1. Controller
UMUGINA (Kigali, Rwanda) is the data controller for the marketplace. Privacy contact: privacy@umugina.com.
2. Data we collect
Depending on your role, we may process: name, email, phone, account credentials, business profile and verification documents, product listings, order and payment metadata, attribution / referral codes, device and usage logs, and support messages. Payment card or mobile-money credentials for online providers are handled by the payment provider, not stored as full secrets by UMUGINA.
3. Why we process data
We process data to create accounts, run checkout and fulfilment, calculate commissions and platform fees, prevent fraud and abuse, meet legal obligations, and improve the product. Legal bases include contract performance, legitimate interests in a secure marketplace, and consent where required (for example optional marketing).
4. Sharing
We share data with businesses and agents as needed to fulfil attributed orders; with payment, hosting, email, and analytics processors under contract; and with authorities when required by Rwandan law. We do not sell personal data.
5. Retention and security
We retain account and transaction records for as long as needed for operations, dispute handling, and statutory retention. We use access controls, encryption in transit, rate limiting, and monitoring. No method of transmission is perfectly secure; report incidents to privacy@umugina.com.
6. Your rights
Subject to Law Nº 058/2021, you may request access, correction, deletion, restriction, or objection, and you may lodge a complaint with the competent authority in Rwanda. Use privacy@umugina.com to exercise these rights.
See also our Terms of Service.