Data Protection

Megira Mall is committed to protecting the personal data of everyone who uses our platform — shop and office owners, advertisers, auction sellers, shoppers and visitors. This statement summarises the safeguards we apply; it complements our Privacy Policy.

Our principles

• Lawfulness & transparency: we tell you what we collect and why, and only process data for the purposes described in our Privacy Policy.
• Data minimisation: we collect only what the service needs.
• Purpose limitation: data is used to run the mall, not sold to third parties.
• Accuracy: you can correct your information at any time from your dashboard or by contacting us.
• Storage limitation: data is kept only as long as needed.
• Integrity & confidentiality: technical and organisational measures protect your data.

How we secure your data

• Passwords are stored only as salted scrypt hashes — never in plain text.
• Sessions use signed tokens; every tenant can access only their own account and data.
• Admin actions are permission-gated and recorded in an audit log.
• Data is transmitted over encrypted connections (HTTPS).
• Payment processing is handled by licensed mobile-money providers; we never store your PIN.

Your control

You can accept or decline analytics cookies via our consent banner, edit your account details, and request access to or deletion of your data. Under Rwanda's Law No. 058/2021 on the protection of personal data and privacy, you have rights of access, rectification, erasure and objection.

Contact our data team

Email privacy@megiramall.com or use the Contact page for any data-protection request.