Your privacy matters to us

1. Who we are

IRONFIBER LTD is the data controller for personal information collected through this website and our business operations. We are based in Kigali, Rwanda.

Contact our data privacy team at info@ironfibers.com.

2. Information we collect

We may collect the following categories of personal information:

• Contact information: name, email address, phone number, and organisation name provided via our contact form or WhatsApp.
• Order information: product enquiries, order details, and delivery addresses shared when placing orders.
• Usage data: IP address, browser type, pages visited, and time spent on the site, collected automatically via server logs.
• Communications: messages sent to us via the contact form, email, or WhatsApp.

We do not collect payment card details directly and do not use tracking cookies or third-party analytics platforms on this website.

3. How we use your information

We use your personal information to:

• Respond to your enquiries and process your orders.
• Communicate confirmations, updates, and relevant product information.
• Improve our website and services based on usage patterns.
• Comply with legal obligations under Rwandan law.
• Protect the security and integrity of our systems.

We do not use your personal information for automated decision-making or profiling.

4. Legal basis for processing

We process your personal data on the following legal bases:

• Contractual necessity: to fulfil orders and service agreements.
• Legitimate interests: to respond to enquiries and improve our services.
• Legal obligation: to comply with applicable Rwandan laws and regulations.
• Consent: where you have explicitly provided consent, such as subscribing to communications.

5. Data sharing

We do not sell, rent, or trade your personal information. We may share data with:

• Service providers: trusted third parties who assist with delivery, IT infrastructure, or communications, bound by confidentiality obligations.
• Legal authorities: where required by law, court order, or regulatory authority in Rwanda.
• Business transfers: in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

6. Data retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by law. Contact form submissions are retained for up to 2 years. Order records may be retained for up to 7 years for accounting and legal compliance purposes.

7. Data security

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, loss, or disclosure. These include encrypted connections (HTTPS), access controls, and regular security reviews. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

8. Your rights

Under Rwanda's Law No. 058/2021 on Personal Data Protection, you have the right to:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure: request deletion of your data where there is no legitimate reason for us to continue processing it.
• Restriction: request that we limit how we use your data in certain circumstances.
• Objection: object to processing based on legitimate interests.
• Portability: receive your data in a structured, machine-readable format.
• Withdraw consent: where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at info@ironfibers.com. We will respond within 30 days.

9. WhatsApp communications

When you contact us via WhatsApp, your messages and phone number are processed by Meta Platforms, Inc. under their own privacy policy. We use WhatsApp solely to respond to your enquiries and process orders. We do not store WhatsApp conversations on our servers beyond what is necessary for order fulfilment.

10. Children's privacy

Our website and services are not directed at children under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected such information, please contact us immediately.

11. Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. We encourage you to review this policy periodically. Continued use of our website after changes constitutes acceptance of the updated policy.

12. Contact us

For any privacy-related questions, requests, or complaints, please contact: