Privacy and Data Protection Notice

1. What personal data we collect

MOVEMAX Logistic Ltd collects only the personal data required for each stage of participation:

• Public agent applicants: Full name, Rwandan mobile number, optional alternative phone, village, age band (never date of birth), occupation, availability, smartphone access, and consent records. We never collect national ID numbers, bank/mobile-money details, or photographs on the public application form.
• Activated village agents & supervisors: Identity verification details, payout account details, training completions, GPS visit logs, and submitted field evidence.
• Partner & client contacts: Organisation name, contact name, role, business email, and telephone number.

2. Why we use your data and lawful basis

We process personal data in accordance with Rwanda Law No. 058/2021 relating to the protection of personal data and privacy: (a) with your explicit consent when submitting an application or enquiry; (b) to perform our contractual obligations with approved agents, employees, clients, and partners; and (c) to comply with statutory financial, tax, and audit recordkeeping obligations.

3. Who your data is shared with

Access is strictly role-scoped and geography-scoped. Supervisors see only agents in their assigned cell, sector, or district. Partner verifiers see only pre-checked submissions under their own organisation's contracts. Confidential complaints are stored in an isolated vault accessible only to designated Management investigators outside the supervision chain.

4. How long data is kept

Unsuccessful applications are retained only for the configured recruitment review cycle and then disposed of through an audited process. Financial ledgers, commission records, verified deliverables, and audit events are retained for the statutory financial retention period.

5. Cookies and offline device storage

The public website uses strictly necessary cookies for CSRF security and your chosen language preference (stored for one year). No tracking cookies or third-party session recorders are loaded before consent. For signed-in field agents who install the app, assigned forms and unsynced submissions are stored locally in IndexedDB until synchronised.

6. Your data subject rights

You have the right to request access to the personal data we hold about you, request correction of inaccurate details, withdraw consent for optional processing, or lodge a complaint with the National Cyber Security Authority (NCSA) Data Protection Office in Rwanda.

7. Data Protection Contact and how to complain

Data Protection Officer — MOVEMAX LOGISTIC LTD
Norrsken Office, 1 KN 78 St, Kigali, Rwanda
Email: [email protected] · Tel: +250 788 303 195