TRUST & ACCOUNTABILITY
Privacy Policy
This policy explains what personal information Nurtiva may collect, why we use it and the choices available to people who interact with us.
Last updated: 3 September 2026
1. Scope
This policy applies to personal information collected through the Nurtiva website, contact and participation forms, partnership enquiries, programme engagement and related digital interactions.
Nurtiva is a community-led initiative in Rwanda. We apply privacy and information-handling practices appropriate to our activities and review them as our work and legal responsibilities evolve.
2. Information we may collect
- Name and contact details, including email address and phone number.
- Location information that you choose to provide.
- Organisation name, organisation type and professional contact details.
- Your interests, project preferences, skills, availability and reasons for participating.
- Messages, questions, ideas and information submitted through our forms.
- Links you choose to provide, such as a website, portfolio or professional profile.
- Technical information generated when you use the website, such as device information, browser information, IP address, pages viewed, security information and cookie-related data.
- Information connected to any agreed support or contribution where record keeping is necessary.
3. Why we use personal information
Depending on the situation, Nurtiva may process information based on consent, steps you ask us to take, legal obligations or another lawful ground permitted under applicable data protection law.
- To respond to questions, requests and messages.
- To review expressions of interest from community members, contributors and partner organisations.
- To organise participation, communicate relevant opportunities and manage relationships.
- To administer agreed support, contributions or partnership arrangements.
- To keep the website secure, understand how it is used and improve its usefulness.
- To maintain appropriate records and meet legal, financial, safeguarding and accountability responsibilities.
4. Forms and sensitive information
Our general website forms are designed for ordinary enquiries and participation information. Please do not submit passwords, full payment card numbers, medical records, national identification documents or other highly sensitive information through a general website form unless Nurtiva has specifically provided a secure process for that purpose.
5. Website and service providers
The Nurtiva website is hosted on Cloudflare Pages. Contact and Get Involved submissions are processed through Cloudflare Pages Functions, protected with Cloudflare Turnstile, and stored in Nurtiva’s Cloudflare D1 database when forms are enabled.
Website content administration is managed through GitHub and Pages CMS. These administration tools are separate from the public form-response database.
6. Storage and processing outside Rwanda
Some technology providers used by the website may operate infrastructure outside Rwanda. Where personal information is transferred to or stored outside Rwanda, Nurtiva seeks to do so in accordance with applicable law and appropriate safeguards.
7. How long we keep information
We keep personal information only for as long as reasonably needed for the purpose for which it was collected, legitimate follow-up, safeguarding, accountability and applicable legal or financial requirements. Information that is no longer needed is deleted, anonymised or otherwise handled appropriately.
8. Sharing personal information
Nurtiva does not sell personal information. We may share limited information with service providers that support the website or our operations, with project partners where necessary and appropriate, or where disclosure is required by law. We aim to limit sharing to what is reasonably necessary for the stated purpose.
9. Children and young people
Some Nurtiva programmes involve young people. General website forms do not replace programme-specific consent and safeguarding procedures for children. Where personal information about a child is needed for an activity, Nurtiva uses appropriate consent, assent, safeguarding and information-handling processes for the circumstances.
11. Your privacy rights
Depending on the circumstances and applicable law, you may have rights concerning your personal information, including rights to request access, correction, deletion, restriction, objection or information about how your data is being used. You may also be able to withdraw consent where consent is the basis for processing.
If you believe your privacy rights have not been respected, you may have the right to raise a complaint with the Rwanda Data Protection and Privacy Office or another competent authority.
12. Security
We use reasonable organisational and technical measures to protect personal information and aim to limit collection and access to what is necessary for the work.
13. Contact and changes
To ask a privacy question, request access or correction, withdraw consent where applicable or raise a concern, please use our Contact page and clearly state that your message is about privacy.
We may update this policy as Nurtiva, the website, service providers or applicable requirements change. The latest update date appears at the top of this page.