Jya ku bikubiyemo

Politiki y'ibanga

This policy explains how Universal Bridge Ltd ("we") collects and uses personal data through universalbridge.rw. We follow Rwanda's Law No. 058/2021 on the protection of personal data and privacy, and the GDPR for visitors in the European Union.

Who we are

Universal Bridge Ltd, 1st floor, Maison Voisin Building, 11 KN 89 St, Kigali, Rwanda. Contact us about privacy at hello@universalbridge.rw.

What we collect and why

  • Enquiries (contact and demo forms): your name, email, company, country, optional phone and your message, to reply to you. Legal basis: your consent.
  • Applications (Academy, internships, jobs, partners, events): the answers and documents you send, to assess your application. Legal basis: your consent and steps before a contract.
  • Newsletter: your email and language, only after you confirm your subscription.
  • Analytics: visit statistics (Google Analytics, and Plausible where enabled), only if you agree in the cookie banner. Google Analytics uses cookies and a pseudonymous identifier; we turn off its advertising features and Google signals.

We store the wording and version of the consent you gave, and when.

How long we keep it

  • Enquiries: 24 months after our last contact.
  • Unsuccessful applications and CVs: 12 months.
  • Certificates: permanently, so they can be verified.

Expired records are deleted automatically every month.

Who processes data for us

These providers process data on our behalf under contract: Vercel (website hosting), Google (Google Analytics, only with your consent), Resend (email delivery), Sentry (error monitoring) and Cloudflare Turnstile (bot protection). Where data leaves Rwanda, we rely on NCSA authorisation and contractual safeguards. Personal data is stored in Rwanda unless the National Cyber Security Authority (NCSA) authorises storage elsewhere.

Your rights

You can ask to access, correct or delete your data, or object to how we use it. Email hello@universalbridge.rw and we will reply within the legal deadline. You can also complain to the NCSA.

Security

Uploads are stored privately and checked for viruses; staff access is limited by role and logged. If a breach affects your data, we notify the NCSA within 48 hours and inform you where required.