Privacy Policy
Last updated: 1/1/2026. Your privacy is critically important to us. This comprehensive privacy policy explains in detail how Initiative Tech Solutions Ltd ("we," "our," or "us") collects, uses, protects, and handles your information when you use our services.
1. Information We Collect
We collect information you provide directly to us, information we obtain automatically when you use our services, and information from third-party sources.
Personal Information You Provide
- Contact Information: Name, email address, phone number, mailing address
- Account Information: Username, password, profile picture, preferences
- Project Details: Business requirements, technical specifications, project files
- Communication Data: Messages, feedback, support requests
- Payment Information: Billing details, payment method information (processed securely through third-party providers)
- Professional Information: Job title, company name, industry, company size
Information Automatically Collected
- Device Information: IP address, browser type, operating system, device identifiers
- Usage Data: Pages visited, time spent, click patterns, features used
- Location Data: General geographic location based on IP address
- Log Data: Access times, pages viewed, app crashes, system activity
- Cookies and Tracking: Session cookies, persistent cookies, web beacons
2. How We Use Your Information
We use collected information for various purposes in accordance with applicable law:
Service Provision
- Deliver, maintain, and improve our software development services
- Process transactions and send related information
- Provide customer support and technical assistance
- Send technical notices, updates, and support messages
- Manage your account and provide personalized experiences
Communication and Marketing
- Send marketing communications (with your consent)
- Respond to comments, questions, and customer service requests
- Provide information about new services, features, or offerings
- Conduct surveys and research to improve our services
Legal and Security
- Comply with legal obligations and regulatory requirements
- Protect against fraud, abuse, and security threats
- Enforce our Terms of Service and other agreements
- Resolve disputes and troubleshoot problems
3. Information Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:
With Your Consent
We share information when you explicitly consent to such sharing.
Service Providers
We may share information with trusted third-party service providers who assist us in operating our website and conducting our business, under strict confidentiality agreements.
Legal Requirements
- Comply with legal obligations, court orders, or government requests
- Enforce our Terms of Service or protect our rights
- Protect against fraud or security issues
- Support law enforcement investigations when required
Business Transfers
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the business assets.
4. Data Retention
We retain your information for different periods based on the type of information and its purpose:
- Account Information: Retained while your account is active and for up to 3 years after account closure
- Project Data: Retained for the duration of the project and up to 5 years after completion for legal and warranty purposes
- Communication Records: Retained for up to 3 years for customer service and legal purposes
- Marketing Data: Retained until you unsubscribe or withdraw consent
- Technical Logs: Generally retained for 1 year for troubleshooting and security purposes
When information is no longer needed, we securely delete or anonymize it in accordance with our data retention schedule and applicable laws.
5. Data Security
We implement comprehensive security measures to protect your personal information:
Technical Safeguards
- Encryption of data in transit using HTTPS and SSL/TLS protocols
- Encryption of sensitive data at rest using industry-standard encryption
- Regular security assessments and vulnerability testing
- Firewalls, intrusion detection systems, and monitoring tools
- Secure access controls and multi-factor authentication for employees
Administrative Safeguards
- Limited access to personal information on a need-to-know basis
- Regular employee training on data protection and privacy
- Incident response procedures and breach notification protocols
- Regular backups with secure storage and encryption
Important: While we implement robust security measures, no system is completely immune to risks. We encourage you to use strong passwords and keep your account information secure.
6. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to enhance your experience and analyze usage patterns:
Types of Cookies We Use
- Essential Cookies: Required for basic website functionality
- Performance Cookies: Help us understand how visitors interact with our site
- Functional Cookies: Remember your preferences and settings
- Marketing Cookies: Used to deliver relevant advertisements (with consent)
Managing Cookies
You can control cookies through your browser settings. Please note that disabling certain cookies may affect website functionality.
7. Third-Party Services
Our services may contain links to or integrate with third-party websites and services:
- We are not responsible for the privacy practices of third-party sites
- We encourage you to review the privacy policies of third-party services
- Third-party services may collect information about your use of their services
- Some integrations may involve sharing limited information necessary for functionality
Specific third-party services we may use include payment processors, analytics tools, communication platforms, and development tools.
8. International Data Transfers
Initiative Tech Solutions Ltd serves clients across Africa and internationally. We may transfer your information to various countries for service provision:
Data Transfer Destinations
- Primary Operations: Servers and operations in Rwanda, Kenya, South Africa, and Ghana
- Cloud Services: Data centers in the European Union, United States, and South Africa
- Development Teams: Collaboration across multiple African countries and international locations
- Third-Party Services: Global service providers located in various jurisdictions worldwide
Cross-Border Safeguards
We ensure appropriate safeguards for international data transfers:
- Standard Contractual Clauses approved by relevant authorities
- Adequacy decisions where applicable (e.g., EU-Africa transfers)
- Binding Corporate Rules for intra-group transfers
- Industry-standard encryption and security measures
- Regular compliance audits and assessments
Pan-African & Global Compliance: By using our services, you consent to the transfer of your information across African borders and internationally, where such transfers are necessary for service provision and comply with applicable data protection frameworks.
9. Your Rights and Choices
You have certain rights regarding your personal information:
Access and Information
- Right to access the personal information we hold about you
- Right to receive a copy of your data in a structured, machine-readable format
- Right to know the source of your personal information
Correction and Updates
- Right to correct inaccurate or incomplete information
- Right to update your personal information
- Right to amend your communication preferences
Deletion and Restriction
- Right to request deletion of your personal information (subject to legal limitations)
- Right to restrict processing of your data in certain circumstances
- Right to object to processing for direct marketing purposes
To exercise these rights, please contact us using the information provided below.
10. Children's Privacy
Our services are not intended for children under 18 years of age:
- We do not knowingly collect personal information from children under 18
- If we become aware of collecting information from a child under 18, we will delete it promptly
- Parents or guardians who believe their child has provided us with personal information should contact us immediately
If you are under 18, please do not use our services or provide any personal information to us.
11. Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect:
- Changes in our data collection and use practices
- New features or services that affect privacy
- Updates to applicable laws and regulations
- Improvements to our privacy and security measures
Notification of Changes: We will notify you of material changes by posting the updated privacy policy on our website and updating the "Last updated" date at the top of this policy. For significant changes, we may also send email notifications or provide in-app notifications.
Your continued use of our services after changes become effective constitutes acceptance of the updated privacy policy.
12. Data Protection Officer
Initiative Tech Solutions Ltd has appointed a Data Protection Officer to oversee our data protection strategy and compliance:
Data Protection Officer
Initiative Tech Solutions Ltd
Norrsken House & MIC Complex
KN 86 St, Kigali, Rwanda
Email: privacy@itsltd.online
Phone: +250 791 891 254
13. Complaints and Contact Information
If you have any questions, concerns, or complaints about this privacy policy or our data practices:
Contact Us:
Initiative Tech Solutions Ltd
Norrsken House & MIC Complex
KN 86 St, Kigali, Rwanda
Phone: +250 791 891 254
Email: privacy@itsltd.online
We will respond to your inquiry within 30 days of receipt. If you are not satisfied with our response, you may have the right to lodge a complaint with the relevant data protection authority in your jurisdiction.
14. Compliance with Laws
This privacy policy complies with applicable data protection laws across Africa and internationally, including:
African Data Protection Laws
- Rwanda: Law N° 058/2021 on the protection of personal data and privacy
- South Africa: Protection of Personal Information Act (POPIA)
- Kenya: Data Protection Act 2019
- Nigeria: Nigeria Data Protection Regulation (NDPR)
- Ghana: Data Protection Act 2012
- Other African Nations: Applicable local data protection legislation
International Standards
- GDPR: General Data Protection Regulation (EU) 2016/679 for EU residents
- CCPA: California Consumer Privacy Act for California residents
- UK GDPR: UK General Data Protection Regulation for UK residents
- PIPEDA: Personal Information Protection and Electronic Documents Act (Canada)
- APPI: Act on the Protection of Personal Information (Japan)
We regularly review our privacy practices to ensure ongoing compliance with evolving legal requirements across all markets we serve.