01
Information We Collect
Personal Information You Provide
- Contact Information: Name, email address, phone number, mailing address
- Account Information: Username, password, profile picture, preferences
- Project Details: Business requirements, technical specifications, project files
- Communication Data: Messages, feedback, support requests
- Payment Information: Billing details, payment method information (processed securely through third-party providers)
- Professional Information: Job title, company name, industry, company size
Information Automatically Collected
- Device Information: IP address, browser type, operating system, device identifiers
- Usage Data: Pages visited, time spent, click patterns, features used
- Location Data: General geographic location based on IP address
- Log Data: Access times, pages viewed, app crashes, system activity
- Cookies and Tracking: Session cookies, persistent cookies, web beacons
02
How We Use Your Information
Service Provision
- Deliver, maintain, and improve our software development services
- Process transactions and send related information
- Provide customer support and technical assistance
- Send technical notices, updates, and support messages
- Manage your account and provide personalized experiences
Communication & Marketing
- Send marketing communications (with your consent)
- Respond to comments, questions, and customer service requests
- Provide information about new services, features, or offerings
- Conduct surveys and research to improve our services
Legal & Security
- Comply with legal obligations and regulatory requirements
- Protect against fraud, abuse, and security threats
- Enforce our Terms of Service and other agreements
- Resolve disputes and troubleshoot problems
04
Data Retention
Retention Periods
- Account Information: Retained while active and for up to 3 years after account closure
- Project Data: Retained for the project duration and up to 5 years after completion for legal and warranty purposes
- Communication Records: Retained for up to 3 years for customer service and legal purposes
- Marketing Data: Retained until you unsubscribe or withdraw consent
- Technical Logs: Generally retained for 1 year for troubleshooting and security purposes
When information is no longer needed, we securely delete or anonymize it in accordance with our data retention schedule and applicable laws.
05
Data Security
Technical Safeguards
- Encryption of data in transit using HTTPS and SSL/TLS protocols
- Encryption of sensitive data at rest using industry-standard algorithms
- Regular security assessments and vulnerability testing
- Firewalls, intrusion detection systems, and monitoring tools
- Secure access controls and multi-factor authentication for employees
Administrative Safeguards
- Limited access to personal information on a need-to-know basis
- Regular employee training on data protection and privacy
- Incident response procedures and breach notification protocols
- Regular backups with secure storage and encryption
Important: While we implement robust security measures, no system is completely immune to risks. We encourage you to use strong passwords and keep your account information secure.
07
Third-Party Services
Our Approach
- We are not responsible for the privacy practices of third-party sites
- We encourage you to review the privacy policies of third-party services
- Third-party services may collect information about your use of their services
- Some integrations may involve sharing limited information necessary for functionality
Specific third-party services we may use include payment processors, analytics tools, communication platforms, and development tools.
08
International Data Transfers
Data Transfer Destinations
- Primary Operations: Servers and operations in Rwanda, Kenya, South Africa, and Ghana
- Cloud Services: Data centers in the European Union, United States, and South Africa
- Development Teams: Collaboration across multiple African countries and international locations
- Third-Party Services: Global service providers located in various jurisdictions worldwide
Cross-Border Safeguards
- Standard Contractual Clauses approved by relevant authorities
- Adequacy decisions where applicable (e.g., EU-Africa transfers)
- Binding Corporate Rules for intra-group transfers
- Industry-standard encryption and security measures
- Regular compliance audits and assessments
Pan-African & Global Compliance: By using our services, you consent to the transfer of your information across African borders and internationally where necessary for service provision, in compliance with applicable data protection frameworks.
09
Your Rights & Choices
Access & Information
- Right to access the personal information we hold about you
- Right to receive a copy of your data in a structured, machine-readable format
- Right to know the source of your personal information
Correction & Updates
- Right to correct inaccurate or incomplete information
- Right to update your personal information
- Right to amend your communication preferences
Deletion & Restriction
- Right to request deletion of your personal information (subject to legal limitations)
- Right to restrict processing of your data in certain circumstances
- Right to object to processing for direct marketing purposes
To exercise these rights, please contact us using the information provided in Section 14.
10
Children's Privacy
Our Policy on Minors
- Our services are not intended for children under 18 years of age
- We do not knowingly collect personal information from children under 18
- If we become aware of collecting information from a child under 18, we will delete it promptly
- Parents or guardians who believe their child has provided us with personal information should contact us immediately
If you are under 18, please do not use our services or provide any personal information to us.
11
Changes to This Policy
Why We Update This Policy
- Changes in our data collection and use practices
- New features or services that affect privacy
- Updates to applicable laws and regulations
- Improvements to our privacy and security measures
Notification of Changes: We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. For significant changes, we may also send email notifications. Your continued use of our services constitutes acceptance of the updated policy.
12
Data Protection Officer
Initiative Tech Solutions Ltd has appointed a Data Protection Officer to oversee our data protection strategy and ensure ongoing compliance.
Data Protection Officer
Initiative Tech Solutions Ltd
13
Compliance with Laws
African Data Protection Laws
- Rwanda: Law N° 058/2021 on the protection of personal data and privacy
- South Africa: Protection of Personal Information Act (POPIA)
- Kenya: Data Protection Act 2019
- Nigeria: Nigeria Data Protection Regulation (NDPR)
- Ghana: Data Protection Act 2012
- Other African Nations: Applicable local data protection legislation
International Standards
- GDPR: General Data Protection Regulation (EU) 2016/679 for EU residents
- CCPA: California Consumer Privacy Act for California residents
- UK GDPR: UK General Data Protection Regulation for UK residents
- PIPEDA: Personal Information Protection and Electronic Documents Act (Canada)
- APPI: Act on the Protection of Personal Information (Japan)
14
Contact & Complaints
If you have any questions, concerns, or complaints about this privacy policy or our data practices, please reach out:
Privacy Inquiries
Initiative Tech Solutions Ltd
We will respond to your inquiry within 30 days of receipt. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.