Your rights under Rwanda's data-protection law, in plain language.
Last updated 27 July 2026
You own your data. We hold it to run the platform and to verify that you are who you say you are. You can see it, correct it, export it or delete it yourself from Settings → Privacy, and we will act on any request within 30 days. Your licence documents are the most protected thing we store: encrypted, never published, and seen only by the verification team.
Contract: we need your account and profile data to provide the service you signed up for. Consent: you consent to your public profile being listed in the directory, and separately to non-essential analytics cookies. Legal obligation: some records must be kept to satisfy regulatory and tax requirements. Legitimate interest: keeping the platform secure and preventing fraudulent registrations.
We host data in a manner consistent with Rwanda's data-locality expectations, and we do not transfer personal data outside Rwanda except where a specific service provider is required and an appropriate safeguard is in place. Verification documents are encrypted at rest.
Right to be informed — this statement and our privacy policy. Right of access — get a copy of what we hold. Right to rectification — correct anything inaccurate. Right to erasure — have your data deleted. Right to restrict processing — pause certain uses. Right to object — including to being listed publicly. Right to data portability — export in a machine-readable format. Right not to be subject to purely automated decisions — verification decisions always involve a human reviewer.
Most rights are self-service. Sign in and go to Settings → Privacy, where you can export a copy of your data or delete your account. For anything that isn't covered there, write to our Data Protection Officer at dpo@huzamed.rw. We will acknowledge within 5 working days and respond substantively within 30 days, free of charge.
HuzaMed has appointed a Data Protection Officer responsible for overseeing how we handle personal data and for responding to your requests. Contact them directly at dpo@huzamed.rw, or by post at our Kigali office.
If you are unhappy with how we have handled your data or your request, you have the right to lodge a complaint with the National Cyber Security Authority, which supervises data protection in Rwanda. We would appreciate the chance to put things right first.
Our Data Protection Officer will answer within 30 days. Write to dpo@huzamed.rw.