Privacy Policy

Version 2026-10. This explains how Osubula talks Solutions handles personal information in the bar and restaurant management system, in line with Uganda's Data Protection and Privacy Act, 2019.

Who is responsible for what

Each bar or restaurant is the controller of the information it records about its own customers and staff. We act as the processor: we host that information and handle it only to run the service for that business. We are the controller only for the details of the person who signs up (name, email, phone) and for billing records.

What we hold

How we use it

To provide and secure the service, send invoices and reminders, give support, and keep backups. We do not sell personal information and do not use it for advertising.

Separation and security

Every business has its own database, so one business cannot see another's records. Connections are encrypted, passwords are hashed, and backups are kept. No system is perfectly secure; tell us at once if you suspect a problem.

Sharing

We share information only with service providers needed to run the service (hosting, email delivery, backup storage), or when the law requires it.

Keeping and deleting

Records are kept while the account is active. When a business leaves, its data is kept for 30 days and then deleted, except billing records we must keep for accounting.

Your rights

You may ask to see, correct or delete personal information we hold about you. Customers of a bar should ask that bar first. You may also complain to the Personal Data Protection Office in Uganda.

Contact

Osubula talks Solutions, WhatsApp +256789318836. See also our Terms of Service.