Privacy Policy

1. Who We Are

BYASHARA STORE ("we", "us", "our") is a wholesale electronics supplier registered and operating in Rwanda. Our principal place of business is at Nyabugogo, Kigali, Rwanda. We also operate a branch in Rubavu, Western Province.

For questions about this policy or your personal data, contact our Data Protection Officer at: info@byashara.com or +250 782 545 277.

2. Personal Data We Collect

In accordance with Article 12 of Law No. 058/2021, we collect only the personal data necessary for legitimate business purposes. This includes:

• Identity data: Full name
• Contact data: Phone number, email address (optional)
• Delivery data: Country, city, delivery address
• Transaction data: Order details, purchase history, payment method
• Technical data: IP address, browser type, pages visited (via server logs)
• Usage data: Product views, search queries, engagement activity

We do not collect sensitive personal data as defined under Article 5 of Law No. 058/2021 (racial origin, health data, biometric data, etc.).

3. Legal Basis for Processing

We process your personal data under the following lawful bases as provided in Law No. 058/2021:

• Contractual necessity: Processing required to fulfil your order and arrange delivery.
• Consent: Where you voluntarily provide your email for communications.
• Legitimate interests: Fraud prevention, site security, improving our services.
• Legal obligation: Compliance with Rwandan tax law (RRA requirements) and accounting obligations.

4. How We Use Your Data

• Process and fulfil your orders and arrange delivery
• Send order confirmation and status updates via SMS or email
• Calculate and apply the correct delivery fee based on your location
• Respond to customer service enquiries
• Comply with tax and accounting obligations under Rwandan law
• Detect and prevent fraud or abuse of our platform
• Improve our website and product offerings (aggregated analytics only)

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

5. Sharing of Personal Data

We may share your data with the following parties only to the extent necessary:

• Delivery partners: To arrange and complete delivery of your order.
• Payment processors: Mobile money operators (MTN MoMo, Airtel Money) for payment verification.
• Rwanda Revenue Authority (RRA): As required by tax law for business reporting.
• Legal authorities: Where required by Rwandan law or court order.

Any third party receiving your data is bound by confidentiality obligations consistent with Law No. 058/2021.

6. Cross-Border Data Transfers

BYASHARA STORE operates in Rwanda and Eastern DRC. Where your order involves delivery to the Democratic Republic of Congo, your delivery information (name, city, address, phone) may be shared with our logistics partners operating in that territory. Such transfers are made solely for order fulfilment purposes and under appropriate contractual safeguards.

7. Data Retention

We retain personal data for as long as necessary to fulfil the purposes outlined in this policy:

• Order records: 7 years (required by Rwandan tax and accounting law)
• Customer accounts: For the duration of the business relationship + 3 years
• Technical logs: 90 days
• Marketing consents: Until withdrawn

After these periods, data is securely deleted or anonymised.

8. Your Rights Under Rwandan Law

Pursuant to Articles 19–26 of Law No. 058/2021, you have the following rights:

• Right of access: Request a copy of the personal data we hold about you.
• Right to rectification: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your data where there is no lawful basis for continued processing.
• Right to restriction: Request that we limit how we use your data in certain circumstances.
• Right to data portability: Receive your data in a structured, machine-readable format.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at info@byashara.com. We will respond within 30 days as required by law.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction, in accordance with Article 29 of Law No. 058/2021. These measures include SSL/TLS encryption for all data transmission, access controls, and regular security reviews. However, no internet-based system is completely secure, and we cannot guarantee absolute security.

10. Cookies and Tracking

Our website uses essential cookies and local storage to maintain your shopping cart and language preferences. We do not use third-party advertising or tracking cookies. The data stored locally on your device (cart contents, language choice) does not leave your browser unless you submit an order.

11. Children's Privacy

Our services are intended for business buyers (B2B wholesale) and are not directed at persons under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, contact us immediately.

12. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Rwanda Utilities Regulatory Authority (RURA), which oversees data protection enforcement in Rwanda.

Website: www.rura.rw · Tel: +250 252 584 562

13. Changes to This Policy

We may update this Privacy Policy from time to time. The revised version will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically. Continued use of our platform after any changes constitutes acceptance of the updated policy.

14. Contact Us