Privacy Policy
PARADOX Technology Ltd is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, and your rights under applicable Rwandan data protection law.
1 Data Controller
The data controller responsible for your personal information is:
- Name: PARADOX Technology Ltd
- Address: KN 7 Ave, Kigali, Nyarugenge District, Rwanda
- Email: paradoxteck@gmail.com
- Phone: +250 786 431 004
2 What Data We Collect
When you register for a program or interact with PARADOX Technology, we may collect the following categories of personal data:
| Category | Examples | Required? |
|---|---|---|
| Identity Data | First name, last name, date of birth | Yes |
| Contact Data | Email address, phone number | Yes |
| Academic Data | Category (TVET/University), level, institution, field of study | Recommended |
| Payment Data | Payment method preference, MoMo number (used for confirmation only) | Yes |
| Technical Data | Browser type, device type (collected automatically when using our website) | Automatic |
3 How We Collect Data
We collect personal data through the following means:
- Registration Form: Information you provide directly when registering online.
- Email Communications: Data included in emails you send to us.
- In-Person: Information provided during on-site registration or orientation sessions.
- Program Participation: Attendance records, assignment submissions, and performance data collected during the course of your program.
- Website Analytics: Anonymised usage data collected through our website.
4 Why We Use Your Data
We use your personal data for the following purposes:
- Program Administration: Processing your registration, communicating enrollment status, and managing your participation.
- Certification: Generating and issuing your Certificate of Completion with accurate personal details.
- Communication: Sending confirmation emails, program updates, reminders, and important notices.
- Payment Processing: Confirming payment and managing financial records.
- Safety & Welfare: Maintaining emergency contact information and ensuring participant wellbeing.
- Improvement: Analysing program performance and feedback to improve our offerings (data is anonymised where possible).
- Legal Compliance: Fulfilling obligations under Rwandan law, including record-keeping requirements.
5 Legal Basis for Processing
Under Rwanda's Law No. 058/2021 of 13/10/2021 on the Protection of Personal Data and Privacy, we process your personal data on the following legal bases:
- Contractual Necessity: Processing required to fulfil our agreement with you (program enrollment and delivery).
- Legal Obligation: Where processing is required to comply with applicable law.
- Consent: For marketing communications and optional data collection, where you have given explicit consent. You may withdraw consent at any time.
- Legitimate Interests: For internal analytics and service improvement, where your interests and rights do not override ours.
6 Data Sharing & Third Parties
We do not sell your personal data. We may share it with the following parties only where necessary:
- UniPod / University of Rwanda: For certificate recognition and co-program administration.
- EmailJS: Our email delivery provider, used to send registration confirmations. Data transmitted is limited to name, email, and registration details. EmailJS acts as a data processor under contractual obligation.
- Regulatory Authorities: Where required by Rwandan law or a valid legal order.
We do not share your data with advertisers or unaffiliated third parties for marketing purposes.
7 Data Retention
We retain your personal data for as long as necessary to fulfil the purposes for which it was collected:
- Registration and enrollment records: 5 years after program completion.
- Certificate records: Indefinitely, for verification purposes.
- Payment records: 7 years, in compliance with Rwandan financial regulations.
- Marketing communications: Until you unsubscribe or withdraw consent.
After the retention period, data is securely deleted or anonymised.
8 Data Security
We implement appropriate technical and organisational measures to protect your personal data, including:
- Encrypted transmission of data where applicable (HTTPS).
- Access controls limiting who can view personal data within our organisation.
- Regular review of data handling practices.
- Using reputable third-party service providers with their own security certifications.
No data transmission over the internet is 100% secure. While we take all reasonable steps, we cannot guarantee absolute security. In the event of a data breach that poses a risk to your rights, we will notify you and the relevant authorities as required by law.
9 Your Rights
Under Rwandan data protection law, you have the following rights regarding your personal data:
Request a copy of the personal data we hold about you.
Request correction of inaccurate or incomplete data.
Request deletion of your data where there is no lawful basis for retention.
Receive your data in a structured, machine-readable format.
Object to processing based on legitimate interests or direct marketing.
Request restriction of processing while disputes are resolved.
To exercise any of these rights, contact us at paradoxteck@gmail.com. We will respond within 30 days.
10 Children & Minors
Our programs are open to participants aged 15 and above. We do not knowingly collect data from individuals under 15.
For participants aged 15–17 (minors under Rwandan law), we require:
- Parental or guardian consent before enrollment.
- A parent or guardian contact to be provided during registration.
- All communications regarding minors' enrollment to be directed to the parent or guardian where appropriate.
If you believe a minor under 15 has submitted data to us without parental consent, please contact us immediately and we will take steps to delete that information.
11 Cookies & Website Usage
Our website uses browser localStorage (not traditional cookies) to store your preferences, such as dark/light theme settings and course enrollment status. This data is:
- Stored only on your device — not transmitted to our servers.
- Used purely to improve your experience.
- Cleared when you clear your browser data.
We do not use tracking cookies, advertising pixels, or third-party analytics that collect personally identifiable information.
12 Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last Updated" date at the top of this page will always indicate when the most recent revision was made.
For significant changes, we will notify enrolled participants by email. We encourage you to review this policy periodically.
13 Contact & Complaints
For any questions about this Privacy Policy, or to exercise your data rights, please contact:
- Email: paradoxteck@gmail.com
- Phone: +250 786 431 004
- Address: PARADOX Technology Ltd, KN 7 Ave, Kigali, Rwanda
If you are not satisfied with our response, you have the right to lodge a complaint with Rwanda's data protection authority.