Privacy Policy
This policy explains what personal information Oasis Ruzi Car Dealers collects about you, why we need it, how long we keep it, and what you can ask us to do with it. It applies to this website, our mobile app and any dealing you have with our sales team.
The short version. We collect what we need to sell you a vehicle and keep in touch about it — nothing more. We never sell your data. Analytics and marketing cookies are off until you switch them on. You can ask to see, correct or delete your information at any time by emailing info@oasisruzi.com.
1. Who is responsible for your information
Oasis Ruzi Car Dealers is the data controller for the personal information described in this policy. That means we decide what is collected and why, and we are answerable for it. Our registered office is Banda Kampala Road, Kampala, Uganda.
Questions about this policy should go to info@oasisruzi.com.
2. What we collect and why
We only collect information for a specific purpose. Here is the full list.
| Information | Why we need it | Our lawful basis |
|---|---|---|
| Name, phone, email | To answer your enquiry, book a test drive and keep you updated on a vehicle. | Your consent, and the steps needed to enter a contract. |
| Identification documents National ID, passport, driving permit |
To verify who you are before a sale, a test drive or a hire purchase agreement, and to meet our legal obligations. | Performance of a contract and compliance with the law. |
| Financial information income, employment, references, payment records |
To assess a hire purchase or finance application and to keep accurate records of what has been paid. | Performance of a contract. This is special personal data under section 9 of the Act and is handled with extra care. |
| Vehicle and trade-in details | To value a trade-in, arrange import or clearing, and register the vehicle to you. | Performance of a contract. |
| Messages and call records | To keep a record of what was agreed and to train and improve our service. | Our legitimate interest in running the business properly. |
| Technical data IP address, device, pages viewed |
To keep the site secure and, if you allow it, to understand which vehicles people are looking at. | Security: legitimate interest. Analytics: only with your consent. |
We do not ask for information about your health, religion, political views or sexual life, and you should not send it to us. If you do, we will delete it.
3. Where your information comes from
Almost always, directly from you — a form on this site, a WhatsApp message, a phone call or a visit to the yard. Occasionally we receive information from:
- a finance partner or bank, where you have applied for funding through them;
- a clearing or shipping agent, where we are importing a vehicle for you;
- a referrer, where someone has passed on your contact details with your agreement.
4. Who we share it with
We never sell your personal information, and we never share it for someone else's marketing. We share only what is necessary, and only with:
- Banks and finance partners — where you ask us to arrange funding.
- Insurers, clearing agents and URA — to register, insure, import or clear a vehicle in your name.
- Our service providers — web hosting, email and SMS delivery. They act on our instructions only and may not use your data for their own purposes.
- Professional advisers and authorities — our accountants and lawyers, or a court, the police or a regulator where the law requires it.
5. Sending information outside Uganda
Some of the services we rely on — email and website hosting in particular — store data on servers outside Uganda. Section 19 of the Data Protection and Privacy Act allows this where the receiving country has adequate protection, or where you have consented. We choose providers that offer recognised safeguards and we only send what is needed.
6. How long we keep it
| Record | Kept for |
|---|---|
| Enquiries that do not lead to a sale | 24 months, then deleted |
| Sale and hire purchase records | 7 years after the agreement ends — required for tax and accounting |
| Identification documents | 7 years alongside the sale record |
| Newsletter subscription | Until you unsubscribe |
| Website analytics | 26 months maximum |
7. How we protect it
- The whole site runs over an encrypted HTTPS connection.
- Passwords are stored hashed — nobody at our end can read yours.
- Access to customer records is limited to staff who need it to do their job.
- Paper documents are kept locked at our offices.
If personal data is ever lost or accessed by someone who should not have it, we are required to notify the Personal Data Protection Office immediately, and we will tell you directly if it affects you.
8. Your rights
You have real, enforceable rights over your information — to see it, correct it, delete it, object to how we use it, and more. They are set out in full, with instructions on how to use them, on our Data Protection page.
9. Marketing
We will only send you marketing if you have asked for it, or if you have bought from us and it relates to something similar. Every message has an unsubscribe link, and you can opt out at any time by replying STOP or emailing us. Opting out of marketing does not stop service messages about a vehicle or an agreement you already have with us.
10. Children
This site is not intended for anyone under 18, and we do not knowingly collect children's data. Under section 8 of the Act, a parent or guardian must consent before a child's personal data is processed. If you believe a child has given us information, tell us and we will remove it.
11. Cookies
We use a small number of cookies. Necessary ones keep the site working; analytics and marketing cookies stay off until you turn them on. See the Cookie Policy or change your preferences now.
12. Changes to this policy
When we change this policy we update the review date at the top of the page. If a change materially affects how we use your information, we will tell you directly rather than rely on you noticing.
13. Contact and complaints
For anything in this policy, write to info@oasisruzi.com. We acknowledge within 2 working days and answer fully within 7 days.
If you are unhappy with our answer you can complain to the Personal Data Protection Office at NITA-U, which regulates data protection in Uganda.