TRUST & ACCOUNTABILITY
Privacy Policy
Nurtiva wants people to understand what information we collect, why we collect it, how we use it and what choices people have.
Last updated: 28 August 2026
1. Who this policy is about
This policy applies to personal information collected through the Nurtiva website, website forms, expressions of interest, partnership enquiries and future online donation functions.
Nurtiva is an emerging, community led initiative in Rwanda. We are building our governance, fundraising and data protection systems as the work develops. This policy will be reviewed as those systems become more formal.
2. Information we may collect
- Name and contact details, including email address and phone number.
- Location information that you choose to provide.
- Organisation name, organisation type and professional contact details.
- Your interests, project preferences, skills, availability and reasons for wanting to participate.
- Messages, questions, ideas and other information submitted through our forms.
- Links that you choose to provide, such as a website, portfolio or professional profile.
- Donation information when online giving is activated, such as donor name, email address, amount, frequency, payment status and transaction reference. Full payment card details should be handled by the secure payment provider rather than ordinary Nurtiva contact forms.
- Technical information that may be generated when you use the website, such as device information, browser information, IP address, pages viewed, security information and cookie related data.
3. Why we use personal information
Depending on the situation, Nurtiva may process information based on your consent, steps you ask us to take, legal obligations or other lawful grounds permitted under applicable data protection law.
- To respond to questions, requests and messages.
- To review expressions of interest from community members, contributors and partner organisations.
- To organise participation, communicate relevant opportunities and manage relationships.
- To process and administer donations when secure online giving is activated.
- To keep the website secure, understand how it is used and improve its usefulness.
- To maintain appropriate records and meet legal, financial, safeguarding and accountability responsibilities.
4. Forms and sensitive information
Our website forms are designed for ordinary enquiries and participation information. Please do not submit passwords, payment card numbers, medical records, national identification documents or other highly sensitive information through a general website form unless Nurtiva has specifically provided a secure process for that purpose.
5. Website and service providers
The Nurtiva website is hosted on Cloudflare Pages. Contact and Get Involved submissions are processed by Cloudflare Pages Functions and, when the forms are activated, stored in Nurtiva’s Cloudflare D1 database. Cloudflare Turnstile is used to reduce automated spam and abuse.
Nurtiva’s D1 form records are designed not to intentionally store visitor IP addresses. Cloudflare and Turnstile may still process network, device and security information, including IP information, as part of delivering and protecting their services under their own privacy practices.
Website media is stored with the website repository and delivered through Nurtiva’s Cloudflare-hosted site. Public form submissions are not stored in Pages CMS or GitHub; they use the separate Cloudflare D1 form-response database when forms are enabled.
Website content administration is managed through GitHub and Pages CMS. These administration tools are separate from the public form-response database.
6. Storage and processing outside Rwanda
Some technology providers used by the website may operate infrastructure outside Rwanda. Where personal information is transferred to or stored outside Rwanda, Nurtiva will seek to do so only where permitted by applicable law and with the approvals, contracts and safeguards that are required.
7. How long we keep information
We aim to keep personal information only for as long as it is reasonably needed for the purpose for which it was collected, for legitimate follow up, and for legal, financial, safeguarding or accountability requirements. When information is no longer needed, we aim to delete it, anonymise it or otherwise handle it appropriately. Nurtiva is developing a more detailed retention schedule as its systems mature.
8. Sharing personal information
Nurtiva does not sell personal information. We may share limited information with service providers that support the website or our operations, with project partners where this is necessary and appropriate, or where disclosure is required by law. We aim to limit sharing to what is reasonably necessary for the stated purpose.
9. Children and young people
Some Nurtiva programmes are intended to involve young people. General website forms are not intended to replace programme specific consent and safeguarding procedures for children. Where personal information about a child is needed for an activity, Nurtiva will seek to use appropriate consent, assent, safeguarding and information handling processes for the circumstances.
11. Your privacy rights
Depending on the circumstances and applicable law, you may have rights concerning your personal information, including rights to ask for access, correction, deletion, restriction, objection or information about how your data is being used. You may also be able to withdraw consent where consent is the basis for processing.
If you believe your privacy rights have not been respected, you may also have the right to raise a complaint with the Rwanda Data Protection and Privacy Office or another competent authority.
12. Security
We aim to use reasonable organisational and technical measures to protect personal information. No internet based system can be guaranteed to be completely secure, so we also try to limit the information we collect and the people who need access to it.
13. Contact us about privacy
To ask a privacy question, request access or correction, withdraw a consent where applicable, or raise a concern about how Nurtiva has handled your information, please use our Contact page and clearly state that your message is about privacy.
14. Changes to this policy
We may update this policy as Nurtiva, the website, our service providers or applicable requirements change. The current version will show its latest update date at the top of this page.