Privacy notice

Owner review required before launch. The store operator must add the legal business name, confirm the listed practices and retention periods, and have this notice reviewed for the applicable Rwanda requirements.

Operator: IwacuMall, [Store address to be confirmed], [Store phone to be confirmed], [Store email to be added].

Information used to fulfil orders

When you register or order, IwacuMall processes account details such as your name and email, and order details such as your phone number, delivery address, purchased items, invoice totals, payment status and any payment reference submitted to the store.

Why it is used

The store uses this information to manage your account, prepare and deliver orders, issue invoices, provide support, confirm manual invoice payments and protect the service from misuse. Passwords are stored as password hashes. Browser sessions use an HttpOnly session cookie; native app sessions use secure device storage.

Payments and service providers

IwacuMall currently provides manual payment instructions after checkout. This website does not collect card details or confirm transfers automatically. The store may use its configured hosting, MongoDB Atlas and email delivery providers to operate the service. The operator must identify the actual providers, processing locations and any cross-border processing before publication.

Retention and requests

Order and accounting records may need to be retained for operational or legal reasons. The operator must set and publish the applicable retention periods. Customers can request access, correction or account deletion by contacting [Store email to be added]. Account deletion anonymizes account profile details; it does not automatically erase order records needed for store operations.

Cookies and security

The website uses a session cookie to keep you signed in and a separate CSRF cookie to protect account actions. The application applies access controls and password hashing, but customers should use a unique password and keep account access private.

Effective date: [Owner must add the publication date].