Skip to content

Free delivery anywhere in Rwanda

Policies

Privacy policy

Who we are

This policy explains how Asiimwe Creations ("we", "us") collects and uses personal data when you visit our online shop, create an account, place an order or contact us. We are the data controller for that data.

  • Company: Asiimwe Creations
  • Email: support@asiimwecreations.com
  • Phone: +256 701222297

We process personal data under Rwanda's Law No. 058/2021 of 13/10/2021 relating to the protection of personal data and privacy. The supervisory authority is the National Cyber Security Authority (NCSA), through its Data Protection and Privacy Office.

The personal data we collect

We collect only what we need to sell and deliver our products and to look after you as a customer.

  • Your account: first and last name, email address, phone number, a password (stored only in scrambled, hashed form), a profile photo if you add one, and your two-step verification settings. The sign-in codes we email you expire after a short time.
  • Delivery addresses: the name, phone number and email of the person receiving the order, and the address in Rwanda: street, landmark, village, cell, sector and district.
  • Orders: what you ordered, prices, the delivery fee, any coupon, notes you add, the delivery address, the order's status and any delivery reference our team adds. You can order without an account; we then use the email or phone number you gave to let you look up your order.
  • Payments: the payment method you chose, the order amount, and the references and status our payment provider returns. For MTN MoMo or Airtel Money we use the mobile money number you give us. Card details are entered on our payment provider's secure page: we never see or store your full card number. For cash on delivery we record when the cash was received.
  • Messages to us: when you use our contact form, your name, email address, phone number, the subject, your message and any file you attach, and our replies.
  • Reviews: the name you choose to show, your rating, your review and any photos you add, and the order it relates to.
  • Newsletter: your email address and the date you signed up.
  • Cart and wishlist: the products in your cart or wishlist.
  • Security records: when someone signs in, places an order, sends a form or changes data, we record the time, the IP address, the browser type and what was done, so we can investigate misuse and protect accounts.

We do not ask for sensitive personal data (such as health, religion or biometric data). Our shop is not meant for children under 16, and we do not knowingly collect their personal data.

Why we use it, and our legal basis

  • To carry out our contract with you: to create and run your account, take payment, prepare and deliver your order, arrange cash on delivery, handle cancellations, returns and refunds, and send you emails about your order and account.
  • To meet our legal obligations: to keep sales, payment and tax records as the law requires, and to answer lawful requests from authorities.
  • For our legitimate interests, where they are not overridden by your rights: to keep the shop and your account secure, prevent fraud and misuse, answer your questions, publish and moderate reviews, and improve our products and service.
  • With your consent: to send you our newsletter, and to show the review and photos you choose to post. You can withdraw your consent at any time; this does not affect what we did before.

Giving us your name, contact details and delivery address is needed to place an order: without them we cannot deliver it. Everything else, such as a review, a profile photo or signing up for the newsletter, is up to you.

We do not make decisions about you based only on automated processing, and we do not profile you for advertising.

Who we share it with

We share personal data only with those who need it to provide our service, and we do not sell it.

  • Flutterwave, our payment provider, which processes card payments and MTN MoMo and Airtel Money payments. It receives your name, email address, phone number, the order reference and the amount. If we take card payments through Stripe instead, Stripe receives the same details for card payments.
  • Mobile money operators and card networks (MTN, Airtel, your card issuer), through our payment provider, to complete your payment.
  • Our email delivery service, which sends our account and order emails on our behalf.
  • Our hosting provider, which runs the servers where the shop and its data are kept.
  • Our delivery team, who see your name, phone number, address and order to deliver it.
  • Authorities, courts and our professional advisers, where the law requires it or to establish or defend legal claims.

Each service provider may use your data only to provide its service to us, under a written contract that requires them to keep it secure.

Storage and transfers outside Rwanda

Some of the providers above store or process data outside Rwanda. We store or transfer personal data outside Rwanda only as the law allows: with the authorisation of the supervisory authority, or where the transfer is needed to perform your order (for example to process your payment), and always under a written contract that requires the recipient to protect it.

How long we keep it

  • Account: while your account is open. If you ask us to close it, we delete or anonymise your account details, keeping only what we must keep for the reasons below.
  • Orders and payment records: for as long as tax and accounting law requires us to keep them.
  • Messages to us: for up to two years after the conversation ends, unless they relate to an open claim.
  • Reviews: while they are published, or until you ask us to remove them.
  • Newsletter: until you unsubscribe; your address is then deleted within 30 days. Every newsletter has an unsubscribe link.
  • Guest carts: an empty cart is deleted after a day, and an unused one after 60 days.
  • Security records: for up to 12 months, unless we need them to investigate an incident.

When we no longer need personal data we delete it, or anonymise it so it can no longer identify you.

Your rights

Under Law No. 058/2021 you have the right to:

  • ask what personal data we hold about you and get a copy of it;
  • have inaccurate or incomplete data corrected;
  • have your data erased when we no longer need it, when you withdraw consent, or when it was processed unlawfully;
  • ask us to restrict processing, for example while you challenge its accuracy;
  • object to processing, and object at any time to direct marketing;
  • receive your data in a structured, readable format, or have it sent to another organisation where technically possible;
  • withdraw your consent at any time;
  • not be subject to decisions based solely on automated processing;
  • name an heir for your personal data in your will, and be represented by someone you authorise.

You can update your name, phone number and addresses yourself in your account. For anything else, email us at support@asiimwecreations.com. We may ask you to confirm your identity first. We answer within 30 days.

If you are not satisfied with our answer, you can complain to the Data Protection and Privacy Office of the National Cyber Security Authority: dpo.gov.rw, complaint@dpo.gov.rw. We would appreciate the chance to put things right first.

How we protect it

  • The shop uses an encrypted connection (HTTPS).
  • Passwords are stored only in hashed form, and accounts can use two-step verification.
  • Our staff can see only what their role needs.
  • Card details are handled by our payment provider, never by us.

If a personal data breach happens, we will report it to the supervisory authority within 48 hours of becoming aware of it, as the law requires, and tell you without delay where it is likely to put your rights and freedoms at high risk.

Cookies and storage in your browser

Our shop does not use cookies. It does not use advertising, analytics or social media trackers.

To make the shop work, it keeps a few items in your browser's own storage (local storage and session storage). They are strictly necessary for the service you ask for, so we do not ask for your consent to them. They never leave your device except when sent to our own shop to carry out what you asked.

  • gc_cart_session (local storage): remembers your cart when you are not signed in. Kept until you clear it or the cart is deleted.
  • ac_cart_prices (local storage): remembers the prices you saw, so we can tell you if one has changed. Kept until you clear it.
  • gc_token (local storage): keeps you signed in. Removed when you sign out, or when you are signed out after a period without activity.
  • gc_last_activity (local storage): lets us sign you out after a period without activity. Kept until you clear it.
  • gc_signout_notice (session storage): explains why you were signed out. Removed when you close the tab.
  • ac_order_contact:… (session storage): lets you view a guest order you just placed. Removed when you close the tab.
  • ac_payment_error:… (session storage): shows why a payment did not go through. Removed when you close the tab.

When you pay by card you go to our payment provider's secure page, which sets its own cookies under its own policy. Links to WhatsApp or social networks take you to those services, under their own policies.

You can clear this storage at any time in your browser's settings. If you do, you will be signed out and a guest cart will be emptied.

If we ever add analytics or advertising tools, we will update this policy and ask for your consent before they are used.

Changes to this policy

We may update this policy when our service or the law changes. The date at the top shows when it last changed. If a change affects you significantly, we will tell you by email or on the shop.

Contact us

For any question about your personal data, email support@asiimwecreations.com or call +256 701222297.

Last updated November 2026