Privacy Policy

1. Who We Are

Refugee Horizons is a non-profit organisation registered in Rwanda under the Rwanda Governance Board (RGB), operating in Kirehe District, Eastern Province, Rwanda.

Data Controller: Astere Tuyikorere, Executive Director, info@refugeehorizons.org, Kirehe District, Rwanda

2. What Data We Collect

We collect personal data only when you actively provide it:

• Donations: Name, email, country, phone (MoMo only), amount, payment method, designation.
• Contact form: Name, email, subject, message.
• Partnership inquiries: Name, organisation, email, phone, message.
• Technical: IP address (security/rate-limiting only), browser type.

We do not collect sensitive personal data (health, ethnicity, religion, political views) through this website.

3. How We Use Your Data

• Processing donations: Complete payment, generate and send receipt.
• Recurring giving: Send MoMo reminders or manage Stripe subscriptions; provide self-service cancellation.
• Communication: Respond to contact and partnership inquiries.
• Legal compliance: Financial records as required by Rwandan law and RGB requirements.
• Security: IP addresses used solely to prevent abuse and rate-limit requests.

We do not use your data for marketing without explicit consent. We do not sell or share your data with third parties for their marketing.

4. Legal Basis for Processing

• Contract performance: Processing your donation and sending your receipt.
• Legitimate interests: Responding to inquiries, maintaining security, preventing fraud.
• Legal obligation: Financial records required by Rwandan law.
• Consent: Any optional communications where you have opted in.

5. Third-Party Services

• Stripe: Card payment processing. Stripe processes card details directly — we never see or store your card number. stripe.com/privacy
• MTN Mobile Money: Rwanda MoMo payment processing. Your phone number is shared with MTN to initiate the payment request.
• Google Fonts: Typography (Inter, Poppins). Google may log your IP when fonts load.

6. Data Retention

• Donation records: 7 years (Rwandan financial record-keeping requirements).
• Contact / partnership inquiries: 2 years from submission, then deleted.
• PDF receipts: 12 months on server, then deleted.
• Security logs (IP addresses): 90 days, then deleted.

7. Your Rights

You have the right to: access your data, correct inaccuracies, request deletion (subject to legal retention), object to processing, request portability, and withdraw consent at any time.

Email info@refugeehorizons.org to exercise any right. We respond within 30 days.

8. Cookies

This website uses only a single session cookie (PHPSESSID) strictly necessary for security (CSRF protection) and admin authentication. It is deleted when you close your browser. We do not use tracking, advertising or analytics cookies.

9. Security

We implement HTTPS encryption, parameterised database queries, CSRF protection on all forms, rate limiting on sensitive endpoints, and restricted admin access. No internet transmission is 100% secure, but we take all reasonable precautions.

10. Children's Privacy

This website is not directed at children under 16. We do not knowingly collect personal data from children under 16 through this website. Data about programme beneficiaries is managed separately under our safeguarding framework.

11. Changes to This Policy

We may update this policy periodically. The "Last updated" date at the top reflects any changes. Continued use of this website after changes constitutes acceptance.

12. Contact & Complaints

For privacy questions or to exercise your rights: info@refugeehorizons.org.

If unsatisfied with our response, you may lodge a complaint with the relevant data protection authority in your country of residence.