Privacy Policy

We collect information you provide directly when you contact us through our website, subscribe to updates, or submit enquiries. This may include your name, email address, phone number, organisation, and any other details you submit voluntarily.

We also collect certain information automatically when you visit our website, including your IP address, browser type, device information, pages visited, and the date and time of your visit. This is gathered through cookies and similar technologies as described in our Cookies Policy.

We use the information we collect to respond to enquiries, communicate with stakeholders, deliver information about CCM Rwanda activities, improve our website and user experience, send relevant updates and newsletters (with your consent), and comply with legal and regulatory obligations.

We process your personal data based on one or more of the following legal grounds: your consent, the performance of our public mandate as a Country Coordinating Mechanism, compliance with legal obligations under Rwandan law, and our legitimate interests in operating and improving our organisation — provided these do not override your fundamental rights.

We do not sell your personal information. We may share your data with trusted third parties only when necessary, including government and regulatory bodies, The Global Fund and its implementing partners, technology service providers who help us operate our website and systems, and professional advisors such as auditors or legal counsel.

All third-party processors are contractually required to handle your data securely and only for the purposes we specify.

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this policy, or as required by Rwandan law. Website analytics data is retained in anonymised form and is not linked back to individual users.

We implement appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These include encrypted data transmission (HTTPS), restricted access to personal data on a need-to-know basis, regular security reviews of our systems, and secure storage of records.

Depending on applicable law, you may have the right to access the personal data we hold about you, request correction of inaccurate or incomplete data, request deletion of your data (subject to legal retention requirements), withdraw your consent at any time where processing is based on consent, and lodge a complaint with the relevant data protection authority.

To exercise any of these rights, please contact us using the details provided below.

Our website is not directed at children under the age of 16. We do not knowingly collect personal information from children under 16 without parental or guardian consent. If you believe we have collected such information, please contact us immediately so we can take appropriate action.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

If you have any questions or concerns about this Privacy Policy or how we handle your data, please contact us at: info@ccm.rw or visit us at the Ministry of Health Building, KN 4 Ave, Kigali, Rwanda.