Privacy Policy
Last updated: 23 October 2026
Mutangana Tea respects your privacy. This Privacy Policy explains what personal data we collect when you use mutanganatea.com (the "Website"), how we use it, who we share it with, and the rights you have. The Website is operated by Mutangana Tea Group Ltd, part of Mutangana Tea ("we", "us", "our").
We process personal data in accordance with Law No. 058/2021 of 13/10/2021 relating to the protection of personal data and privacy of the Republic of Rwanda.
1. Who Is Responsible for Your Data
Mutangana Tea Group Ltd is the data controller for personal data collected through the Website.
- Registered name: Mutangana Tea Group Ltd
- Address: KG 7 Ave, Kigali, Rwanda
- Data protection contact: [email protected]
- Phone: +250 788 100 001
- NCSA registration number: [to be added once registered with the National Cyber Security Authority]
2. Data We Collect
2.1 Data you give us
| When | Data collected |
|---|---|
| Placing an order | Full name, phone number, email address, delivery address, order details |
| Making a payment | Payment method chosen, MoMo phone number, transaction reference and status |
| Contacting us | Name, contact details, and the content of your message |
| Subscribing to news (if offered) | Email address |
We do not require you to create an account. Instead, we recognize returning customers by their phone number and email address so that their orders are linked together. Using a new delivery address does not create a new customer record.
2.2 Data we do not collect
We never receive or store your full card number, card security code (CVV), or Mobile Money PIN. These are handled entirely by our payment providers, MTN Mobile Money and Pesapal.
2.3 Data collected automatically
When you visit the Website, we may collect limited technical information such as your IP address, browser type, device type, pages visited, and the date and time of your visit. This helps us keep the Website secure and understand how it is used.
3. How We Use Your Data
| Purpose | Legal basis |
|---|---|
| Processing, delivering, and following up on your orders | Performance of a contract |
| Processing payments and refunds, and preventing fraud | Performance of a contract and legitimate interest |
| Sending confirmations, updates, and service messages | Performance of a contract |
| Responding to your enquiries and providing support | Legitimate interest |
| Keeping your order history so you don't need to re-enter details | Legitimate interest |
| Sending news or promotions (only if you opt in) | Consent |
| Keeping accounting and tax records | Legal obligation |
| Securing and improving the Website | Legitimate interest |
We do not sell your personal data, and we do not use it for automated decisions that produce legal effects on you.
4. Who We Share Your Data With
We share only what is necessary, with:
- Payment providers: MTN Mobile Money and Pesapal, to process your payments and refunds.
- Delivery partners: your name, phone number, and delivery address, so your order can reach you.
- Email and SMS service providers: to send confirmations and service messages.
- Hosting provider: DigitalOcean, which hosts the Website and its databases.
- Mutangana Tea: the Website shares a common platform with other Mutangana Tea websites, and authorized group staff may access data where needed to manage the platform.
- Authorities: where required by law, a court order, or to protect our legal rights.
All service providers act on our instructions and are required to keep your data secure and confidential.
5. International Transfers
Some of our service providers, including our hosting provider, may store or process data on servers located outside Rwanda. Where this happens, we transfer data only in accordance with Law No. 058/2021, including any authorization required from the supervisory authority, and we ensure appropriate safeguards are in place to protect your data.
6. How Long We Keep Your Data
- Order and payment records: for as long as required by Rwandan tax and accounting laws, typically 10 years.
- Customer contact details and order history: for as long as you remain an active customer, and up to 3 years after your last order.
- Enquiries: up to 12 months after the matter is resolved.
- Newsletter subscriptions: until you unsubscribe.
- Technical logs: up to 90 days.
After these periods, data is deleted or anonymized.
7. How We Protect Your Data
We use appropriate technical and organizational measures, including:
- encrypted connections (HTTPS);
- role based access, so staff can only see the data needed for their role;
- secure hosting with restricted access to databases;
- payments handled entirely by certified payment providers.
No system is completely secure. If a personal data breach occurs that is likely to affect your rights, we will notify the National Cyber Security Authority and, where required, inform you without undue delay.
8. Your Rights
Under Rwandan law, you have the right to:
- access the personal data we hold about you;
- correct data that is inaccurate or incomplete;
- request deletion of your data, subject to our legal record keeping obligations;
- object to or restrict certain processing;
- withdraw consent at any time, for example by unsubscribing from marketing messages;
- data portability, receiving your data in a commonly used format;
- lodge a complaint with the National Cyber Security Authority (NCSA) if you believe your data has been mishandled.
To exercise any of these rights, contact us at [email protected]. Because we do not use accounts, we will verify your request using the phone number or email address you provided to us. We will respond within 30 days.
9. Cookies
We use a small number of cookies and similar technologies:
- Essential cookies: required for the Website to work, such as keeping items in your cart during checkout.
- Analytics cookies (if used): help us understand how visitors use the Website so we can improve it. These are only set with your consent where required.
You can control or delete cookies through your browser settings. Blocking essential cookies may prevent parts of the Website from working correctly.
10. Children's Privacy
The Website is not intended for children under 18, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us and we will delete it.
11. Third Party Websites
The Website may link to external websites, including other Mutangana Tea websites, payment pages, and social media. Their privacy practices are governed by their own policies, and we encourage you to read them.
12. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on this page with its "Last updated" date. Where changes are significant, we will make reasonable efforts to inform you.
13. Contact Us
For any questions about this Privacy Policy or your personal data:
- Email: [email protected]
- Phone: +250 788 100 001
- Address: KG 7 Ave, Kigali, Rwanda