PrivacyPrivacy

This website is operated by ForgeHub Ltd (trading as ForgeHub Rwanda), a company registered in Rwanda and based in Kigali. ForgeHub Ltd is the data controller for the personal data described in this policy.

For any question about this policy or your data, write to info@forgehubrwanda.com or call +250 791 774 313.

• Contact form: your name, email address and the message you send.
• Direct contact: anything you share when you email or call us.
• Admin accounts: the email address and password of team members who manage the site. Passwords are stored only in hashed form by our authentication provider.
• Technical data: our hosting provider records basic request data, such as IP address, browser type and the time of each visit, to keep the site running and secure.
• Preferences: a few small items saved in your browser, such as your light or dark theme. These stay on your device. See our cookie policy for details.

We do not collect sensitive personal data, and we do not use your data for automated decision making or profiling.

We never sell your personal data, and we do not use it for advertising.

We share personal data only with service providers that help us run the site, under contracts that require them to protect it and use it only on our instructions:

• Supabase: database and admin sign-in.
• Vercel: website hosting.
• Google (Gmail): our email inbox, where contact form messages are delivered.

We may also disclose data where the law requires it, or to protect our rights, our users or the public.

Some of our providers store data on servers outside Rwanda. Where this happens, we transfer data only as permitted by Law No. 058/2021 and, for visitors in the European Union or United Kingdom, under recognised safeguards such as Standard Contractual Clauses.

• Contact messages: up to 24 months after our last exchange, unless they lead to a working relationship, in which case we keep what that relationship requires.
• Admin accounts: for as long as the person helps manage the site.
• Technical logs: for the short period set by our hosting provider.
• Records we must keep by law: for the period the law requires.

Under Rwandan law, and the GDPR where it applies to you, you have the right to:

• Be informed about how your data is used.
• Access the personal data we hold about you.
• Have inaccurate data corrected.
• Have your data deleted.
• Restrict or object to how we use your data.
• Receive your data in a portable format.
• Withdraw consent at any time, without affecting earlier use.
• Not be subject to decisions based solely on automated processing.

To exercise any of these rights, email info@forgehubrwanda.com. We will respond within 30 days and may ask you to confirm your identity first.

If you are unhappy with how we handle your data, please contact us first so we can put it right. You may also complain to the National Cyber Security Authority (NCSA), Rwanda's data protection supervisory authority. Visitors in the European Union or United Kingdom may contact their local data protection authority.

Data is encrypted in transit, access to it is limited to the people who need it, and admin accounts are protected by authentication. No system is perfectly secure, but we will notify you and the authorities without delay if a breach puts your data at risk.

This website is not intended for children under 16. If you are under 16 and want to join a program, please ask a parent or guardian to contact us on your behalf. If you believe a child has sent us personal data, email info@forgehubrwanda.com and we will delete it.

We will update this policy as our services change, for example when we add analytics. The date at the top shows the latest version. Significant changes will be highlighted on this page.