Privacy & Cookie Policy

Privacy & Cookie Policy

Effective: March 13, 2026 | Last Updated: March 13, 2026

1. Introduction

We develop premium e-commerce themes and software solutions. Our products are listed and sold through third-party e-commerce platforms including Salla and Zid, which handle all transactions, payments, and customer data. Our website (www.alienzhouse.com) serves as a portfolio and showcase and does not process any sales or payment transactions directly.

This Privacy & Cookie Policy explains how we collect, use, store, share, and protect your personal data in accordance with Law N° 058/2021 of 13/10/2021 relating to the protection of personal data and privacy (the "DPP Law") of the Republic of Rwanda.

By using our website or purchasing our products, you acknowledge that you have read and understood this policy.

2. Data Controller Information

Entity Name: Alienzhouse LTD Registration Number (TIN): 155603688 Address: Westerwelle Startup Haus, Gasabo, Kigali, Rwanda Email: hello@alienzhouse.com Phone: +250 799 902 173 Website: www.alienzhouse.com Data Protection Officer: Yassin Abdalla (hello@alienzhouse.com)

3. What Personal Data We Collect

Information You Provide Directly

• Full name
• Email address
• Phone number (optional)
• Billing address
• Store name and URL (for e-commerce theme clients)
• Payment transaction details (processed by third-party payment gateways)

Information Collected Automatically

• IP address
• Browser type and version
• Device information
• Pages visited and time spent on our website
• Cookies and similar tracking technologies

4. Purpose of Processing Personal Data

We process your personal data for the following purposes:

• To deliver digital products (themes and software) you have purchased
• To process payments and issue invoices
• To provide customer support and technical assistance
• To communicate with you regarding orders, updates, or inquiries
• To improve our products, services, and website experience
• To comply with legal and regulatory obligations under Rwandan law

5. Legal Grounds for Processing

We process your personal data based on the following legal grounds under Article 46 of the DPP Law:

• Consent — You have given consent for processing your data for the purposes explained at collection.
• Contractual Necessity — Processing is necessary for the performance of a contract (e.g., purchasing a theme).
• Legal Obligation — Required to comply with Rwandan tax and corporate laws.
• Legitimate Interest — Necessary for our business interests, provided they do not override your fundamental rights.

6. Data Sharing & Recipients

We may share your personal data with the following categories of recipients:

• Payment Gateways — To process transactions (e.g., Salla, Zid platform payment systems)
• Cloud Service Providers — AWS, Vercel, and Neon Database for hosting and infrastructure
• Tax & Regulatory Authorities — Rwanda Revenue Authority (RRA) and other bodies as required by law
• E-commerce Platforms — Salla and Zid, as part of theme delivery and licensing

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

7. International Data Transfers

Your personal data may be transferred to and stored on servers located outside Rwanda, specifically in the United States of America. Our cloud infrastructure providers include AWS, Vercel, and Neon Database.

Such transfers are conducted in compliance with Articles 48 and 50 of the DPP Law. We have obtained the necessary authorization from the National Cyber Security Authority (NCSA) for cross-border data transfers.

All third-party processors implement appropriate technical and organizational measures including SSL/TLS encryption, access controls, and compliance with international security standards.

8. Data Retention

• Client account & transaction data — 5 years from last transaction (Rwandan tax requirements)
• Customer support records — 2 years after resolution
• Website analytics data — 12 months (anonymized/aggregated)
• Marketing communications — Until you withdraw consent

After the applicable retention period, personal data is securely deleted or anonymized.

9. Your Rights

Under the DPP Law, you have the following rights:

• Access — Request a copy of the personal data we hold about you
• Rectification — Request correction of inaccurate or incomplete data
• Erasure — Request deletion of your personal data, subject to legal retention requirements
• Restriction — Request that we limit processing in certain circumstances
• Objection — Object to processing based on legitimate interest
• Data Portability — Request your data in a structured, machine-readable format
• Withdraw Consent — Withdraw consent at any time (does not affect prior processing)
• Appeal — Lodge a complaint with NCSA at dpo.gov.rw

To exercise any of these rights, contact us at hello@alienzhouse.com.

10. Data Security

We implement appropriate measures to protect your data as required by Article 47 of the DPP Law:

• End-to-end SSL/TLS encryption for all data in transit
• Secure access controls with strong password policies and multi-factor authentication
• Regular security assessments and monitoring
• Industry-leading cloud providers compliant with international security standards
• Restricted access to personal data on a need-to-know basis

11. Data Breach Notification

In the event of a personal data breach, we will notify the NCSA within 48 hours and submit a full report within 72 hours, as required by Articles 43 and 44 of the DPP Law.

Where a breach poses a high risk to your rights and freedoms, we will also notify you directly in writing or electronically.

12. Cookie Policy

Cookies are small text files placed on your device when you visit our website. We use a limited number of cookies essential for operation and improvement. We do not use cookies for advertising, cross-site tracking, or profiling.

Cookies We Use

Essential Cookies — Session to 12 months. Required for the website to function (session management, security tokens).

Analytics Cookies — Up to 12 months. Anonymous, aggregated data on page views and performance (Vercel Analytics).

Preference Cookies — Up to 12 months. Remember your settings such as language or display preferences.

Managing Cookies

You can control cookies through your browser settings. Most browsers allow you to view, delete, block third-party cookies, or block all cookies entirely. Blocking essential cookies may affect website functionality.

By continuing to use our website, you consent to cookies as described above. You may withdraw consent at any time by adjusting your browser settings.

13. Children's Privacy

Our products are intended for business clients and are not directed at individuals under 18. We do not knowingly collect personal data from children. If we become aware of such collection, we will delete it promptly.

14. Changes to This Policy

We may update this policy to reflect changes in our practices or legal requirements. Changes will be posted on this page with an updated date.

15. Contact Us

For questions, concerns, or requests regarding this policy or your personal data:

Data Protection Officer: Yassin Abdalla Email: hello@alienzhouse.com Phone: +250 799 902 173 Address: Westerwelle Startup Haus, Gasabo, Kigali, Rwanda

You also have the right to lodge a complaint with:

National Cyber Security Authority (NCSA) Data Protection & Privacy Office Website: dpo.gov.rw Email: complaint@dpo.gov.rw Phone: +250 782 847 756 Address: 21 KG 7 Ave, Kacyiru, A&P Building, Kigali, Rwanda