1. Introduction

UMVA BUSINESS LTD ("UMVA", "we", "us", "our"), headquartered in Kicukiro, Masaka, Kigali – Rwanda, operates the website umva.online and provides hosting and related digital services. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website, create an account, place an order, or use any of our services. By accessing or using our services, you acknowledge that you have read and understood this policy.

We are committed to protecting your privacy and handling your personal data in accordance with applicable data protection laws, including the requirements of the African Union Convention on Cyber Security and Personal Data Protection, and any national legislation in force in the Republic of Rwanda.

2. Information We Collect

2.1 Information You Provide Directly. When you register, order a service, or contact us, we collect personal information you voluntarily submit, including:

• Full name and username;
• Email address;
• Phone number;
• Billing and contact details;
• Any correspondence you send to us by email, phone, or through our support ticketing system.

2.2 Information Collected Automatically. When you browse our website, we may automatically collect technical information such as your IP address, browser type and version, device identifiers, operating system, referring URLs, pages viewed, and the dates and times of your visits. This information helps us secure the platform and improve our services.

2.3 Payment Information. We do not collect or store your full card numbers or banking credentials on our own servers. Payments are processed by trusted third-party payment partners who handle your payment data securely in accordance with PCI-DSS requirements.

3. How We Use Your Information

We use the information we collect for the following legitimate purposes:

• To create and manage your account;
• To process and deliver your orders and services;
• To provide customer support and respond to your enquiries;
• To send you transactional notifications about your account, billing, renewals, and service updates;
• To detect, prevent, and address fraud, abuse, security, or technical issues;
• To comply with legal obligations and enforce our Terms of Service;
• To improve, personalise, and optimise your experience of our website.

Where we rely on your consent to send marketing communications, you may withdraw your consent at any time by unsubscribing or contacting us directly.

4. Sharing and Disclosure of Information

We do not sell, rent, or trade your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With trusted partners who assist us in operating our business (such as payment processors, email delivery, and hosting providers). These parties are bound by confidentiality and data-processing agreements.
• Legal Compliance: When required by law, regulation, legal process, or government request, or when necessary to protect our rights, safety, or property.
• Business Transfers: In connection with a merger, acquisition, reorganisation, or sale of assets, your information may be transferred as part of that transaction.

5. Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes described in this policy, to comply with our legal obligations, to resolve disputes, and to enforce our agreements. When your account is closed or data is no longer needed, we will securely delete or anonymise it in accordance with applicable law.

6. Security of Your Information

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include secure server infrastructure, encryption of data in transit, access controls, and regular security reviews. While no method of transmission or storage is completely secure, we strive to protect your data and to maintain reasonable safeguards at all times. You are responsible for keeping your account credentials confidential.

7. Cookies and Similar Technologies

Our website uses cookies and similar technologies to enhance your browsing experience, remember your preferences, and understand how our site is used. You may configure your browser to refuse cookies or alert you when cookies are being sent; however, some parts of the site may not function properly without them. For more details, please refer to our Cookie Policy.

8. Your Rights

Depending on applicable law, you may have the right to:

• Access the personal information we hold about you;
• Rectify inaccurate or incomplete information;
• Erase your personal information under certain conditions;
• Restrict or object to certain processing activities;
• Data portability — receive your information in a structured, commonly used format;
• Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us using the details in Section 10. We will respond to your request within a reasonable timeframe and in accordance with applicable law.

9. Third-Party Links

Our website may contain links to third-party websites or services that are not operated by us. We are not responsible for the privacy practices or content of those third parties. We encourage you to review the privacy policies of any third-party website you visit.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

• Email: info@umva.online
• Phone: +250 780 817 402
• Address: Kicukiro, Masaka, Kigali – Rwanda

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. Any changes will be posted on this page, and the "Last Updated" date will be revised accordingly. Your continued use of our services after such changes constitutes your acceptance of the updated policy.