Skip to content
Free delivery over UGX 150,000 Authorised distributor stock Track order Help
SBMBeauty that speaks SBM
Sign inAccount 0 My bag UGX 0

Privacy notice

How SBM Skincare handles your personal data.

What we collect

  • Account details — your name, email address and mobile number.
  • Skin profile — skin type, concerns, allergies and any notes you choose to save.
  • Order data — what you bought, delivery address, payment method and status.
  • Technical data — IP address, browser user agent and sign-in times, kept for security.

What we never store

Card numbers, CVV codes and expiry dates never reach our servers. Card details are entered in our acquirer's secure frame and exchanged for a single-use token; we only keep the card brand and the last four digits so you can recognise the transaction. Mobile money PINs are entered on your handset and are never visible to us.

How it is protected

  • Phone numbers, delivery addresses and mobile money numbers are encrypted at rest with AES-256-GCM.
  • Passwords are hashed with Argon2id and can never be read back, by us or anyone else.
  • Staff access is governed by a two-gate permission model — a role privilege and an explicit section mapping are both required before anyone can view a record.
  • Every access to and change of your data by staff is written to an audit trail.

Why we use it

To fulfil and deliver your orders, to take and reconcile payment, to answer your enquiries, and — only where you have opted in — to send you product news. Analytics cookies are used only with your consent, which you can withdraw at any time.

How long we keep it

Order and payment records are retained for the period required by tax and accounting law. Marketing consent, skin profile data and saved addresses are kept until you change or delete them. Security logs are retained on a rolling basis.

Your rights

You can see, correct, export or ask us to erase your personal data. Signed-in customers can do all of this from Skin profile & privacy — including a one-click data export and an erasure request. Records we must keep for accounting are retained with personal fields removed.

Contact

Questions about this notice, or about your data, go to info@sbmcosmetics.com or through our contact form.

This notice is a template supplied with the platform. Have it reviewed against the data protection law that applies to you before you publish it — we are not lawyers and this is not legal advice.