Privacy Policy

This policy explains how ETITE Ltd (“ETITE”, “we”) handles the personal data you share with us through this website, etite.tech, and the rights you have under Rwanda’s Law No. 058/2021 of 13/10/2021 relating to the protection of personal data and privacy.

Who is responsible for your data#

ETITE Ltd, a software and IT services company based in Kigali, Rwanda, is the data controller for the personal data collected through this website. For any question about this policy or your data, email us at support@etite.tech or use the details on our Contact page.

What we collect#

When you fill in a form. The general question form asks for your name, email address and message, and optionally your phone number and company. The free consultation form asks for your name, email address, the service you need and a description of your project, and optionally your company, an estimated budget and a timeline. The ETITE ERP access form asks for your name, work email address and company, and optionally your team size. With each form we also record the language of the page you used, the date and time you sent it, that you ticked the consent box, and the version of this policy you agreed to.

We do not ask for sensitive data such as identity numbers, dates of birth, health or financial details. Please do not include them in your message.

When you visit the website. Like most websites, our servers record technical information about each request: your IP address, your browser type, the page requested, the time and the result. To prevent abuse, the forms and the staff sign-in count recent requests from each visitor using a one-way code made from the IP address; the count is kept in the server’s memory for a few minutes and never written to disk.

Spam protection. Our forms check that they were sent by a person with a small calculation that runs in your browser and is verified on our own server. It sends nothing to third parties and sets no cookies.

Why we use your data, and on what basis#

To reply to you. We use the details you send through a form to answer your message, arrange a consultation, prepare a proposal or tell you about the product you asked about. We do this with your consent, which you give by ticking the box on the form. You can withdraw your consent at any time (see “Your rights” below); this does not affect what we did before you withdrew it.

To keep the website secure and working. We use server logs and request counts to run the website, prevent abuse and fix problems. We do this because it is necessary for our legitimate interest in operating a secure website.

We do not sell your data, we do not use it for advertising or send you marketing emails, and we make no automated decisions about you.

Who receives your data#

Your form messages are read only by the authorised ETITE staff who handle enquiries, in the website’s administration panel and in the ETITE mailbox.

We use service providers who process data on our behalf and only on our instructions:

OVHcloud runs the servers, the database and the file storage of this website.

Amazon Web Services (Amazon SES) delivers the email that brings each form message to our team.

Our backup storage provider keeps encrypted copies of the website’s database.

We do not share your data with anyone else unless the law requires us to.

Where your data is stored#

The personal data you give us through this website is stored on servers operated for ETITE by OVHcloud, outside Rwanda. Images published on the website, such as team photos, are stored in OVHcloud Object Storage. Encrypted backups are kept in separate, off-site storage. Amazon Web Services may process the notification emails outside Rwanda. Wherever your data is processed, it is protected as described in this policy.

Our products and the software we build for clients#

This policy covers the personal data collected through this website. ETITE's software products and the systems we build for our clients are covered by their own terms:

ETITE's software-as-a-service products. We work with international hosting providers and with hosting providers in Rwanda. Individuals and small companies who use our products accept that their data may be hosted in Rwanda or outside Rwanda. Enterprise customers can ask us to deploy their own instance in the country of their choice, for example in Rwanda or in their own country to meet its data protection rules; any additional hosting cost is agreed with them.

Software we build for clients. When we develop a system for a client, the client decides where its data is stored and acts as the data controller. We share our insight and recommendations, and the client chooses between hosting in Rwanda or abroad.

How long we keep your data#

Form messages: 12 months after you send them, then deleted automatically from the website. The copy of each message in our mailbox is deleted after 12 months too. If your enquiry leads to a contract, we keep what that work needs in our business records for as long as the contract and the law require.

Backups: data we delete can remain in our encrypted backups for up to about 30 more days, until those backups expire.

Server logs: about 30 days.

Request counts: a few minutes.

How we protect your data#

The website is served over an encrypted connection (HTTPS). Only authorised ETITE staff can read form messages, each with their own account, a strong password and an automatic lock after repeated failed sign-ins. Backups of the database are encrypted before they leave the server.

Your rights#

Under Law No. 058/2021 you have the right to:

Be informed about how we use your personal data, which is what this policy does.

Access the personal data we hold about you and receive a copy of it.

Rectification: have inaccurate or incomplete data corrected.

Erasure: have your data deleted.

Object to our use of your data.

Withdraw your consent at any time.

The law gives you further rights, which you can exercise in the same way. To exercise any of them, email support@etite.tech, ideally from the address you used in the form. We may ask you to confirm your identity before we act, and we will reply as soon as we can.

If you think we have not handled your personal data properly, please tell us first so we can put it right. You can also complain to the National Cyber Security Authority (NCSA), Rwanda’s supervisory authority for personal data protection, at dpo.gov.rw.

Cookies and browser storage#

We do not use analytics, advertising or tracking cookies. The public website stores only these small preferences in your browser, and only when you use the feature:

Language: a cookie named NEXT_LOCALE, set when you choose a language and kept for one year, so the website opens in that language on your next visit.

Colour theme: an entry named payload-theme in your browser’s local storage, set when you choose light or dark mode and kept until you clear it.

Translation notice: when you close the notice that a page is not yet translated, your browser remembers it for that page until you close the tab (session storage).

Staff who sign in to the website’s administration panel also get the sign-in and preference cookies it needs. None of this is used to track you.

Links to other services#

Our WhatsApp links open WhatsApp, and what you send there is handled by WhatsApp under its own terms before it reaches ETITE’s WhatsApp account. Where a page offers a map from OpenStreetMap, the map loads only after you choose “Show map”; OpenStreetMap then receives your IP address and browser details under its own privacy policy.

Changes to this policy#

When we change this policy, we update the “Last updated” date at the top of this page. Each form message records the version of the policy that was in force when you sent it.

Contact us#

ETITE Ltd, Kigali, Rwanda. Email: support@etite.tech.