Privacy Policy

Melah Luxe ("we," "us," or "our") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or make purchases from us.

1. Company Information

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Contact Information: Name, email address, phone number, mailing address
• Account Information: Username, password, account preferences
• Payment Information: Billing address, payment method details (processed securely through third-party payment processors)
• Order Information: Purchase history, delivery preferences, product reviews

2.2 Automatically Collected Information

• Technical Information: IP address, browser type, device information, operating system
• Usage Information: Pages visited, time spent on site, click patterns, referral sources
• Location Information: General location based on IP address for shipping and tax purposes

3. How We Use Your Information

We use your information for the following purposes:

• Process and fulfill your orders
• Communicate with you about your purchases and account
• Provide customer support and respond to inquiries
• Send promotional emails and marketing communications (with your consent)
• Improve our website and services
• Prevent fraud and ensure security
• Comply with legal obligations
• Analyze website usage and customer trends

4. Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except in the following circumstances:

4.1 Service Providers

We may share information with trusted third-party service providers who assist us in:

• Payment processing (IremboPay — Rwanda's licensed payment aggregator, which handles Mobile Money, card, and bank transactions)
• Shipping and delivery services
• Email marketing and communications
• Website hosting and analytics
• Customer support services

4.2 Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities, including:

• Rwanda Revenue Authority (RRA) for tax purposes
• Rwanda Development Board (RDB) for business registration compliance
• Law enforcement agencies when legally required
• Courts or legal proceedings

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Secure payment processing through certified providers
• Regular security assessments and updates
• Access controls and staff training
• Secure cloud hosting infrastructure

6. Your Rights

Under Rwandan data protection principles, you have the following rights:

• Access: Request information about the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal data (subject to legal requirements)
• Portability: Request a copy of your data in a portable format
• Opt-out: Unsubscribe from marketing communications
• Withdraw Consent: Withdraw consent for data processing where applicable

To exercise these rights, contact us at info@melahluxe.com or +250 788 710 688.

7. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services and fulfill orders
• Comply with legal obligations (minimum 7 years for financial records as per RRA requirements)
• Resolve disputes and enforce agreements
• Improve our services

8. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and login information
• Analyze website traffic and usage patterns
• Provide personalized content and recommendations
• Enable social media features

You can control cookies through your browser settings, but some features may not function properly if cookies are disabled.

9. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

10. Children's Privacy

Our services are not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately.

11. International Data Transfers

Your information may be stored and processed in servers located outside Rwanda, including in the United States and European Union, where our cloud service providers operate. We ensure appropriate safeguards are in place for such transfers.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending an email notification to registered users
• Displaying a prominent notice on our website

13. Compliance with Rwandan Laws

This Privacy Policy complies with:

• Rwanda's Constitution regarding privacy rights
• Law on Cyber Security and Cyber Crime Prevention
• E-commerce regulations
• Consumer protection laws
• Tax and business registration requirements

14. Contact Information

15. Language

This Privacy Policy is provided in English. In case of any discrepancies with translations, the English version shall prevail. We may provide translations in Kinyarwanda and French upon request.