privacy_policy

CBi Medical Supplies & Distribution (Online & Offline)

Effective date: 01/03/2026

This Privacy Policy explains how CBi Medical Supplies & Distribution (“CBi,” “we,” “us,” or “our”) collects, uses, stores, shares and protects personal information when providing medical supplies and distribution services online (website, e‑commerce) and offline (in‑person sales, phone orders, delivery, wholesale) in Uganda. By using our services or interacting with us you agree to the practices described below.

Scope

  • Applies to personal data collected from customers, patients, caregivers, healthcare providers, distributors, vendors and visitors in Uganda and related cross‑border processing required for business operations.

Key Ugandan law

  • We process personal data in accordance with the Data Protection and Privacy Act, 2019 (Uganda) and other applicable Ugandan laws and regulatory requirements for medical products and distribution.

Information we collect

  • Identity & contact: name, address, email, phone, billing/shipping address.
  • Transaction & account: order history, invoices, returns, warranties.
  • Payment data: payment card or bank details (when provided). Payment processors may store card data.
  • Health and prescription data: prescriptions, medical conditions, treatment information and other health data necessary to fulfill orders or comply with law.
  • Professional/business: licenses, professional credentials, tax/business IDs for healthcare providers and distributors.
  • Delivery & logistics: delivery instructions, tracking, signatures.
  • Communications: phone call and chat transcripts, customer service records.
  • Technical & usage: IP address, device/browser data, cookies, analytics.
  • Third‑party & public sources: data from prescribers, insurers, carriers, public professional directories.

How we collect data

  • Directly from you (forms, orders, prescriptions, phone).
  • From healthcare providers, insurers and prescribers (with authorization where required).
  • From service providers (payment processors, carriers).
  • Automatically via our online services (cookies, analytics).
  • From public or third‑party sources.

Purposes of processing We use data to:

  • Verify, process and fulfill orders, prescriptions and deliveries.
  • Communicate order status, recalls, safety notices and customer service responses.
  • Process payments, insurance claims and refunds.
  • Confirm professional credentials and regulatory compliance for providers and distributors.
  • Manage inventory, logistics and supply chain.
  • Prevent fraud and enforce our policies.
  • Improve services, perform analytics and personalize communications.
  • Meet legal, regulatory and tax obligations in Uganda and other jurisdictions.
  • Send marketing where consented or permitted by law.

Legal basis and lawful processing

  • Where required under Ugandan law, we rely on consent, contractual necessity (to fulfill orders), legal obligations, and legitimate interests (fraud prevention, service improvement), balancing these against individual rights.

Sensitive personal data (health data)

  • Health and prescription information is treated as sensitive. We process such data only when necessary to provide services, with explicit consent where required and in accordance with applicable law and professional obligations.

Disclosure and recipients, we may share information with:

  • Service providers: payment processors, couriers, fulfillment and IT providers.
  • Healthcare partners: prescribers, pharmacies, insurers for order fulfillment and verification.
  • Regulators and law enforcement as required by Ugandan law.
  • Business partners, distributors and third parties as necessary to deliver services.
  • Third parties in connection with a business sale, merger, or reorganization (with notice).
  • Others with your consent. We require service providers to protect personal data and act only on our instructions.

Cross‑border transfers

  • Some processing may occur outside Uganda (e.g., payment processors, cloud services). We apply appropriate safeguards consistent with Ugandan law when transferring data cross‑border.

Data retention

  • We retain personal data only as long as necessary for the purposes described, for legal, regulatory, tax, audit, warranty and safety record keeping. Retention periods vary by data type and legal requirements.

Security

  • We employ administrative, technical and physical safeguards to protect personal data against loss, unauthorized access, disclosure and alteration. While we use industry‑standard security, no system is completely secure.

Your rights (Uganda) Subject to legal limits and verification, you may:

  • Access the personal data we hold about you.
  • Request correction, updating or completion of inaccurate or incomplete data.
  • Request deletion or restriction of processing where permitted.
  • Withdraw consent (without affecting lawful prior processing).
  • Object to processing based on legitimate interests in certain situations.
  • Request portability of data where technically feasible.
  • Lodge a complaint with our privacy contact or the Data Protection Office — Office of the Data Protection Commissioner, Uganda.

To exercise rights contact us (see Section 18). We may require ID verification and will respond within statutory timeframes.

Cookies & tracking

  • We use cookies and similar technologies on our websites for necessary functions, analytics and, with consent, marketing. You can manage cookie preferences via your browser or our cookie settings.

Minors

  • Our services are not intended for children. We do not knowingly collect personal data from minors without parental/guardian consent. If we learn we have collected such data improperly, we will delete it.

Compliance with health law and professional obligations

  • Where applicable, we will handle protected health information and regulated product records in accordance with Ugandan health regulations and professional standards. We will cooperate with regulatory bodies investigating safety or compliance matters.

Marketing and communications

  • We may send promotional messages and product information where you have consented or where permitted by law. You may opt out of marketing at any time via unsubscribe links or by contacting us.

Third‑party links

  • Our online services may link to third‑party sites. We are not responsible for their privacy practices. Review their policies before providing personal data.

Changes to this policy

  • We may update this policy to reflect changes in law, business practices or services. We will publish the revised policy with a new effective date and, if material, give notice by email or prominent notice.

Governing law and disputes

  • This policy is governed by the laws of Uganda. Where applicable, local consumer protection and sector laws provide additional rights.

For privacy questions, to exercise rights, or to lodge complaints contact:

CBi Medical Supplies & Distribution

Email: acchallie5@gmail.com

Phone: +256 394 003592