Privacy Policy

We collect information you provide directly to us, including:

• Account information — name, email address, password, and phone number when you register.
• Order information — your name, contact details, delivery address, and the devices you order.
• Donation information — your name, email, phone number, preferred currency, and donation amount.
• Messages — the content of enquiries you send through our contact form.

We also collect limited technical data automatically, such as your browser type, IP address, and pages visited, for security and analytics purposes.

We use the information we collect to:

• Process and fulfil your orders and send you order confirmations.
• Follow up on donation interest and coordinate payment.
• Respond to your enquiries and provide customer support.
• Send transactional emails (order updates, donation acknowledgements).
• Improve our website, products, and services.
• Comply with legal obligations applicable under Rwandan law.

We do not use your information for automated decision-making or profiling.

We do not sell or rent your personal information to third parties. We may share your information with:

• Service providers — such as email delivery services (Resend) and image hosting (Cloudinary) that help us operate our platform. These providers are contractually bound to keep your data secure.
• Google — if you sign in using Google OAuth, we receive your name and email address from Google in accordance with their privacy policy.
• Legal authorities — if required by law or to protect the rights and safety of Geuza or others.

We use session cookies to keep you signed in and to maintain your cart between visits. These cookies are strictly necessary for the website to function and are deleted when you sign out or close your browser.

We do not use advertising cookies or tracking pixels from social media platforms on our website.

We take reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, or misuse. Passwords are hashed using bcrypt and never stored in plain text. All data is transmitted over HTTPS.

No method of transmission over the internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

We retain your personal information for as long as your account is active or as needed to provide you with services. If you request account deletion, we will remove your personal data within 30 days, except where we are required to retain it for legal or financial compliance purposes.

Under applicable data protection law, you have the right to:

• Access the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and associated data.
• Withdraw consent where processing is based on consent.

To exercise any of these rights, contact us at info@geuza.africa.

Our website may contain links to third-party websites. We are not responsible for the privacy practices of those sites and encourage you to read their privacy policies before providing any personal information.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of our website after changes are posted constitutes your acceptance of the updated policy.

If you have any questions about this Privacy Policy or how we handle your data, please contact us: