Legal
Privacy policy.
What is collected on this site, why, and how you stay in control of it.
Last updated: 28 October 2026
This policy explains what personal data is collected on martinmawo.com, why, who receives it, how long it is kept and how you can exercise your rights. It is written to meet Rwanda's Law No 058/2021 of 13/10/2021 relating to the protection of personal data and privacy.
1. Who is responsible for your data
The data controller is Dr Mawo Martin Luther, KG 438 Street, Kinyinya, Gasabo, Kigali, Rwanda. For any question or request about your personal data, write to drmartinmawo@gmail.com.
2. What we collect and why
| When | Data | Purpose | Legal basis |
|---|---|---|---|
| You subscribe to the newsletter or request the free guide | First name, email address, date of subscription | Send the guide and new essays | Your consent (you can withdraw it at any time) |
| You buy an ebook | Name, email, billing details, order history, payment reference | Process the order, deliver the ebook, issue an invoice | Performance of a contract; legal obligation (accounting) |
| You create a member account | Name, email, password (stored encrypted), membership details | Give you access to member content and courses | Performance of a contract |
| You write through the contact form | Name, phone (optional), email, your message | Answer your request | Your consent; legitimate interest in replying |
| You comment on an article | Name, email, comment, IP address | Publish and moderate comments, block spam | Your consent; legitimate interest in preventing spam |
| You browse the site and accept analytics cookies | Pages viewed, device and browser type, approximate location, pseudonymous identifiers | Measure the audience and improve the content | Your consent |
| Every visit | IP address, browser, requested page, time (server logs) | Security and protection against attacks | Legitimate interest in keeping the site secure |
We do not sell your data and we do not use it for automated decisions that have legal or similarly significant effects on you.
3. Who receives your data
Your data is only shared with the service providers needed to run the site, each acting on our instructions:
- Hostinger International Ltd: website hosting; servers in the United States (Phoenix, Arizona).
- MailerLite (UAB MailerLite): newsletter delivery; European Union (Lithuania).
- Google LLC: audience measurement with Google Analytics, only if you accept analytics cookies; United States.
- Automattic Inc. (Akismet): spam filtering of comments; United States.
- Our bank, when you pay by bank transfer; and the tax authorities when the law requires it.
Some of these providers are outside Rwanda. When data is transferred abroad, we use providers that offer appropriate safeguards for the protection of personal data, as required by Law No 058/2021.
4. How long we keep it
- Newsletter: until you unsubscribe (one click in every email).
- Orders and invoices: for the period required by Rwandan tax and accounting law.
- Member accounts: as long as the account is open; deleted within 30 days after you close it.
- Contact messages: 24 months after our last exchange.
- Comments: as long as the article is online, or until you ask us to remove them.
- Analytics data: up to 14 months.
- Server security logs: up to 30 days.
5. Cookies
Strictly necessary cookies keep the site working: your cart and checkout (WooCommerce), your login (WordPress and member area) and the details you choose to remember in the comment form. They do not require consent.
Analytics cookies (Google Analytics, for example _ga) are only placed after you accept them in the cookie banner, and you can change your choice at any time.
6. Your rights
Under Law No 058/2021 you have the right to:
- access your personal data and receive a copy of it;
- have inaccurate data corrected and incomplete data completed;
- have your data erased;
- object to processing, including for direct marketing, and withdraw your consent at any time;
- ask for processing to be restricted;
- receive your data in a portable format;
- not be subject to a decision based solely on automated processing.
To exercise these rights, write to drmartinmawo@gmail.com. We answer within 30 days. If you are not satisfied with our answer, you may lodge a complaint with the National Cyber Security Authority (NCSA), the Rwandan supervisory authority for personal data protection.
7. Security
The site uses HTTPS encryption, a security firewall, protected administrator access and regular backups. Passwords are never stored in readable form.
8. Children
This site is intended for professionals. We do not knowingly collect data from children under 16.
9. Changes to this policy
We may update this policy when the site or the law changes. The date at the top shows the latest version.