Privacy Policy

Introduction

Kosmotive ("Kosmotive," "we," "us," or "our") is a Rwanda-based social enterprise focused on maternal and reproductive health. This Privacy Policy explains how we collect, use, share, and protect your personal information across our website (kosmotive.rw), our KosmoHealth mobile application, KosmoMag, KosmoPads, and any other services we operate (together, the "Services"). By using our Services, you agree to the practices described in this policy. If you do not agree, please do not use our Services.

1. Who this policy applies to

This policy covers:

• Visitors to kosmotive.rw and our partner microsites.
• Users of the KosmoHealth mobile app.
• Customers ordering KosmoPads or other products.
• Readers subscribing to Kosmos Magazine.
• Anyone submitting a contact form, partnership inquiry, or newsletter signup.
• Anyone contacting us through social media or WhatsApp.

2. How We Use Your Information

Information you give us directly:

• Contact details: name, email address, phone number, organization (for partnership inquiries), physical address (for deliveries).
• Account information, if you register on the KosmoHealth app (e.g. username, date of birth, profile details).
• Health-related information you choose to share through KosmoHealth, such as menstrual cycle tracking, symptoms, or health questions you submit.
• Order and payment details when you purchase KosmoPads or other products (we do not store full card numbers, payments are processed by our licensed payment processor).
• Anything you submit through our forms: contact messages, partnership inquiries, catalog requests, magazine sign-ups, volunteer applications.

Information collected automatically:

• Usage data: pages visited, time spent, links clicked, referring website.
• Device and technical data: IP address, browser type, operating system, device identifiers.
• Cookies and similar tracking technologies (see Section 8).

Information from third parties:

• If you sign in via a third-party service, or if a partner organization refers you to us, we may receive basic contact details from them.

3. How we use your information

We use your information to:

• Operate and improve our websites and the KosmoHealth app.
• Process and fulfil KosmoPads and product orders.
• Respond to contact, partnership, and volunteer inquiries.
• Send the KosmoMag newsletter, catalog information, and updates you've requested, you can unsubscribe at any time.
• Understand how our Services are used so we can improve them (aggregated, de-identified analytics).
• Communicate service updates, security notices, and policy changes.
• Comply with legal obligations, prevent fraud, and protect the safety of our users and staff.

We do not use your health-related information for advertising, and we do not sell it to third parties, under any circumstances.

4. Legal basis for processing (where applicable)

Depending on the interaction, we process your data on the basis of: your consent (e.g. newsletter sign-up, health data in the app), the performance of a contract (e.g. fulfilling a product order), our legitimate interests (e.g. improving our Services, preventing fraud), or a legal obligation we must comply with. Where we rely on your consent, you may withdraw it at any time.

5. How we share your information

We do not sell or rent your personal data. We may share it with:

• Service providers: who help us operate, payment processors, delivery/ logistics partners, email and SMS providers, hosting and analytics providers, under agreements that limit their use of your data to the services they provide us.
• Legal and regulatory authorities where required by law, court order, or to protect the rights, property, or safety of Kosmotive, our users, or others.
• Successors:, in the event of a merger, acquisition, or sale of assets, you would be notified before your data is transferred under materially different terms.
• Partner organizations, only with your explicit consent. for example, if you request to be connected with a distributor or NGO partner.

6. Data retention

We retain personal information only as long as necessary for the purposes described in this policy, or as required by law. [Specify retention periods here, e.g.: contact form submissions are retained for 24 months; order records are retained for 5 years for tax/accounting purposes; health data in the KosmoHealth app is retained until you delete your account or request deletion.] You may request earlier deletion at any time (see Section 7).

7. Your rights and choices

Under Rwanda's Law N° 058/2021 relating to the Protection of Personal Data and Privacy, and consistent with international best practice, you have the right to:

• Access the personal information we hold about you.
• Correct inaccurate or incomplete information.
• Request deletion of your information, subject to legal retention requirements.
• Object to or restrict certain processing.
• Withdraw consent at any time, where processing is based on consent.
• Request a copy of your data in a portable format.
• Opt out of marketing communications at any time (via the unsubscribe link or by contacting us directly).
• Lodge a complaint with Rwanda's National Cyber Security Authority (NCSA) if you believe your data has been mishandled.

To exercise any of these rights, contact us using the details in Section 12.

8. Cookies and tracking technologies

We use cookies and similar technologies to keep the website functional, remember your preferences, and understand how visitors use our Services (analytics). You can control or disable cookies through your browser settings; disabling some cookies may affect site functionality. We do not use cookies to track you across unrelated third-party websites for advertising purposes.

9. Data security

We implement technical and organizational safeguards, including encrypted connections (HTTPS), access controls on our systems, and regular monitoring to protect your information. However, no online platform or app can guarantee absolute security. We encourage you to use strong passwords and to contact us immediately if you suspect unauthorized access to your account.

10. International data transfers

Our websites and app infrastructure may be hosted or processed in countries outside Rwanda. Where this happens, we take steps to ensure your data continues to receive an appropriate level of protection, consistent with Rwandan law.

11. Third-party links

Our websites and app may link to third-party websites or services (including our partner platforms, KosmoPads and KosmoHealth, and social media). We are not responsible for the privacy practices of these third parties. Please review their own privacy policies before sharing your information with them.

12. Children's privacy

Our general Services are not directed at children under 18. The KosmoHealth app may be used by adolescents as part of its health-education purpose; where this is the case, we limit data collection to what is necessary, and encourage parental/guardian involvement where appropriate. We do not knowingly collect personal information from young children without appropriate consent. If you believe a child has provided us with personal information inappropriately, please contact us so we can remove it.

13. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, our Services, or the law. We will post the updated version here with a revised "Last updated" date, and where changes are significant, we will provide additional notice (e.g. via the app or a website banner).

14. Contact us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, contact us at: Kosmotive KG 19 Ave, 9, Kimironko, Kigali, Rwanda. Email: Phone: +250 780 315 562 / +250 786 305 924