Security

Our approach

We collect as little personal information as we can, restrict who can see it, and use well-established services for the sensitive parts, such as sign-in and payments, instead of building them ourselves.

Protecting your account

• Use a long, unique password that you do not use anywhere else.
• Turn on two-step verification in your account settings.
• Sign out on shared or public devices.
• Tell us straight away if you notice an order or sign-in you do not recognise.

Payment security

Payments are processed by Pesapal, our licensed payment provider, on its own secure pages. Your card number and mobile money PIN go straight to them and never pass through, or sit on, our servers. We only receive a payment status and a reference so we can match it to your order.

Data protection

• Data is encrypted in transit using HTTPS.
• Databases are access-controlled and backed up regularly.
• Staff only see the information they need for their job.
• Access to production systems is logged and reviewed.

Read how we handle personal information in the Privacy Policy.

Avoiding scams

Criminals sometimes pretend to be shops to get money or PINs. Remember:

• First Depot will never ask for your mobile money PIN, card PIN or one-time code.
• We will never ask you to pay into a personal mobile money number or personal bank account.
• Only pay through our website checkout or to the official details shown on your invoice.
• If you are unsure, call us on +256 781905753 before paying.

Reporting a vulnerability

If you believe you have found a security problem in our website or systems, please tell us before telling anyone else. Email support@first-depot.com with:

1. a description of the issue and where you found it
2. the steps needed to reproduce it
3. your contact details, so we can follow up

We will acknowledge your report within three working days and keep you informed. Please do not access other people's data, disrupt the service or publish details until we have had a chance to fix it.

If something goes wrong

If an incident affects your information, we will investigate quickly, contain it, and tell you and the relevant authorities without undue delay, explaining what happened and what you should do.

Security contact: support@first-depot.com