Effective Date: 24/09/2024
Last Updated: 28/10/2025

Introduction

At IgaBusiness Ltd (“IgaBusiness”, “we”, “us”, “our”), we respect your privacy and are committed to protecting your personal data.
This Privacy Policy explains what personal data we collect, how and why we process it, your rights, and the measures we take to keep your information secure.

1. Who We Are

IgaBusiness Ltd is a Rwandan-registered digital marketing and automation consultancy that helps businesses attract, convert, and retain customers using modern marketing systems and AI-powered tools.
We act as both a Data Controller and a Data Processor, depending on the context.

2. What Data We Collect

We collect data such as names, phone numbers, emails, company names, and marketing preferences.
We may also collect technical data like IP addresses, cookies, and device information.
Sensitive data is not intentionally collected.

3. How We Use Personal Data

We use data for service delivery, marketing communication, platform management, customer support, and compliance with legal obligations.
Processing is based on consent, contract, legitimate interest, or legal obligation as defined under Rwanda’s Data Protection and Privacy Law.

4. Data Sharing and Storage

Personal data may be stored on secure servers managed by GoHighLevel Inc. in the United States.
Transfers are governed by GoHighLevel’s Data Processing Agreement (April 2023), which includes EU Standard Contractual Clauses, encryption, and sub-processor transparency (AWS and Google Cloud).

5. Security Measures

We apply strict security controls including:

• AES-256 encryption

• TLS 1.2+ transmission security

• Multi-factor authentication

• Staff confidentiality agreements

• Privacy-by-design practices

6. Data Retention

We retain personal data only as long as necessary to fulfill its purpose or comply with legal obligations.
Once no longer needed, data is securely deleted or anonymized.

7. Your Rights

You have the right to:

• Access, correct, erase, restrict, or object to processing of your data

• Request data portability

• Withdraw consent at any time

Requests can be made by contacting our Data Protection Officer at [email protected].
We respond within 15 working days.

8. Children’s Data

Our services are intended for adults and businesses.
We do not knowingly collect data from children under 16 years of age.

9. Cookies and Analytics

We use cookies to improve functionality and measure engagement.
You can manage or disable cookies in your browser settings.

10. Contact Information

Data Protection Officer: Eric Iradukunda
Email: [email protected]
Phone: +250780848884
Address: KK 718 St, Kigali, Rwanda

If you believe your data protection rights have been violated, you may contact the National Cyber Security Authority – Data Protection and Privacy Office via www.dpo.gov.rw.

11. Policy Acceptance

By engaging with IgaBusiness, submitting a form, subscribing to communications, using our websites or services, or otherwise providing personal data to us, you acknowledge that you have read and understood this Privacy Policy.
If you do not agree with this Policy, please do not use our services or submit personal data.
For clients, our Data Processing Agreements and service contracts govern how we handle personal data processed on your behalf.