PRIVACY POLICY

Last Updated: November 2025

This Privacy Policy explains in detail how Rwanda Papers ("Rwanda Papers", "we", "our", "us") collects, uses, stores, shares, and sells personal and behavioural information when you use rwandapapers.rw. Rwanda Papers is owned and operated by Taptic (Pty) Ltd, a private South African company specialising in data-driven educational technology. Additional disclosures, governance frameworks, and compliance documentation can be found at:

https://policy.taptic.org

We comply with Rwanda's Law No. 058/2021 Relating to the Protection of Personal Data and Privacy and adopt global privacy norms similar to those used by major analytics, ad-tech, and cloud providers. This policy provides expanded explanations to ensure transparency, clarity, and full awareness of how your data is handled.

By using our website, you consent to all practices outlined here.

1. Information We Collect

We collect different categories of information to operate, improve, and monetise the platform through voluntary submissions, automated tracking tools, analytics systems, cookies, server logs, and third‑party integrations.

1.1 Information You Provide Voluntarily

You may voluntarily provide information when interacting with Rwanda Papers. This includes:

• Name
• Email address
• Contact form submissions
• Support or enquiry messages
• Requesting assistance or sharing feedback
• Participating in any promotional or research activities

This information helps us respond to enquiries, improve the platform, and maintain accurate user communication records.

1.2 Automatically Collected Information

When you browse the website, various technical and behavioural data points are collected automatically through browser requests, cookies, and analytics systems. These data points help us understand how you interact with the site, diagnose errors, analyse user patterns, and optimise performance.

Examples include:

• IP address and general geographic location (region/city)
• Browser type and device specifications
• Operating system
• Pages visited and duration
• Click activity and navigation behaviour
• Session duration and timestamps
• Referring URLs
• Region‑level geolocation
• Advertising identifiers
• Downloads and resource access patterns

This information paints a broad picture of platform usage, allowing us to enhance educational materials and maintain operational stability.

1.3 Cookies, Pixels, and Tracking Technologies

We use multiple forms of tracking technologies, each serving different purposes:

• Essential functional cookies maintain login sessions, prevent fraud, and ensure core features work.
• Analytical cookies (e.g., Google Analytics) help us measure site performance and identify which resources are useful.
• Advertising cookies from Google AdSense personalise ads, track ad performance, and limit repeated impressions.
• Behavioural/session tracking technologies (available via Wix) show aggregated user interactions to improve usability.

Cookie disabling may degrade website functionality. Cookies are standard industry tools that support user experience and platform optimisation.

2. How We Use Your Information

We process and analyse collected information to operate effectively and improve our services. Common purposes include:

• Operate and maintain Rwanda Papers
• Improve website functionality, content, and user experience
• Deliver personalised and contextual advertisements
• Conduct analytics on usage behaviour and educational resource demand
• Detect fraud, enhance security, and protect system integrity
• Support internal R&D within Taptic (Pty) Ltd
• Comply with obligations under the Rwanda Data Protection Law (Law No. 058/2021)
• Developing new features or educational tools under the Taptic (Pty) Ltd portfolio

We also use aggregated trends for reporting, operational strategy, and development of educational insights.

3. Data Selling & Data Licensing (Important Disclosure)

Rwanda Papers and Taptic (Pty) Ltd engage in data selling, licensing, and data-driven commercial partnerships. This is conducted under strict internal governance in line with the Taptic (Pty) Ltd business and research framework.

3.1 Types of Data That May Be Sold or Licensed (Data Eligible for Commercial Use)

We may sell or license non-sensitive categories of personal and behavioural information, including:

• Device metadata
• Session patterns and usage metrics
• Behavioural data (interaction patterns, clicks, downloads, browsing paths, resource access)
• Advertising identifiers
• Region‑level demographic approximations and indicators
• Aggregated or anonymised educational analytics and usage datasets

This data is sold primarily for research, academic insights, ad-tech optimisation, or market analysis.

3.2 Types of Data We Do NOT Sell

We do not sell data that directly identifies you, including:

• Names
• Email addresses
• Direct contact information
• User messages or enquiry content
• Uploaded content or documents
• Sensitive personal data as defined by Rwandan law

3.3 Why Data Is Sold (Purpose of Data Commercialisation)

Data sales and licensing help fund:

• Free access to educational material and resource availability
• Development of learning tools
• Expansion of exam paper collections
• Infrastructure costs, security, hosting, and maintenance
• Platform development
• Research and educational data initiatives

The revenue supports ongoing improvement of Rwanda Papers as a fully accessible educational platform.

3.4 How Data Is Processed Before Sale (Safeguards)

Before any dataset is sold or licensed:

• Sensitive identifiers and direct identifiers are removed
• Records may be anonymised or aggregated where necessary
• Partners must follow data-use restrictions and strict contractual limitations
• Follow internal Taptic compliance and ethics guidelines

More details on data-handling policies are available at https://policy.taptic.org.

4. Google AdSense & Advertising Technologies (Third‑Party Advertising)

We use Google AdSense, which allows advertisers to display tailored ads based on browsing behaviour and processes data to:

• Deliver personalised or contextual advertisements
• Monitor ad performance and measure campaign effectiveness
• Prevent fraudulent or invalid interactions

Google may collect:

• Cross-site browsing activity via cookies and pixels
• Interaction data such as ad clicks or views
• Device identifiers, browser identifiers, and ad IDs
• Ad interaction metrics

Rwanda Papers adheres to:

• Google's Publisher Policies
• Restrictions on sensitive personal data usage
• Rwanda's legal obligations and consent standards
• Requirements for valid cookie-based tracking

Users may adjust their Google ad preferences or opt out of personalised advertising.

5. Data Sharing with Third Parties

We share information with certain categories of partners:

5.1 Taptic (Pty) Ltd Group Companies

Taptic provides infrastructure, analytics, and governance. Data may flow freely within the group for technical, research, analytics, infrastructure management, optimisation, and research purposes.

5.2 Service Providers & Integrations (Third‑Party Service Providers)

We rely on partners including:

• Wix for website hosting, analytics, cloud processing, infrastructure, and session tools
• Google for ads, advertising, analytics, and cloud services
• Email and security service providers, cybersecurity service providers
• Data buyers or licensees, approved commercial data‑licensing partners, in accordance with our commercial model

All partners must meet Rwanda's legal obligations and compliance standards.

5.3 Legal, Compliance, and Protection Requirements (Legal Obligations)

We may disclose information to:

• Rwandan courts
• Law enforcement agencies
• National regulatory authorities
• Legal representatives or auditors

This occurs only when legally required by Rwandan law or when protecting our rights.

5.4 Business Transfers

In a sale, merger, restructuring, acquisition, or corporate restructuring involving Rwanda Papers or Taptic, user data may be transferred as an asset or business asset.

6. Data Security

We use multi-layered protections and apply strong cybersecurity and privacy safeguards including:

• HTTPS encryption
• Secure cloud infrastructure
• Server-side firewalls and intrusion prevention
• Continuous infrastructure monitoring and behavioural threat monitoring
• Access-restricted and access‑controlled storage
• Firewall protection
• Built-in Wix cloud security safeguards and frameworks

Although no system is perfectly secure or entirely risk‑free, we follow industry-leading practices and maintain industry‑standard protections to reduce risk.

7. Your Rights Under Law No. 058/2021

Under Rwanda's Law No. 058/2021 Relating to the Protection of Personal Data and Privacy, you have the right to:

• Access your personal information and data
• Request correction or updates
• Request deletion where applicable or erasure where applicable
• Withdraw consent
• Object to processing or data-selling practices and certain forms of processing
• Restrict processing under defined circumstances
• Request data portability (where applicable)
• Lodge a complaint with the Data Protection Office of Rwanda

You may submit any request to contact@rwandapapers.rw.

8. Data Retention

We retain personal information only as long as necessary for:

• Operating the website and providing services
• Meeting legal and commercial obligations and compliance
• Maintaining security and preventing fraud, security and fraud mitigation
• Analytics and internal research under Taptic (Pty) Ltd, and platform improvement

Data may be anonymised instead of deleted when appropriate. When no longer required, data is securely deleted or anonymised.

9. Educational Resources & Past Papers

Rwanda Papers provides educational materials for student learning and exam preparation. These include:

• Official past papers and past national exam papers
• Model or reconstructed papers and question papers
• Study guides and reference material and notes

Accuracy may vary, and content may not reflect the latest curriculum updates. Resources are provided for educational use only and may not always be fully accurate.

Cookies help track download popularity, identify important subjects, and enhance academic resource distribution. Downloading materials does not require personal data.

10. Copyright & Content Ownership

We do not claim ownership over all materials hosted on Rwanda Papers. Content may come from:

• Public domain sources and publicly available repositories
• Contributors or educators
• User submissions
• Public educational archives

We review takedown requests promptly in accordance with Rwanda's copyright law and laws.

11. Branding & Intellectual Property

• "Rwanda Papers" and its associated branding is a trademark of and are owned by Taptic (Pty) Ltd.
• Logos, design elements, and interface layouts are protected.
• Unauthorized reproduction of branding, use of our branding, logo, or interface design may result in formal action or lead to legal action.

Some layouts may fall under fair academic use.

12. Hosting & Third-Party Policies (Hosting & Infrastructure)

Rwanda Papers is hosted entirely on Wix, which manages infrastructure, analytics, cloud storage, and processes certain user data on our behalf.

Wix Privacy Policy: https://www.wix.com/about/privacy

These providers have their own security and privacy practices.

13. Internet & Data Usage

Your ISP (Internet Service Provider) may collect:

• Traffic data and browsing history
• Browsing timestamps
• Resource consumption and network metadata
• Data usage levels

We are not responsible for ISP-level tracking or charges.

14. Consent

By using Rwanda Papers, you consent to:

• Data collection and processing
• Data-selling practices and data selling/licensing of eligible categories
• Use of advertising technologies, cookies, analytics, and advertising technologies
• Processing by Taptic (Pty) Ltd and its partners and authorised partners

Discontinue use if you do not agree. If you disagree, discontinue use.

15. Changes to This Policy

We periodically update this policy to reflect changes in law, technology, or platform features. Continued use indicates acceptance. Updates will be reflected with a new "Last Updated" date.

Continued use after updates signifies acceptance of revised terms.

16. Contact Us

Email: contact@rwandapapers.co.rw

Legal: legal@rwandapapers.co.rw

Security: https://security.rwandapapers.co.rw | security@rwandapapers.co.rw

We strive to respond to all privacy and data‑related enquiries within a reasonable timeframe as promptly as possible.

Thank you for supporting Rwanda Papers, proudly operated by Taptic (Pty) Ltd — part of the Taptic (Pty) Ltd network supporting education across Africa.