top of page

Privacy Policy

1. Introduction

Better Nutrition and Health for All is committed to protecting the privacy and personal data of all individuals who interact with our programs, website, or services in Rwanda. This Privacy Policy explains how we collect, use, store, and share personal data, in compliance with Rwanda’s Law No. 058/2021 of 13 October 2021 on the Protection of Personal Data and Privacy (“DPP Law”)

2. What Personal Data We Collect

We may collect and process different types of personal data from you, depending on how you interact with us:

  1. Basic Personal Data: Name, email address, phone number, postal address, date of birth.

  2. Health-Related Data: When you participate in our nutrition programs, we may collect health or dietary information (this is “sensitive personal data” under Rwandan law) 

  3. Demographic Information: Gender, income level, education, household composition.

  4. Usage Data: Information about how you use our website or digital platforms (e.g., IP address, browser type, device, cookies).

  5. Consent Records: Records that you have given your consent, preferences, or withdrawal of consent.

3. How We Collect Data

We collect your personal data in several ways:

  • When you sign up for our programs (online or in person)

  • When you contact us (via email, phone, or through our website)

  • When you complete surveys, forms, or assessments in relation to our nutrition services

  • Automatically, via cookies and other tracking technologies, when you use our website

4. Legal Basis for Processing

Under the DPP Law, we rely on the following legal bases:

  • Consent: We will ask for your explicit, informed, and freely given consent for data processing, especially for sensitive personal data (e.g., health information). 

  • Contractual Necessity: To fulfill our contractual obligations (e.g., delivering nutrition services).

  • Legitimate Interests: For internal research, program evaluation, and improving our services — in a way that does not override your rights.

  • Legal Obligations: When required by Rwandan law.

5. How We Use Your Data

We use personal data to:

  • Provide and manage nutrition and health programs

  • Monitor and evaluate program effectiveness

  • Communicate with you about our programs, events, and resources

  • Conduct research and data analysis for public-health purposes

  • Comply with legal obligations and reporting

  • Customize and improve our digital services (e.g., website optimization)

6. Data Sharing and Disclosure

We may share your personal data with:

  • Our Partner Organizations: Local NGOs, healthcare providers, or community-based organizations collaborating with us

  • Third-Party Service Providers: For hosting, analytics, IT support — always under contractual arrangement with confidentiality and security guarantees

  • Regulators or Authorities: If required by law

  • International Transfer: If we transfer data outside Rwanda, we will ensure there are adequate safeguards in place, as required under Rwandan law and inform you before sharing your data

7. Your Rights

Under Rwanda’s DPP Law, you have certain rights regarding your personal data:

  • Right of Access: You may request a copy of the data we hold about you. 

  • Right to Rectification: You can ask us to correct inaccurate or incomplete data. 

  • Right to Erasure (“Right to be Forgotten”): You may ask us to delete your personal data under certain conditions. 

  • Right to Restrict Processing: You may ask us to limit how we process your data. 

  • Right to Object: You can object to our processing, especially when it is based on legitimate interests. 

  • Right to Data Portability: You may request that we send your data to another data controller, when technically feasible. 

  • Right to Withdraw Consent: If you consented to a particular use of your data, you may withdraw that consent at any time, without affecting the lawfulness of the processing done before withdrawal. 

  • Right to Lodge a Complaint: If you believe your rights under the DPP Law are violated, you can file a complaint with the supervisory authority (National Cyber Security Authority / Data Protection & Privacy Office). 

8. Children’s Data

If our services involve children or minors, we will take special care in the collection, processing, and storage of their personal data. We will primarily rely on parental or guardian consent, and we will limit the data to what is strictly necessary for the purpose of the service.

9. Contact Us

If you have any questions, concerns, or requests related to your personal data, please contact our Data Protection Officer:

Name: Carrie Anne Lamienne

Email: lamienneanne@gmail.com

Tel: +250 785 556 428

Address:

Rwanda

Southern Province

Kamonyi District

Runda Sector

Gihara Cell

​

Last Edited on 2025-11-16

bottom of page