Impact Woods Ltd. Privacy Notice

Impact Woods Ltd. (“Impact Woods,” “we,” “us” or “our”) respects your privacy and is committed to handling personal data fairly, lawfully and securely.

This Privacy Notice explains how we collect, use, store, disclose and protect personal data when you:

• Visit https://impact-woods.com/
• Submit an enquiry or lead form
• Request a quotation, consultation or site visit
• Contact us by telephone, WhatsApp, email or social media
• Purchase or enquire about our products and services
• Interact with our advertisements, including advertisements on Google

This Notice should be read in accordance with Uganda’s Data Protection and Privacy Act, 2019, the Data Protection and Privacy Regulations, 2021, and other applicable laws.

Impact Woods Ltd. is the data controller responsible for deciding how and why personal data covered by this Notice is collected and used.

You may contact us about this Notice or your personal data using the following details:

Depending on how you interact with us, we may collect the following categories of personal data.

Contact and identification information

• Name
• Telephone or WhatsApp number
• Email address
• Town, district, city or project location
• Preferred method of contact

Project and customer information

• Product or service of interest
• Project measurements, photographs, plans or drawings
• Design preferences and material choices
• Proposed project timeline
• Budget information, where voluntarily provided
• Site-visit and appointment details
• Quotations, invoices, payment and transaction records
• Warranty and after-sales information
• Messages, feedback and other information you provide

Website, device and advertising information

• Internet Protocol address
• Device and browser type
• Pages visited and actions taken on our website
• Referring website, advertisement or search
• Approximate location
• Cookie, analytics and advertising identifiers
• Date and time of website interactions

We do not request sensitive personal data through our ordinary advertising, booking or enquiry forms. Please do not submit health, financial-account, identification-document or other sensitive information unless we specifically request it for a lawful and necessary purpose.

We may collect personal data:

• Directly from you when you complete a form
• When you call, message, email or visit us
• Through WhatsApp and social-media platforms
• During consultations, measurements, site visits and projects
• Through cookies, advertising tags and analytics tools
• Through Google Ads, Google Forms and related Google services
• From contractors or representatives acting on your behalf
• From service providers acting on our behalf

Where we receive your information from another person, we will provide the relevant privacy information as soon as reasonably practicable, unless an applicable legal exception applies.

Providing personal data is generally voluntary.

However, we need certain information—such as your name, contact number, project type and location—to respond to an enquiry, arrange a site visit, prepare a quotation or perform a contract.

If you do not provide the information marked as required, we may be unable to respond, arrange the requested service, prepare an accurate quotation or proceed with your project.

Information not marked as required is optional. Choosing not to provide optional information will not prevent you from making a general enquiry, although it may limit how accurately we can assess your needs.

We may use personal data to:

• Respond to enquiries
• Contact you about your project
• Arrange consultations, measurements, appointments and site visits
• Prepare designs, proposals and quotations
• Manufacture, supply and install products
• Manage payments, contracts and customer records
• Provide warranty and after-sales support
• Communicate project updates
• Improve our products, website and customer service
• Measure and improve advertising performance
• Protect our website, customers and business against misuse or fraud
• Maintain accounting, tax and transaction records
• Establish, exercise or defend legal claims
• Comply with legal and regulatory obligations

We will not use personal data for an unrelated purpose unless the new use is compatible with the original purpose, you consent to it, or the use is otherwise authorised by law.

Depending on the circumstances, we process personal data because:

• You have given informed consent
• Processing is necessary to respond to your request or take steps toward a contract
• Processing is necessary to perform a contract with you
• Processing is necessary to meet a legal obligation
• Processing is necessary for a lawful and legitimate business purpose, where permitted and where your rights are not unfairly affected
• Processing is necessary to establish, exercise or defend a legal claim

Where processing is based on consent, you may withdraw that consent. Withdrawal will not affect processing that was lawful before consent was withdrawn.

We may send marketing messages where you have consented or where otherwise permitted by law.

You can stop receiving marketing communications at any time by:

• Replying with a request to stop
• Using an available unsubscribe option
• Calling or messaging +256 752 993 659

Opting out of marketing will not prevent necessary communications about an active enquiry, appointment, quotation, payment or project.

Impact Woods Ltd. does not sell personal data or contact lists for third-party marketing.

Our website may use cookies, Google tags and similar technologies to:

• Operate and secure the website
• Understand website usage
• Measure advertising performance
• Identify which advertisements lead to enquiries
• Improve the relevance of our advertising

These technologies may collect device, browser, usage and advertising information.

You can manage or block cookies using your browser settings. Blocking some technologies may affect website functionality or the accuracy of our advertising measurement.

Where consent is required for non-essential cookies or advertising technologies, we will seek that consent before using them.

Where reasonably necessary and legally permitted, personal data may be disclosed to:

• Authorised Impact Woods Ltd. employees
• Designers, surveyors, craftsmen, installers and contractors
• Website-hosting and information-technology providers
• Advertising, analytics and communication providers
• Google, when we use Google Ads, Google Forms, Google Analytics or related services
• Meta, when you communicate through WhatsApp, Facebook or Instagram
• Payment, accounting and business-administration providers
• Accountants, auditors, insurers and legal advisers
• Government authorities, regulators, courts or law-enforcement bodies where required by law
• A successor organisation following a lawful sale, merger or restructuring of the business

Service providers are expected to process personal data only for authorised purposes and to apply appropriate security measures.

Impact Woods Ltd. does not sell or rent personal data.

Some technology, hosting, communication and advertising providers may process or store personal data outside Uganda.

Before using such providers, we will take reasonable steps to confirm that the information receives protection equivalent to that required under applicable Ugandan law or that another legally permitted safeguard, including informed consent where appropriate, applies.

Using platforms such as Google, WhatsApp, Facebook or Instagram may involve international processing under those providers’ respective privacy policies.

We apply the following intended retention periods:

• Enquiries that do not become active projects: up to 24 months after the last meaningful communication
• Marketing-contact information: until consent is withdrawn or up to 24 months after the last meaningful interaction
• Active project records: for the duration of the enquiry, quotation, contract and project
• Customer, transaction, invoice and tax-related records: at least five years after the end of the relevant tax period, or longer where required for an ongoing proceeding or another legal obligation
• Warranty, dispute and legal-claim records: until the warranty expires or the claim or dispute is finally resolved
• Website and advertising information: according to the configured retention periods of the relevant analytics or advertising service, and only for as long as reasonably necessary for measurement, security and reporting

We may retain information longer where required by law, contract, consent or a legitimate legal claim.

At the end of the applicable retention period, we will take reasonable steps to delete, destroy or de-identify the information in a manner intended to prevent reconstruction.

We use appropriate and reasonable organisational and technical measures designed to protect personal data against:

• Loss or accidental damage
• Unauthorised access
• Unlawful processing
• Alteration or disclosure
• Unauthorised destruction

These measures may include access controls, password protection, staff confidentiality obligations, secure storage, restricted access and appropriate service-provider arrangements.

No method of internet transmission or electronic storage is completely secure. Please avoid sending highly sensitive information through ordinary enquiry forms, email, social media or WhatsApp.

Subject to applicable law, you may have the right to:

• Be informed about the collection and use of your personal data
• Request access to personal data held about you
• Request correction of inaccurate or incomplete information
• Request blocking, deletion, erasure or destruction where legally appropriate
• Object to or prevent processing for direct marketing
• Withdraw consent where processing is based on consent
• Object to certain processing that causes or is likely to cause unwarranted damage or distress
• Raise a complaint about the handling of your personal data

To make a request, contact us using the details in Section 2. We may ask for reasonable information to verify your identity.

Some requests may be limited where continued retention or processing is authorised or required by law.

Advertising platforms may use automated systems to measure interactions, deliver advertisements or identify likely customer interest.

Impact Woods Ltd. does not intend to make decisions that produce significant legal or similarly serious effects on a person solely through automated processing. A member of our team will review project enquiries before deciding whether and how we can provide a service.

Our services are intended for adults arranging home, property, construction or development projects.

We do not knowingly collect personal data from children through our general advertising or enquiry forms. If we learn that a child’s information was collected without appropriate authorisation, we will take reasonable steps to delete it.

Our website and advertisements may link to third-party services, including Google Forms, WhatsApp, social-media platforms and map services.

Those services operate under their own privacy notices and terms. Impact Woods Ltd. does not control their independent privacy practices. We encourage you to review their policies before submitting personal data.

We may update this Privacy Notice when our services, technology, legal obligations or data-handling practices change.

The effective date at the top identifies the latest version. Where changes materially affect how we use personal data, we will take reasonable steps to communicate them.

For privacy questions, requests or complaints, contact:

We will review privacy requests and complaints and respond within the period required by applicable law.

You may also contact or lodge a complaint with Uganda’s Personal Data Protection Office: