Privacy
Privacy Policy
Last updated: November 2026
1. Who we are
HerReach is a Rwanda-based platform connecting customers, buyers and institutions with women-owned businesses. HerReach is the data controller for the personal data described here, under Law No 058/2021 of 13/10/2021 relating to the protection of personal data and privacy.
2. Personal data we collect
- Business owners: name, email, phone and WhatsApp number, business name, location (province, district), logo, photos and product details.
- Buyers contacting a business: organisation name (optional), product wanted, quantity and the channel chosen (WhatsApp or call).
- Bulk order requests: name or organisation, product, quantity, deadline, contact details and payment reference.
- Visitors: anonymous counts of profile views and contact clicks. We do not link these to individuals.
3. Why we use it
- To publish and verify business profiles.
- To connect buyers with businesses and follow up on requests.
- To process bulk sourcing requests and confirm the sourcing fee.
- To keep accounts secure and improve the service.
4. Legal grounds
We process data based on your consent (for example, when you register or submit a request) and where it is necessary to provide the service you asked for. You may withdraw consent at any time.
5. Who we share it with
Business contact details are shown publicly only on the channels the owner chooses to publish. Buyer request details are shared with the relevant business to fulfil the request. We do not sell personal data. We may disclose data to authorities where required by Rwandan law.
6. Where data is stored
Our website is hosted using cloud service providers, which may store data on servers outside Rwanda. Where this applies, HerReach seeks the authorisation required by the Data Protection and Privacy Office.
7. How we protect it
Access to personal data is restricted to authorised HerReach administrators and the account owner. Accounts are protected by passwords, and business photos are stored privately.
8. How long we keep it
We keep data only as long as needed for the purposes above, or as required by law. You can ask us to delete your account and data at any time.
9. Your rights
You have the right to be informed, to access, correct or delete your personal data, to object to processing, and to withdraw consent. You may also lodge a complaint with the National Cyber Security Authority (Data Protection and Privacy Office).
10. Contact us
For any privacy question or request, email rtetasonia@gmail.com.