Last Updated: October 2026
Mpeta respects your privacy and is committed to protecting the personal information you provide when using our website, purchasing products from the Mpeta Online Shop, making enquiries, or using our accommodation and hospitality services.
This Privacy Policy explains how Mpeta collects, uses, stores, shares, and protects personal information when you interact with www.mpeta.info and our related services.
This Policy is intended to operate in accordance with applicable laws of the Republic of Rwanda, including Law Nº 058/2021 of 13/10/2021 relating to the Protection of Personal Data and Privacy.
1. About Mpeta
Mpeta is a Rwanda-based hospitality and lifestyle business offering accommodation services through Mpeta Villa and physical home, lifestyle, smart-living, and related products through the Mpeta Online Shop.
For questions regarding this Privacy Policy or the way your personal information is handled, you may contact us at:
Mpeta
Kigali, Rwanda
Website: www.mpeta.info
Email: booking@mpeta.info
Phone/WhatsApp: +250 783 620 097
2. Information We May Collect
The information we collect depends on how you interact with Mpeta.
Information You Provide Directly
When you make a purchase, submit an enquiry, make a booking, or contact us, we may collect information such as:
- your full name;
- email address;
- telephone number;
- billing information;
- delivery address;
- booking or accommodation details;
- products ordered;
- order and transaction information;
- messages or enquiries sent to Mpeta;
- refund or return information; and
- other information you voluntarily provide when communicating with us.
We only request information that is reasonably necessary for the relevant service or transaction.
Payment Information
When you make an online payment, payment information may be processed through an authorized third-party payment service provider.
Depending on the payment method selected, this may include card, mobile-money, transaction, and payment-verification information.
Where payment details are entered directly into a payment provider’s secure system, Mpeta does not intend to collect or store complete card information such as your full card number or card-security code.
Payment providers process information according to their own security and privacy practices.
3. Information Collected Automatically
When you visit www.mpeta.info, certain technical information may be collected automatically through the website, hosting provider, cookies, analytics tools, or similar technologies.
This information may include:
- IP address;
- browser type;
- device type;
- operating system;
- approximate location based on technical information;
- pages viewed;
- time spent on the website;
- referring website;
- date and time of visits; and
- website interactions.
This information may be used to maintain the website, understand how visitors use it, improve performance, prevent fraud, and enhance the user experience.
Rwanda’s Data Protection & Privacy Office similarly identifies browser/device information, session statistics, and approximate location as types of information websites may process.
4. How We Use Personal Information
Mpeta may use personal information for the following purposes:
- processing and confirming online orders;
- arranging delivery or product collection;
- processing payments;
- confirming and managing accommodation reservations;
- responding to enquiries;
- providing customer support;
- communicating about orders or bookings;
- processing cancellations, returns, exchanges, and refunds;
- investigating payment or transaction issues;
- preventing fraud and unauthorized transactions;
- maintaining records relating to purchases and bookings;
- improving our website, products, and services;
- complying with applicable legal, accounting, tax, or regulatory obligations;
- protecting Mpeta, our customers, and our website against misuse or unlawful activity; and
- sending marketing communications where the customer has provided the required permission.
We will seek to use personal information only for legitimate, specified purposes and avoid using it for purposes incompatible with the reason it was originally collected.
This follows Rwanda’s requirement that personal data be processed lawfully and transparently and collected for explicit, specified, and legitimate purposes.
5. Legal Grounds for Processing
Depending on the circumstances, Mpeta may process personal information because:
- the information is necessary to complete an order or provide a requested service;
- processing is required to fulfil a booking or other agreement with you;
- you have provided your consent;
- processing is required to comply with a legal obligation;
- processing is necessary to prevent fraud or protect legitimate interests; or
- another lawful basis applies under Rwandan law.
Where processing is based on your consent, you may withdraw that consent.
Withdrawal of consent does not invalidate lawful processing that took place before consent was withdrawn. Rwanda’s data-protection law expressly recognizes this right.
6. Online Orders and Deliveries
When you purchase a product from the Mpeta Online Shop, we may use your personal information to:
- identify you as the customer;
- verify your order;
- communicate with you regarding the purchase;
- process payment;
- prepare and fulfil your order;
- arrange delivery;
- manage returns and refunds; and
- maintain transaction records.
Some information, such as your name, telephone number, and delivery information, may need to be shared with a delivery or logistics provider where necessary to deliver your order.
Such information should only be shared to the extent reasonably necessary to provide the relevant service.
7. Accommodation and Mpeta Villa
When you enquire about or make a reservation for Mpeta Villa, we may collect information necessary to manage your stay.
This may include:
- guest name;
- contact information;
- reservation dates;
- number of guests;
- payment and booking information;
- special requests; and
- communications relating to your stay.
If you make a reservation through an external booking platform, that platform may independently collect and process your information according to its own privacy policy.
8. Sharing Personal Information
Mpeta does not sell customers’ personal information.
We may share limited personal information where reasonably necessary with third parties that help us operate our services, including:
- payment-processing providers;
- banks and financial institutions;
- mobile-money providers;
- delivery and logistics providers;
- website hosting and technology providers;
- analytics or website-performance providers;
- professional advisers;
- government or regulatory authorities where legally required; and
- other service providers necessary to fulfil a transaction or customer request.
Third parties should only receive information necessary for the service they perform and should handle that information according to applicable data-protection requirements.
Rwanda’s data-protection framework requires appropriate arrangements where another party processes personal information on behalf of a data controller.
9. Payment Processing
Online payments may be processed through third-party payment providers.
When you select a payment method, certain information may be transmitted directly to the relevant provider in order to:
- authorize the transaction;
- confirm payment;
- prevent fraud;
- process refunds; and
- comply with financial or regulatory requirements.
Mpeta may retain transaction references, payment status, amounts, dates, and other information necessary to manage an order without retaining your complete payment-card credentials.
10. Cookies and Similar Technologies
The Mpeta website may use cookies and similar technologies.
Cookies are small files placed on your device that may help the website:
- function correctly;
- remember preferences;
- maintain shopping-cart information;
- understand website traffic;
- measure website performance;
- improve the customer experience; and
- support security and fraud prevention.
Some cookies may be necessary for the website to function properly, while others may relate to analytics or optional functionality.
Where required, users will be given an appropriate choice regarding non-essential cookies.
You may also be able to control cookies through your browser settings. Disabling certain cookies may affect some website features.
Rwanda’s Data Protection & Privacy Office specifically identifies information about cookie use as something users should be able to understand from an organization’s privacy information.
11. Marketing Communications
Mpeta may send promotional emails, messages, product updates, special offers, or other marketing communications where you have provided appropriate consent or where otherwise permitted by law.
You may withdraw your consent to marketing communications at any time.
You can do so by:
- using an unsubscribe option where available;
- contacting us at booking@mpeta.info; or
- requesting removal through +250 783 620 097.
Stopping marketing communications will not prevent Mpeta from sending necessary transactional communications relating to an existing order, booking, payment, refund, or customer-service request.
12. How Long We Keep Personal Information
Mpeta will not retain personal information for longer than reasonably necessary for the purpose for which it was collected.
The appropriate retention period may depend on:
- the nature of the information;
- the purpose for which it was collected;
- an active order or booking;
- accounting and tax obligations;
- contractual requirements;
- dispute resolution;
- fraud prevention; and
- applicable legal or regulatory requirements.
Once information is no longer reasonably required, it should be securely deleted, destroyed, or anonymized where appropriate.
Rwandan law generally requires personal information to be retained until the purpose of processing has been fulfilled, subject to specified legal and contractual reasons for longer retention.
13. Security of Personal Information
Mpeta takes reasonable administrative, organizational, and technical measures to protect personal information against:
- unauthorized access;
- loss;
- misuse;
- alteration;
- unauthorized disclosure; and
- destruction.
These measures may include restricting access to information, using secure website systems, working with reputable payment providers, applying access controls, and maintaining appropriate security procedures.
However, no website, online transmission, or electronic storage system can be guaranteed to be completely secure.
14. International Processing or Transfer of Information
Some third-party technology, hosting, analytics, communication, or payment-service providers may operate infrastructure outside Rwanda.
Where personal information is transferred or processed outside Rwanda, Mpeta will seek to ensure that the processing is carried out in accordance with applicable Rwandan data-protection requirements and that appropriate protections are used where required.
Rwanda’s law establishes specific conditions for transferring personal data outside Rwanda and requires appropriate safeguards for such transfers.
15. Your Data-Protection Rights
Subject to applicable law and the circumstances of the request, you may have the right to:
- ask whether Mpeta holds personal information about you;
- request access to your personal information;
- request a copy of your information;
- request correction of inaccurate information;
- request deletion of eligible personal information;
- request restriction of certain processing;
- object to certain processing;
- withdraw consent where processing relies on consent;
- request portability of eligible information; and
- raise concerns regarding how your personal information is being processed.
Rwanda’s Data Protection & Privacy Office identifies rights including access, objection, portability, restriction, erasure, rectification, and withdrawal of consent under Law Nº 058/2021.
To exercise a privacy right, contact:
Email: booking@mpeta.info
Phone/WhatsApp: +250 783 620 097
We may need to verify your identity before providing, changing, or deleting personal information to prevent unauthorized access to your data.
16. Complaints and Supervisory Authority
If you have a concern about how Mpeta handles your personal information, we encourage you to contact us first so that we can attempt to resolve the matter.
You also have the right to raise an appropriate complaint with Rwanda’s Data Protection & Privacy Office, which operates as the supervisory authority responsible for personal-data protection in Rwanda.
17. Children’s Privacy
Mpeta’s online shop is not intended to encourage children to independently provide personal information or enter into commercial transactions without appropriate involvement from a parent or guardian.
Where Mpeta knows that personal information being processed belongs to a child under the age of 16, parental or guardian consent will be obtained where required by applicable law.
Rwanda’s data-protection law specifically requires the consent of a person with parental responsibility when a controller knows the personal data belong to a child under 16, subject to limited legal exceptions.
18. Third-Party Websites and Services
Our website may contain links to external websites, platforms, payment providers, booking services, or social-media pages.
Mpeta does not control the privacy practices of these third parties.
When you leave our website or use a third-party service, the collection and use of your personal information may be governed by that third party’s own privacy policy.
We encourage customers to review the applicable privacy policies before submitting personal information.
19. Changes to This Privacy Policy
Mpeta may update this Privacy Policy from time to time due to changes in:
- our products or services;
- website functionality;
- payment systems;
- technology;
- business operations; or
- applicable laws and regulations.
The updated Privacy Policy will be published on www.mpeta.info, and the “Last Updated” date at the top of this page will be revised accordingly.
Where a change materially affects how personal information is processed, additional notice or consent may be provided where required.
20. Contact Us
If you have questions, concerns, or requests regarding your personal information or this Privacy Policy, please contact:
Mpeta
Kigali, Rwanda
Email: booking@mpeta.info
Phone/WhatsApp: +250 783 620 097
Website: www.mpeta.info
