Privacy Policy

1. Who we are

LWORXPAY is operated by LworxPay Limited, a company registered with the Uganda Registration Services Bureau (URSB) and licensed by the Bank of Uganda (BOU), based in Bundibugyo, Uganda. LworxPay Limited is responsible for the personal information described in this policy.

2. Information we collect

Information you give us

• Your name, email address, phone number and business name.
• Identity documents and details for KYC verification.
• Mobile money numbers you pay or withdraw to.
• Logos, descriptions and other content you add to payment links.
• Messages you send to our support team.

Information collected automatically

• Transaction records, such as amounts, references, dates and status.
• Your IP address, browser and device details, and sign-in times.
• Security and activity logs that help us detect fraud and abuse.

3. How we use your information

• To create and run your account and process your payments, withdrawals, transfers and bill payments.
• To verify your identity and meet legal and regulatory duties, including fraud prevention and anti-money-laundering rules.
• To protect accounts and the platform from fraud, abuse and attacks.
• To send you service messages such as verification codes, transaction receipts, security alerts and important announcements from the LWORXPAY team.
• To give support, fix problems and improve our services.

4. Our legal basis

We handle personal data under Uganda’s Data Protection and Privacy Act, 2019. We rely on your consent, on the need to provide the services you asked for, on our legal obligations, and on our legitimate interest in keeping the platform secure.

5. Who we share information with

We share information only when it is needed:

• Mobile money networks and payment partners to complete your transactions.
• Service providers that help us run LWORXPAY, such as hosting, email delivery and bot protection (for example Google reCAPTCHA). They may only use data to provide their service to us.
• Authorities, regulators and courts when the law requires it or to prevent fraud and crime.

We do not sell your personal information and we do not share it for third-party advertising.

6. Identity documents (KYC)

Your ID documents are used only to verify who you are. They are stored privately, are not publicly accessible, and can only be opened by authorised LWORXPAY administrators who need them for verification or legal compliance.

7. Cookies and similar storage

We use a secure session cookie to keep you logged in and your browser’s storage to remember settings such as light or dark mode. We do not use advertising cookies. Some tools we use, such as reCAPTCHA, may set their own cookies under their own policies.

8. How we keep data safe

We protect your data with HTTPS, hashed passwords, authenticator codes, access controls, IP blocking and monitoring. No system is perfectly secure, so please also protect your password, PIN, authenticator and API keys. If a data breach affects you, we will tell you and the relevant authority as the law requires.

9. How long we keep data

We keep your information while your account is active and for as long as needed afterwards to meet legal, financial-record, tax, fraud-prevention and dispute-handling requirements. When it is no longer needed, we delete it or anonymise it.

10. Your rights

You have the right to:

• ask for a copy of the personal data we hold about you;
• ask us to correct data that is wrong or incomplete;
• ask us to delete your data, where the law allows (some records must be kept by law);
• object to or limit certain uses of your data, and withdraw consent you have given.

To use these rights, contact us using the details below. If you are not satisfied with our response, you can complain to Uganda’s Personal Data Protection Office.

11. Children

LWORXPAY is for people aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has given us information, please contact us and we will delete it.

12. Data processed outside Uganda

Some of our service providers may process data outside Uganda. When that happens, we take steps to make sure your data stays protected in line with the law.

13. Changes to this policy

We may update this policy from time to time. We will change the “last updated” date above and, for important changes, tell you in the app or by email.

14. Contact us

For any privacy question or request, use the contact details below. Please also read our Terms of Service and Trust & Security page.