A-Z Manufacturing Ltd
Effective date: 29 September 2026

A-Z Manufacturing Ltd ("A-Z", "we", "us") respects your privacy. This Privacy Policy explains how we collect, use, share and protect your personal data when you visit our website, order our products or services, use Smart Uhira or A-Z SmartCare, train with A-Z Academy, or contact us. We process personal data in accordance with Law No. 058/2021 of 13/10/2021 relating to the Protection of Personal Data and Privacy of the Republic of Rwanda, and other applicable laws.

1. Who We Are (Data Controller)

The data controller responsible for your personal data is:
A-Z Manufacturing Ltd
Karongi District, Western Province, Rwanda
Phone / WhatsApp: 0787 198 994
Email: [email protected]

2. Personal Data We Collect

• Identity and contact data: name, phone number, email address, delivery or installation address, district and country.
• Order and transaction data: products or services ordered, prices, payment method, payment references and payment screenshots or receipts you send us. We do not collect or store your MoMo PIN, bank card numbers or online banking passwords.
• Communication data: messages you send us by WhatsApp, email, phone, the contact form or support tickets.
• Account data: if you create an account, your login email and encrypted password, order history and wishlist.
• Technical data: IP address, browser type, device information, pages visited and cookies (see Section 9).
• Smart Uhira and A-Z SmartCare data: farm or site location, sensor readings (soil moisture, temperature, pH, EC, humidity, light), irrigation and equipment records, and machine maintenance history.
• A-Z Academy data: trainee name, contact details, education background, attendance and training records.
• Newsletter data: your email address, if you subscribe.

We do not intentionally collect sensitive personal data. Please do not send us such data unless it is necessary.

3. How and Why We Use Your Personal Data

• To process and deliver your orders: confirming availability and price, receiving payment, delivery, installation and operator training. Legal basis: performance of a contract.
• To provide after-sales service: maintenance, repairs, spare parts, warranty and A-Z SmartCare services. Legal basis: performance of a contract.
• To operate Smart Uhira: automated irrigation, alerts and recommendations. Legal basis: performance of a contract and your consent.
• To run A-Z Academy training: registration, attendance, certificates. Legal basis: performance of a contract.
• To answer your questions and support requests. Legal basis: your request and our legitimate interests.
• To keep financial and tax records. Legal basis: compliance with legal obligations.
• To send newsletters, offers and product news. Legal basis: your consent, which you may withdraw at any time.
• To protect our website and customers, prevent fraud and improve our services. Legal basis: our legitimate interests.

4. Who We Share Your Data With

We do not sell your personal data. We share it only when necessary, with:

• Payment providers (MTN Mobile Money Rwanda, I&M Bank Rwanda) to receive and confirm payments.
• Delivery and transport partners to deliver your machine.
• Technology service providers who host our website, email and systems, and communication platforms such as WhatsApp.
• Professional advisers such as accountants, auditors and lawyers.
• Public authorities (for example the Rwanda Revenue Authority, RICA or courts) when required by law.

Our service providers may only use your data to provide services to us and must protect it.

5. Storage and Transfer Outside Rwanda

Some of our service providers (for example website hosting, email and messaging platforms) may store or process data outside Rwanda. Where personal data is stored or transferred outside Rwanda, we do so in accordance with Law No. 058/2021, including any authorisation required from the supervisory authority, and we take reasonable steps to ensure your data is adequately protected.

6. How Long We Keep Your Data

We keep personal data only as long as needed for the purposes described above:

• Order, payment and accounting records: for the period required by Rwandan tax and accounting laws.
• Warranty, maintenance and machine service records: for the service life of the machine or the duration of the service contract.
• Academy training records: as long as needed to confirm your training and issue certificates.
• Marketing data: until you unsubscribe or withdraw consent.

After that, we delete or anonymise the data securely.

7. How We Protect Your Data

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure. These include access restricted to authorised staff, password-protected systems, encrypted website connections (HTTPS) and confidentiality obligations for staff and service providers. No system is completely secure. If a personal data breach occurs that is likely to affect your rights, we will notify the supervisory authority and, where required, you, as provided by law.

8. Your Rights

Under Law No. 058/2021, you have the right to:

• be informed about how your personal data is processed;
• access your personal data and obtain a copy;
• request correction of inaccurate or incomplete data;
• request deletion of your data, where the law allows;
• object to the processing of your data, including for direct marketing;
• request restriction of processing;
• data portability: receive your data in a structured format or have it transferred;
• withdraw your consent at any time, without affecting processing done before withdrawal;
• not be subject to a decision based solely on automated processing that produces legal or similarly significant effects for you;
• lodge a complaint with the supervisory authority.

To exercise your rights, contact us at [email protected] or WhatsApp 0787 198 994. We may ask you to confirm your identity and will respond within the time required by law.

9. Cookies

Our website uses cookies and similar technologies to keep your cart and login working, remember your preferences (such as currency), and understand how the website is used. You can accept or refuse non-essential cookies using the cookie banner, and you can delete or block cookies in your browser settings. Some parts of the website may not work properly without essential cookies.

10. Children

Our website and products are intended for adults. We do not knowingly collect personal data from children through this website. A-Z Academy trainees under 18 may only register with the consent of a parent or legal guardian.

11. Third-Party Links

Our website contains links to third-party services such as WhatsApp, Instagram, YouTube and Google. Their own privacy policies apply when you use them, and we are not responsible for their practices.

12. Complaints

If you have a concern about how we handle your personal data, please contact us first so that we can resolve it. You also have the right to lodge a complaint with Rwanda's supervisory authority for personal data protection, the National Cyber Security Authority (NCSA).

13. Changes to This Policy

We may update this Privacy Policy from time to time. The updated version will be published on this page with a new effective date. Significant changes will be communicated on our website.

14. Contact Us