Data Processing Agreement

TWENDEX TRANSPORT NETWORK CO. - SMC LTD, Wakiso, Uganda is the default controller for data collected through Twendex-owned platform surfaces unless an approved country-pack annex names a local Twendex entity, partner entity, or separate controller for the relevant market.

Contact Information:

• Email: info@twendex.com
• WhatsApp (text only): +256770616744
• Address: TWENDEX TRANSPORT NETWORK CO. - SMC LTD, Wakiso, Uganda
• Postal address: P O BOX 703491 Entebbe

Categories of Personal Data

We collect and process the following categories of personal data:

• Identity Data: Name, national ID, passport number, date of birth
• Contact Data: Phone number, email address, physical address
• Financial Data: Payment information, transaction history, bank account details
• Location Data: Pickup and delivery addresses, GPS coordinates, location history
• Technical Data: IP address, device information, browser type, usage data
• Profile Data: Username, password, preferences, ratings, reviews
• Usage Data: Information about how you use our platform and services
• Marketing Data: Communication preferences, marketing consent

We process your personal data for the following purposes:

• To provide and deliver our logistics services
• To process payments and manage financial transactions
• To verify user identity and prevent fraud
• To communicate with you about your shipments and services
• To improve our services and develop new features
• To comply with legal obligations and regulatory requirements
• To protect our rights and prevent illegal activities
• To send marketing communications (with your consent)
• To analyze usage patterns and optimize platform performance

We process your personal data based on the following legal grounds:

• Contract Performance: To fulfill our contractual obligations to you
• Legal Obligation: To comply with applicable laws and regulations
• Legitimate Interests: To operate and improve our business, prevent fraud, ensure security
• Consent: For marketing communications and optional data processing
• Vital Interests: To protect life, health, or safety in emergency situations

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this agreement, unless a longer retention period is required by law.

Retention Periods:

• Account Data: Retained while your account is active and for 7 years after account closure
• Transaction Data: Retained for 7 years for accounting and tax purposes
• Location Data: Retained for 90 days for service purposes
• Marketing Data: Retained until you withdraw consent or unsubscribe
• Legal Compliance: Retained as required by applicable laws and regulations

We may share your personal data with trusted third-party service providers who assist us in operating our platform and providing services:

• Payment Processors: Mobile money providers, banks, payment gateways
• Cloud Service Providers: Hosting and infrastructure services
• Analytics Providers: Service usage and performance analysis
• Communication Services: SMS, email, and push notification services
• Mapping Services: Location and routing services

All third-party processors are contractually obligated to protect your data and use it only for specified purposes.

Your personal data may be transferred to and processed outside your country of residence where a route, support workflow, payment rail, hosting provider, or approved partner requires it. We use contractual transfer protections, processor agreements, access controls, and any mandatory local transfer mechanism for the applicable market.

Country-specific privacy obligations apply where Twendex or an approved partner provides a product, route, payment rail, or channel in that market. The country-pack annex identifies any local controller, processor, regulator, authority path, and mandatory notices that supplement this DPA.

For questions about the correct regulator or authority path for a specific market, contact support@twendex.com or WhatsApp +256770616744 (text only).

You have the following rights regarding your personal data:

• Right of Access: Request a copy of your personal data we hold
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Request limitation of how we process your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for processing based on consent
• Right to Lodge a Complaint: File a complaint with your local data protection authority

To exercise these rights, please contact us at info@twendex.com.

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption of data in transit and at rest
• Access controls and authentication mechanisms
• Regular security assessments and audits
• Employee training on data protection
• Incident response and breach notification procedures
• Regular backups and disaster recovery plans

Despite our efforts, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

We may update this Data Processing Agreement from time to time. We will notify you of material changes by:

• Posting the updated agreement on our website
• Sending email notifications to registered users
• Displaying a notice on our platform

Your continued use of our services after changes become effective constitutes acceptance of the updated agreement.