Last updated: 1 November 2026
Privacy notice
What we do with the personal information you send us through this website, under Law No 058/2021 of 13/10/2021 relating to the protection of personal data and privacy in Rwanda.
01Who we are
Iturufu is an enterprise registered in Rwanda (TIN 157220069) in Kimihurura, Gasabo, Kigali. In this notice, we, us and our mean Iturufu.
Our data protection officer, Joseph Nkurunziza, answers every question and request about your personal information: joseph.nkurunziza@byoroshye.rw or +250 781 259 038.
02What we collect
When you send a message through our contact form: your name, the email address or phone number you give us, your business or organisation if you add it, the services you tick and your message.
Browsing this website collects nothing about you. It sets no cookies and uses no analytics or advertising tools.
03Why we use it, and on what grounds
Only to read your message, answer it and follow up on what you asked us about. We rely on your consent, given when you send the message, and on our legitimate interest in answering people who contact us.
We do not add you to a mailing list, we do not sell your information and we do not use it for advertising.
04Who else handles it
Your message passes through our servers, hosted by Hetzner Online GmbH in Finland, and is sent by email through Resend (Plus Five Five, Inc.) in the United States to our team mailbox, hosted by Zoho in the United States. Each acts only on our behalf, under a written data protection agreement.
If you choose to write to us on WhatsApp instead, WhatsApp handles that conversation under its own terms.
We share it with no one else, unless the law obliges us to.
05How long we keep it
The website keeps no copy of your message: it is kept only in our mailbox, for as long as we need it to answer you and follow up, and no longer than two years after our last exchange, unless it leads to a contract, whose records the law requires us to keep.
06Your rights
You may ask to see the personal information we keep about you, to correct it, to delete it, to receive a copy of it, to object to a use of it and to withdraw your consent. Write to our data protection officer.
If you think we have not respected your rights, you may complain to the National Cyber Security Authority (NCSA), which oversees personal data protection in Rwanda.
07Byoroshye
Byoroshye, our hardware store management system, has its own privacy policy, which covers the stores that use it and the records they keep. You can read it in the Byoroshye app.
08Changes to this notice
We may update this notice. The date at the top shows when it last changed.