Privacy

Privacy notice

Last updated 16 October 2026

This notice explains what personal data MS Cyber collects when you visit mscyber.org or contact us by email, phone, WhatsApp, Facebook or Instagram, what we do with it, and how to ask us to delete it.

Who we are

MS Cyber, Kigali, Rwanda, is responsible for the personal data described here. For anything about your personal data, contact our privacy officer at dpo.support@mscyber.org.

What this website collects

• No cookies, analytics, advertising pixels or embedded content from other companies.
• No forms. The “Could you prove it?” self-check runs entirely in your browser; your answers are not stored or sent anywhere.
• Fonts and images are served from this site, so your browser does not contact other companies when you visit. Links to WhatsApp and Facebook only take you there when you choose to follow them.

The site is hosted by Cloudflare. To deliver it and protect it from attacks, Cloudflare processes technical data such as your IP address, browser type and the pages you request, and may do so outside Rwanda. See Cloudflare’s privacy policy.

When you contact us

If you email, call or message us on WhatsApp, Facebook Messenger or Instagram, or fill in a form in one of our Facebook or Instagram ads, we receive the details you share. That is usually your name, email address, phone number, company, profile name and what you tell us about your needs.

We use this information only to:

• reply to you and answer your questions;
• prepare a proposal, and set up and deliver an engagement if we work together;
• keep a record of what was agreed.

We do not sell personal data, use it for automated decisions about you, or add you to a mailing list without asking first.

Who processes it

• Google provides our email and business tools, so emails and the records we keep are stored by Google.
• Meta runs WhatsApp, Facebook and Instagram. Messages and ad form answers you send us there pass through Meta, which handles them under its own terms. See Meta’s privacy policy and WhatsApp’s privacy policy.
• Cloudflare hosts this website, as described above.

These companies may process data outside Rwanda. We share personal data with anyone else only if the law requires it or you ask us to.

How long we keep it

We keep enquiries only as long as we need them to handle your request. If you become a client, we keep engagement records for as long as the agreement and the law require. After that, we delete them.

Client engagements

Personal data we handle while working on a client’s systems is covered by the written agreement for that engagement, not by this notice.

Your rights

Under Rwanda’s Law No. 058/2021 relating to the protection of personal data and privacy and, where it applies, the EU General Data Protection Regulation, you can ask to see, correct or delete your personal data, object to how we use it, or ask us to restrict it. Email dpo.support@mscyber.org and we will respond within the time the law requires.

You can also complain to Rwanda’s National Cyber Security Authority, which supervises data protection, or to the data protection authority where you live.

How to delete your data

To have us delete the personal data we hold about you, including anything you sent through WhatsApp, Facebook, Instagram or one of our ad forms:

1. Email dpo.support@mscyber.org with the subject “Delete my data”.
2. Tell us the name, email address, phone number or profile name you used to contact us, so we can find your records.
3. We delete your data from our email, files and business records, and reply to confirm when it is done. If the law requires us to keep something, such as an invoice, we tell you what and for how long.

Conversations on WhatsApp, Facebook or Instagram are also stored by Meta. You can delete them from your own app, and use Meta’s settings to manage what Meta keeps.

Changes

If what we collect or how we use it changes, we will update this notice and the date above.