Privacy policy

MOA Mart is operated by TIEFLABS LTD, KG 551, Kigali, Rwanda. TIEFLABS LTD decides how and why your personal data is used, and is responsible for it. You can reach us at moamart250@gmail.com or +250 798 433 900.

• Your account: first and last name, email address, and your password (kept in a protected form by our login service). If you sign in with Google, we receive your name and email from Google. You can also save a phone number and a default delivery location.
• Your orders: the items, amounts, the name, phone number and location you give for delivery, the status of the order, and any cancellation or refund.
• Your payments: the mobile money provider and number you pay with, and the status and reference numbers of the payment. Your mobile money PIN is entered on your phone. We never see it.
• Your messages: what you write to us in the chat, and the notifications we send you about your orders.
• If you shop as a guest: we create a temporary guest session so you can place and follow orders on that device.
• Technical data: your IP address and device details appear in the server logs of our hosting provider when you visit the site.

• to take your order, collect payment, deliver it and send refunds;
• to answer your messages and help you with an order;
• to tell you about your order and payment through notifications;
• to keep the shop secure and prevent fraud and misuse;
• to keep the records we are required to keep, for example for accounting.

We share personal data only with the services we need to run the shop, and only what they need:

• Supabase: our database, login and file storage. Your data is stored in Ireland (EU).
• PawaPay, with MTN and Airtel: to request and receive your mobile money payment and to send refunds.
• Vercel: hosts the website.
• Google: sign-in, if you choose to sign in with Google, and the fonts used on our pages. jsDelivr serves our icon font. They can see your IP address when your browser loads these files.
• the people who deliver your order, who receive your name, phone number and delivery location;
• authorities, when the law requires it.

We do not sell your personal data.

Our database is in Ireland (EU). Some of our other providers may process data in other countries, including outside Rwanda. We only use providers that we need to run the shop.

• Orders and payment records: as long as we need them for accounting and legal duties.
• Your account: until you ask us to delete it.
• Notifications: read ones are removed automatically after 30 days, and all of them after 90 days.
• Chat messages: kept so we can help you again, until you ask us to delete them.

Under Rwandan data protection law you can ask us to:

• show you the personal data we hold about you and give you a copy;
• correct anything that is wrong or out of date;
• delete your data, or limit how we use it;
• stop using it for a purpose you object to.

Write to moamart250@gmail.com. We may need to confirm that the request really comes from you. Some records, such as paid orders, we must keep for legal reasons, and we will tell you if that applies.

The site uses an encrypted connection (HTTPS). Only people on our team who need access can see orders and messages. Payments are handled by your mobile money provider. No system is completely safe, so if something affects your data we will tell you and the authorities as the law requires.

We use your browser's storage to keep your cart, your saved items, your sign-in and the state of the chat. We do not use advertising cookies. If we ever add analytics, we will update this page first.

MOA Mart is for adults. Please ask a parent or guardian to order for you if you are under 18.

Please contact us first, so we can put things right. You can also complain to Rwanda's data protection authority, the National Cyber Security Authority (NCSA).

When we change this policy we update the date at the top. For questions, write to moamart250@gmail.com.