Privacy & Security Policy
We respect your privacy and protect your personal information in strict compliance with the Republic of Rwanda's Data Protection Law (Law N° 058/2021).
Encrypted In Transit & Rest
All data transmissions and database storage are protected with end-to-end industry encryption.
Zero Raw PIN Storage
We never store your Mobile Money PINs or full bank card security details.
You Control Your Data
Exercise your legal rights to request access, correction, or full deletion of your account.
1. Information We Collect
To provide reliable multi-vendor commerce and fast delivery, we collect the following categories of information:
- Account Identification: Full name, email address, contact phone number, and encrypted password hash.
- Delivery Information: Physical delivery address, district, sector, building name, and geolocation coordinates for courier routing.
- Payment Records: Mobile Money transaction references, payment timestamps, and amounts in RWF (processed via certified payment gateways).
- Merchant & Rider KYC: Business registration numbers (RDB certificates), tax ID numbers, and rider identification for platform verification.
2. How We Use Your Information
Your information is used strictly for legitimate marketplace business purposes:
- Fulfilling orders, packaging coordination, and dispatching assigned courier riders.
- Broadcasting live GPS courier location to your order tracking portal.
- Preventing fraud, resolving order disputes, and processing 100% refunds.
- Sending essential transactional updates (SMS/Email notifications for order milestones).
3. Data Sharing & Third-Party Processors
We do not sell, rent, or trade your personal data to advertisers. We share information only with authorized parties necessary to fulfill your purchases:
- Assigned Delivery Couriers: Customer name, delivery address, and contact number solely for the purpose of completing the physical delivery.
- Payment Aggregators & Telecommunications Partners: MTN Rwanda and Airtel Rwanda for processing Mobile Money push prompt debits.
- Law Enforcement & Regulatory Authorities: When required by Rwandan law or court order.
4. Your Data Rights Under Rwandan Law
In accordance with Law N° 058/2021 of 13/10/2021 relating to the protection of personal data and privacy, you have the right to:
5. Data Protection Officer (DPO) Contact
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact our Data Protection Officer at:
Email: privacy@HafiYawee.rw
Address: Data Privacy Office, HafiYawee Marketplace, Kigali Heights 4th Floor, Kigali, Rwanda.