosting, backup, email and payment providers who process data on our instructions and under confidentiality obligations;
Legal requirements — where disclosure is required by law, court order or a lawful request from a competent authority;
Protection of rights — where necessary to investigate fraud, enforce our Terms, or protect the safety and rights of users;
Business transfer — if our business is merged, acquired or reorganised, subject to this policy continuing to apply;
With your instruction — where you ask us to share or export data, or enable an integration.

6. Data retention

We keep your account and business records for as long as your account is active. After termination, you may request an export within 30 days, after which we may delete or anonymise your data, except where a longer period is required for legal, tax, accounting or dispute-resolution purposes. Backups are rotated on a regular cycle.

7. Security

We apply reasonable technical and organisational measures to protect your information, including encrypted password storage, role-based access controls within the application, restricted administrative access and regular backups.

No system can be guaranteed completely secure. You are responsible for keeping your login credentials confidential, for setting appropriate user permissions for your staff, and for informing us promptly if you suspect any unauthorised access to your account.

8. Your rights

Subject to applicable Ugandan data protection law, you may:

request access to the personal information we hold about you;
ask us to correct information that is inaccurate or incomplete;
request deletion of your personal information, where we are not required to keep it;
object to or ask us to restrict certain processing;
request an export of your data in a commonly used format;
withdraw consent for optional communications at any time.

To exercise any of these rights, contact us using the details in section 12. We will respond within a reasonable period and may need to verify your identity first.

9. Cookies and local storage

The Service uses cookies and similar browser storage that are necessary for it to work — principally to keep you signed in, maintain your session, remember interface preferences and support offline capability. We do not use third-party advertising cookies. Blocking essential cookies will prevent you from signing in.

10. Children

The Service is intended for businesses and is not directed at children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with information, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "last updated" date above shows the current version. Where changes are material, we will give reasonable notice through the Service or by email before they take effect.

12. Contact us

If you have questions about this policy or how your information is handled:

Band Contractors Ltd, Kampala, Uganda
Email: hello@vendorplusuganda.com
Web: www.vendorplusuganda.com

← Back to Sign Up