1.1 Introduction and scope
1.1.1. IZETECH SHOP Pty Ltd (“IZETECH SHOP ” or “we” or “us” or “our”) conducts its business as a software developer and Ecommerce platform with its office located at Nyarugenge/Kigali.
IZETECH SHOP is a responsible party (or data controller, in some jurisdictions) in respect of your Personal Information (as defined in clause 3.1 below), and Special Personal Information (as defined in clause 4.1 below), which means that IZETECH SHOP determines the purpose of and means for processing your Personal Information.
1.1.2 IZETECH SHOP is committed to respecting your privacy and protecting your Personal Information. We strive to ensure that our use of your Personal Information is lawful, reasonable, and relevant to our business activities, with the goal of improving our services and your experience.
order of priority:
1.1.7. The Terms.
1.1.8 The Agreements.
1.1 Your consent to the Processing of your Personal Information
3. What is Personal Information?
3.1. “Personal Information” refers to private information about an identifiable living natural person or, where applicable, an identifiable existing juristic person. Personal Information does not include information that does not identify you (including in instances where that information has been de-identified so that it
does not identify a person). The Personal Information that we collect about you may differ on the basis of your engagement with us or the products and services that you receive from IZETECH SHOP .
3.2. We may process various types of Personal Information about you, as follows:
3.2.1. Contact Information, which includes your billing addresses, delivery addresses, e-mail addresses and telephone numbers.
3.2.2. Transaction Information, which includes details about payments made to or received from you and company information, which may consist of financial activity.
3.2.2. Technical Information, which includes your internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in type and versions, operating system and platform, and other technology on the devices you use to access the IZETECH SHOP website or to use our products and services or engage with us.
3.2.3. Usage Information, which includes information as to your access to and use of the IZETECH SHOP website, products and services, such as what links you went to, what content you accessed, the amount of content viewed and the order of that content, as well as the amount of time spent on the specific content and what products and services you access and use when engaging with IZETECH SHOP.
3.2.4. Location Information. which includes geographical information from your Access Device (which is usually based on the GPS or IP location).
3.2.5. Marketing and Communications Information, which includes your preferences in respect of receiving marketing information from us and our third parties, and your communication preferences.
4. Special Personal Information
4.1. Special personal information is data about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data. It also includes information about criminal convictions and offences.
4.2. The processing of Special Personal Information requires higher levels of protection. We need to have further justifications for processing Special Personal Information. IZETECH SHOP has implemented appropriate policies and safeguards, which we are required by law to maintain, to process Special Personal Information.
5. When will we process your Special Personal Information?
5.1. We will generally not process particularly Special Personal Information about you unless it is necessary for establishing, exercising or defending a right or obligation in law, or where we have obtained your consent to do so. On rare occasions, there may be other reasons for processing your Special Personal Information, such as where the information has been deliberately made public by you.
6. How we collect your Personal Information
6.1. We collect your Personal Information in the following ways:
6.1.1. Through direct or active interactions with you.
6.1.2. Through automated or passive interactions with you.
6.1.3. From third parties and public sources
6.2. We also collect Personal Information directly from you when you communicate directly with us, for example when you complete certain application form, via e-mail, telephone calls, feedback forms, registering for and attending events, giving us your business card, site comments or forums.
6.3. If you contact us, we reserve the right to retain a record of that correspondence in accordance with any internal information management policies and applicable legislation.
6.5. Passive collection from your Access Device when browsing our IZETECH SHOP website.
6.5.1. We may passively collect certain of your Personal Information from the Access Device that you use to access and navigate the IZETECH SHOP website, by way of various technological applications, for instance, using server logs to collect and maintain log information.
6.5.3. A cookie is a small piece of data (an alphanumeric identifier) which our computer system transfers to your Access Device through your web browser when you visit the IZETECH SHOP website and which is stored in your web browser. When you visit the IZETECH SHOP website again, the cookie allows the site to recognise your browser. Cookies may store user preferences and other information.
6.5.5. The Personal Information that we passively collect from your Access Device may include your Identity Information, your Contact Information, your Technical Information, your Profile Information, your Usage Information, your Location Information and your Marketing and Communications Information, or any other Personal Information which you permit us, from time to time, to passively collect from your Access Device.
6.6. Collection from third parties and public sources
6.6.1. IZETECH SHOP may receive Personal Information about you from various third parties including publicly available sources.
7. How we use your Personal Information
7.1. We use your Personal Information for the following purposes:
7.1.1. To provide services to our clients.
7.1.2. To maintain and improve the IZETECH SHOP website and to improve the experience of our IZETECH SHOP website users, including by requesting feedback from our IZETECH SHOP website users on our products and services and to facilitate the procurement of our products and services.
7.1.3. To retain and make information available to you on the IZETECH SHOP website.
7.1.4. To maintain and update our client, or potential client databases
7.1.5. To establish and verify your identity on the IZETECH SHOP website.
7.1.6. To operate, administer, secure and develop the IZETECH SHOP website and the performance and functionality of the IZETECH SHOP website.
7.1.9. To create user profiles, compile and use statistical information (including nonpersonal information) about you and other users and their access to the IZETECH SHOP website and to analyse and compare how you and other users make use of the IZETECH SHOP website, including (without limitation) their browsing habits, click-patterns, preferences, frequency and times of use, trends and demographic information including recommendations to users and tailoring information and content for users.
7.1.10. To conduct market research surveys.
7.1.11. To offer you information and content which is more appropriately tailored for you as far as reasonably possible.
7.1.12. To provide you with the latest information about our products and services or events provided that you have agreed to receive such information.
7.1.13. For security, administrative and legal purposes.
7.1.14. For client relations purposes, which may include storage of clients’ marital status and birthdates.
7.1.15. Pitching, opportunity tracking and reporting.
7.1.16. Campaign tracking and reporting.
7.1.17. To communicate with you and retain a record of our communications with you and your communications with us.
7.1.18. To fulfil any contractual obligations that we may have to you or any third party.
7.1.19. To invite you to webinars, functions or events that we may host.
7.1.20. To analyse and compare the types of Access Devices that you and other users make use of and your physical location.
7.1.21. To comply with our statutory and regulatory obligations, including client identification and verification as part of our client onboarding process, and screening clients and visitors’ health when accessing our premises to comply with Covid-19 regulations and protocols.
7.1.22. Any other activities and/or purposes which are lawful, reasonable and adequate, relevant and not excessive in relation to the provision of our services and/or the use of the IZETECH SHOP website, our business activities or such other purpose for which it was collected.
7.2. IZETECH SHOP will obtain your permission before collecting or using your Personal Information for any other purpose.
7.3. IZETECH SHOP processes and stores the customer data of your clients who are hosted on the IZETECH SHOP website and accordingly has responsibility as an operator for the protection of this customer data.
8. Compulsory Personal Information and consequences of not sharing it with us
8.1. The following information is compulsory Personal Information:
8.1.1. Your company name and registration number.
8.1.2. Your contact details, such as your email address, physical address and/or your telephone number.
8.2. Depending on the nature of your engagement or relationship with us, other types of Personal Information may be necessary, including:
8.2.1. Financial (including bank account details, tax information).
8.2.2. Names and registration numbers as contained in documents issued by the Companies and Intellectual Property Commission and the Rwanda Revenue(RRA).
8.2.3. Information which may be necessary to ensure our compliance with the Financial Intelligence Centre Act, 38 of 2001.
8.3. All other Personal Information is optional.
8.3.1. If you do not agree to share the above-mentioned compulsory Personal Information with us, then you will not be able to engage with us or make full use of our products and services and/or the features that are offered to IZETECH SHOP website users, including products and services which are available on the IZETECH SHOP website.
8.3.2. If you do not agree to share your optional information with us, then you might not be able to engage with us fully or receive complete and accurate products and services from us or enjoy all of the features and functionality on the IZETECH SHOP website, including certain content and products and services.
9. Sharing of your Personal Information
9.2. You agree and give permission for us to share your Personal Information in the following circumstances:
9.2.2. With our employees, suppliers, consultants, contractors and agents if and to the extent that they require such Personal Information in order to process it for us and/or in the provision of services for or to us, which include know-how and research, pitching to other clients to obtain further instructions; reporting purposes (e.g. the Rwanda Revenue); hosting, development and administration, technical support and other support services relating to the IZETECH SHOP website or the operation of our business. We will authorise any Personal Information processing done by a third party on our behalf, amongst other things by entering into written agreements with those third parties governing our relationship with them and containing confidentiality; non-disclosure and data protection provisions. Such persons may be disciplined, their contracts terminated or other appropriate action taken if they fail to meet their obligations.
9.2.3. To enable us to enforce or apply our Terms and/or any Agreement you have with us.
9.2.4. To enable us to monitor web traffic: web servers serving the IZETECH SHOP website automatically collect information about pages you visit. This information is used for internal review, to tailor information to individual visitors and for traffic audits.
9.2.5. For statistics purposes: we may perform statistical analyses in order to measure interest in the various areas of the IZETECH SHOP website (for product development purposes)
9.2.6. To protect our rights, property or safety or that of our clients, employees, contractors, suppliers, agents and any other third party.
9.2.7. With governmental agencies and other regulatory or self-regulatory bodies, if required to do so by law or when we reasonably believe that such action is necessary to:
18.104.22.168. comply with the law or with any legal process.
22.214.171.124. protect and defend the rights, property or safety of IZETECH SHOP , or our clients, employees, contractors, suppliers, agents or any third party.
126.96.36.199. protect the rights, property or safety of members of the public (if you provide false or deceptive information or misrepresent yourself, we may proactively disclose such information to the appropriate regulatory bodies and/or commercial entities).
9.3. We will obtain your permission before disclosing your Personal Information to any third party for any other purpose, if we are required by law to do so.
10. Storage and transfer of your Personal Information
10.1. We store your Personal Information on:
10.1.1. Our premises, in the form of hard copies.
10.1.2. The premises of third-party service providers such as document storage service providers.
10.1.3. Our servers.
10.1.4. On the servers of our third-party service providers, such as IT systems or hosting service providers.
10.2. In the event of the scenarios contemplated in clauses 10.1.2 and 10.1.4, we will ensure that we have entered into written agreements with those third-party service providers governing our relationship with them that require them to secure the integrity and confidentiality of Personal Information in their possession by taking appropriate, reasonable technical and organisational measures.
10.3. IZETECH SHOP transfers and store your Personal Information on servers in the Republic of Ireland and we hereby notify you that such jurisdiction has comparable data protection legislation (European Union General Data Protection Regulation (GDPR)). Accordingly, we will take reasonably practicable steps, including the imposition of appropriate contractual terms to ensure that your Personal Information is adequately protected in that jurisdiction.
10.4. Please contact us if you require further information as to the specific mechanisms used by us when transferring your Personal Information outside of Rwanda or to a jurisdiction that is different to the one in which we collected your Personal Information.
11.1. We take reasonable technical and organisational measures to secure the integrity of your Personal Information and using accepted technological standards to prevent unauthorised access to or disclosure of your Personal Information, and protect your Personal Information from misuse, loss, alteration and destruction.
11.2. We review our information collection, storage and processing practices, including physical security measures periodically, to ensure that we keep abreast of good practice.
11.3. We also create a back-up of your information for operational, business continuity and safety purposes and we have a back-up disaster recovery program.
11.4. Despite the above measures being taken when processing Personal Information and Special Personal Information, subject to the provisions of this clause 11.4, as far as the law allows, we will not be liable for any loss, claim and/or damage arising from any unauthorised access, disclosure, misuse, loss, alteration or destruction of your Personal Information.
11.5. IZETECH SHOP has implemented policies and procedures to address actual and suspected data breaches and undertakes to notify you and the relevant regulatory authorities of breaches in instances in which IZETECH SHOP is legally required to do so and within the period in which such notification is necessary.
12. Retention of your Personal Information
12.1. We may keep your Personal Information for as long as you continue to engage with us, provide services or products to us, access the IZETECH SHOP website and content and/or use our products and/or services or for as long as reasonably necessary or until you contact us and ask us to destroy it.
12.2.1. we are required or permitted by law, a code of conduct or a contract with you to do so.
12.2.2. we reasonably need it for lawful purposes related to the performance of our functions and activities.
12.2.3. we reasonably require it for evidentiary purposes; or
12.2.4. you agree to us retaining it for a specified further period.
12.3. To determine the appropriate retention period for Personal Information, IZETECH SHOP will consider, among other things, the nature and sensitivity of the Personal Information, the potential risks or harm that may result from its unauthorised use or disclosure, the purposes for which we process it and whether those purposes may be achieved through other means. IZETECH SHOP will always comply with applicable legal, regulatory, tax, accounting or other requirements as they pertain to the retention of Personal Information, as well as internal information management policies.
13. Maintenance of your Personal Information
13.1. Where required by law, IZETECH SHOP will take all reasonable steps to ensure that your Personal Information is accurate, complete, not misleading and up to date.
13.2. We also acknowledge that you may have rights of access to, and the right to rectify, your Personal Information, and rights to object to the processing of your Personal Information in certain circumstances (clause 14 below contains further information about these rights).
13.3. You must let us know if any of the Personal Information that we have about you is incorrect, incomplete, misleading or out of date.
13.4. Where required by law, we will take reasonable steps to correct or update your Personal Information, accordingly, having regard to the purpose for which such Personal Information was collected or used.
14. Your rights
14.1. Data protection legislation may confer certain rights on you in respect of your Personal Information. We aim to be clear about what Personal Information we collect so that you can make meaningful choices about what Personal Information you make available to us. You may, for example:
14.1.1. Block all cookies, by setting your browser to do so, including cookies associated with our products and services or to indicate when a cookie is being sent by us.
14.1.2. Request access to your Personal Information (commonly known as a “data subject access request”), which indicates what Personal Information we have about you.
14.1.3. Request the correction of your Personal Information, in order to ensure that any incomplete or inaccurate Personal Information is corrected.
14.1.4. Request erasure of your Personal Information, where there is no lawful basis for the retention or continued processing of it.
14.1.5. Object to the processing of your Personal Information for a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms.
14.1.6. Request restriction of processing of your Personal Information. This enables you to ask IZETECH SHOP to suspend the processing of your Personal Information in limited circumstances, which may differ by jurisdiction.
14.1.7. Withdraw consent which you previously gave to the processing of your Personal Information at any time. You may withdraw your consent for us to process your Personal Information at any time. The withdrawal of your consent can only be made by you on condition that such withdrawal of your consent:
188.8.131.52. does not affect the processing of your Personal Information before the withdrawal of your consent; or
184.108.40.206. does not affect the processing of your Personal Information if the processing follows an obligation imposed by law on us; or
220.127.116.11. does not affect the processing of your Personal Information where such processing is necessary for the proper performance of a public law duty by a public body; or
18.104.22.168. does not affect the processing of your Personal Information as required to finalise the performance of a contract in which you are a party; or
22.214.171.124. does not affect the processing of your Personal Information as required to protect your legitimate interests or our own legitimate interests or the legitimate interests of a third party to whom the information is supplied.
14.2. Withdrawal of consent may limit our ability to provide certain products and services to you or the ability of a third party to provide certain products or services to you but will not affect the continued processing of your Personal Information in instances in which your consent is not required.
14.3. As far as the law allows, we may charge a fee for attending to any of the above requests and may also refuse to carry out any of your requests in whole or in part.
16.1. The IZETECH SHOP website and our products or services are not targeted at people under the age of 18.
16.2. We may in limited instances process and store Personal Information of people under the age of 18 in the course of providing services to you. In such cases, we will require your assurance that the Personal Information of customers who are under the age of 18 has been obtained with the consent of a competent person being an adult parent or guardian.
16.3. Our requirements in regard to our processing of your customer data, including consent by a competent person to processing of Personal Information of people under 18 will be included in a separate Operator Agreement with you.
16.4. We will not knowingly collect Personal Information of persons in this age group without express consent to do so or without a legal obligation to do so.
16.5. For any questions in respect of the processing of Personal Information of people under the age of 18, please contact the Information Officer or your IZETECH SHOP contact.
17. Direct Marketing
17.1. IZETECH SHOP processes Personal Information for the purpose of direct marketing by way of electronic communication. We will only send you direct marketing materials if you have specifically opted-in to receive these materials, or if you are a client of IZETECH SHOP , at all times in accordance with applicable laws.
17.2. If you complete the subscription form on the IZETECH SHOP website, you agree to receive marketing communication from us.
17.3. You may refuse to accept, require us to discontinue, or pre-emptively block any approach or communication from us if that approach or communication is primarily for the purpose of direct marketing (“direct marketing communications”).
17.4. You may opt out of receiving direct marketing communication from us at any time by requesting us (in any manner, whether telephonically, electronically, in writing or in person) to stop providing any direct marketing communication to you. You may send your opt-out requests to admin@IZETECH SHOP .com
18. Third Party Sites
18.2. We are not responsible for the privacy practices of such third-party IZETECH SHOP websites, or for any claims, loss or damage arising from these.
19. Consumer Protection Act, Protection of Personal Information Act and other laws
19.2.1. Does or purports to limit or exempt us from any liability (including, without limitation, for any loss directly or indirectly attributable to our gross negligence or wilful default or that of any other person acting for or controlled by us) to the extent that the law does not allow such a limitation or exemption.
19.2.2. Requires you to assume risk or liability for the kind of liability or loss, to the extent that the law does not allow such an assumption of risk or liability.
21. Queries and contact details of the Information Regulator
21.1. Should you feel that your rights in respect of your Personal Information have been infringed, please address your concerns to the Information Officer at admin@IZETECH SHOP .com. If you feel that the attempts by IZETECH SHOP to resolve the matter have been inadequate, you may lodge a complaint with the Rwandan Information Regulator.
21.2. If you are located outside of Rwanda, you may contact the appropriate regulator in your country of domicile.