Privacy Policy

This Privacy Policy explains how the Rwanda Heart Care and Research Foundation (“the Foundation”, “we”, “us” or “our”) handles personal information when you visit rwandaheartcentre.org, contact us, or make a donation through a link on our website. We aim to handle personal information lawfully, fairly and securely under applicable data-protection law, including Rwanda’s Law No. 058/2021 relating to the protection of personal data and privacy.

Who is responsible for your information
The Foundation is the organization responsible for personal information covered by this Policy. Our website lists our address as Masaka Health City, Kigali, Rwanda. For privacy questions or requests, contact info@rwandaheartcentre.org

Information we collect
The information we collect depends on how you use the website. It may include:

• Contact-form information, such as your name, email address and the message you send us.
• Donation information needed to record and acknowledge a gift, such as the donation amount, currency, date, transaction reference and any contact details provided. Donations are handled through Flutterwave; payment-card details are entered with the payment provider and are not submitted through our website contact form. Confirm what transaction and donor details Flutterwave shares with the Foundation
• Technical information about visits to the website, such as device and browser details, pages visited, approximate location, and cookie or analytics identifiers, depending on your cookie choices and the tools currently enabled.
• Please do not use the website contact form to send medical records, detailed health information or other sensitive personal information. If the Foundation needs to collect health information for care or research, it should provide a separate privacy notice explaining that specific processing.

How we use information
We may use personal information to respond to enquiries, administer and acknowledge donations, maintain and secure the website, understand website use where analytics cookies are permitted, meet legal or accounting obligations, and protect the Foundation against fraud or misuse. We will use information only for purposes that are compatible with the reason it was collected or as otherwise permitted by law.

Our legal grounds for processing
Where the law requires us to identify a legal basis, we rely on the basis that applies to the particular activity. This may include your consent, taking steps you request, our legitimate interests in operating the Foundation and website, or compliance with a legal obligation. We will seek consent where required, including for non-essential cookies where applicable.

Cookies and similar technologies
Our website uses necessary cookies to support core functions. With your consent where required, it may also use cookies for functionality, performance, analytics or advertising. The cookie banner lets you manage non-essential cookie choices. You can also adjust your browser settings, although blocking some cookies may affect website features. The cookie list and descriptions should be kept accurate and updated as website tools change.

Who we share information with
We may share relevant information with service providers that help us operate the website, communicate with you, process donations, protect the site or measure its use. These providers may include our website host, email provider, analytics or cookie tools, security or spam-prevention services, and Flutterwave for donation payments. We may also disclose information where required by law or necessary to establish, exercise or defend legal claims. We do not sell personal information. Each provider’s role and the information it receives should be limited to what is needed for its service

International Data Transfers
The Foundation is based in Rwanda and may work with service providers or partners in other countries. Personal information may therefore be accessed or stored outside the country where it was collected. Where applicable law requires safeguards for an international transfer, we will use a lawful transfer mechanism and appropriate protections.

How long we keep information
We keep personal information only for as long as needed for the purposes described above, including to respond to you, maintain donation and accounting records, meet legal requirements and resolve disputes. The appropriate period depends on the type of information and why it was collected.

How we protect information
We use appropriate technical and organizational measures to protect personal information against unauthorized access, loss, misuse or disclosure. No website or electronic transmission can be guaranteed to be completely secure. If you think your information has been misused or exposed, contact us promptly at info@rwandaheartcentre.org.

Your rights
Depending on the law that applies to you, you may have rights to request access to your personal information, correction, deletion, restriction of processing, objection to certain processing, or withdrawal of consent. You may also have the right to complain to the relevant data-protection authority. To make a request, email info@rwandaheartcentre.org . We may need to verify your identity before responding and will respond within the time required by applicable law.

Children and third-party websites
This website is intended to provide information about the Foundation and its work. It is not designed to collect personal information directly from children. If a child’s information is submitted to us by mistake, a parent or guardian may contact us to discuss its removal. Our website may link to third-party sites, including Flutterwave. Those services operate under their own privacy notices, which you should review before providing information or making a payment.

Changes and contact
We may update this Policy when our activities, website or legal obligations change. The current version will be published on this page with its revision date. Questions or requests can be sent to info@rwandaheartcentre.org or by post to Rwanda Heart Care and Research Foundation, Masaka Health City, Kigali, Rwanda.

Policy Last Updated October 2026