Legal & transparency
Privacy policy
This policy explains how Nyurwe Mart collects, uses, and protects your information across our website and services.
Last updated: January 2024
Contact privacy teamCovers
Account data, shopping activity, delivery details, and support interactions.
Updates
Material changes are communicated before they take effect.
Contact
Reach the privacy team directly for access, corrections, or deletion requests.
At Nyurwe Mart, we believe that privacy is a fundamental right. This Privacy Policy explains how we collect, use, protect, and share your personal information when you use our grocery delivery platform.
1. Information We Collect
Personal Information
- Name, email address, phone number, and delivery address
- Date of birth and gender (optional)
- Payment information (processed securely through third-party providers)
- Profile picture and preferences
Usage Information
- Browsing behavior, search queries, and purchase history
- Device information including IP address, browser type, and operating system
- Location data when you enable location services
- App usage analytics and performance data
Communication Data
- Customer service interactions and support tickets
- Feedback, reviews, and survey responses
- Marketing preferences and communication history
2. How We Use Your Information
Service Provision
- Process and fulfill your orders and deliveries
- Manage your account and provide customer support
- Process payments and prevent fraudulent transactions
- Communicate order updates and delivery notifications
Personalization
- Recommend products based on your preferences and history
- Customize your shopping experience and app interface
- Provide personalized offers and promotions
- Improve our services based on usage patterns
Legal and Security
- Comply with legal obligations and regulations
- Protect against fraud, abuse, and security threats
- Enforce our terms of service and policies
- Respond to legal requests and court orders
4. Data Security
Technical Safeguards
- End-to-end encryption for sensitive data transmission
- Secure server infrastructure with regular security updates
- Multi-factor authentication for admin access
- Regular security audits and penetration testing
Operational Security
- Employee training on data protection best practices
- Strict access controls and need-to-know basis
- Regular backup and disaster recovery procedures
- Incident response plan for security breaches
Data Protection
- Passwords are hashed using industry-standard algorithms
- Payment data is handled by PCI-compliant processors
- Personal data is encrypted both in transit and at rest
- Regular deletion of unnecessary data
5. Your Privacy Rights
Access and Control
- View and download your personal data
- Update or correct inaccurate information
- Delete your account and associated data
- Export your data in a portable format
Communication Preferences
- Opt-out of marketing communications
- Choose notification preferences
- Control cookie and tracking settings
- Manage data sharing preferences
Legal Rights
- Right to be informed about data processing
- Right to rectification of inaccurate data
- Right to erasure ('right to be forgotten')
- Right to object to certain processing activities
7. Children's Privacy
Age Restrictions
- Our service is intended for users 18 years and older
- We do not knowingly collect data from children under 18
- Parental consent required for users under 18
- Special protections for sensitive personal data
8. International Transfers
Data Processing
- Data may be processed in countries outside Rwanda
- We ensure adequate protection for international transfers
- Compliance with local and international privacy laws
- Safeguards for cross-border data transfers
9. Data Retention
Retention Periods
- Account data: Retained while account is active
- Order history: Retained for 7 years for tax purposes
- Support communications: Retained for 3 years
- Analytics data: Aggregated data retained indefinitely
Deletion Process
- Automatic deletion after retention periods
- Secure data destruction methods
- Verification of complete data removal
- Documentation of deletion processes
10. Policy Updates
Notification Process
- 30-day notice for material changes
- Email notification to registered users
- Prominent website notice of updates
- Version history available upon request
11. Contact Information
Privacy Inquiries
- Email: privacy@nyurwemart.com
- Phone: +250 123 456 789
- Address: 123 Market Street, Kigali, Rwanda
- Response time: Within 48 hours
Questions About Your Privacy?
Contact us at privacy@nyurwemart.com for any privacy-related inquiries.
Contact us