Privacy Policy

Megira Mall ("Megira Mall", "we", "us") operates a digital commercial address in Kigali, Rwanda where retail brands and professional firms lease storefronts and offices, and where private sellers list items on our auction marketplace. This Privacy Policy explains what personal data we collect, why, how we use and share it, and the choices and rights you have. By using our website you agree to this policy.

1. Who we are

Megira Mall is the data controller for personal data processed through this site. For any privacy question, contact us at privacy@megiramall.com or via our Contact page.

2. Data we collect

Information you provide

• Shop / office owners: business name, owner name, email, phone, WhatsApp, location, tier, banner/logo, and a password (stored only as a salted hash — we never store plain passwords).
• Advertisers: business name, contact phone, website, creative images, and a placement choice.
• Auction sellers: name, phone, email, WhatsApp, address, item details and photos.
• Shoppers / visitors: any name, email and message you send through a shop's contact form or inquiry.

Information collected automatically

• Visitor cookie: a first-party identifier (mm_vid) used to count unique visitors versus raw pageviews.
• Usage / analytics: pages and areas visited (home, stores, offices, auction, etc.), the shop or office viewed, and timestamps — used to understand traffic and improve the mall.
• Consent record: your cookie accept/decline choice (mm_consent).

3. Cookies

We use a small number of first-party cookies: an essential visitor identifier, your language preference, and your cookie-consent choice. We show a consent banner on your first visit and record your decision. You can clear cookies at any time in your browser settings. We do not sell your data or use third-party advertising cookies.

4. How we use your data

• To operate storefronts, offices, advertising and the auction marketplace.
• To authenticate owners and protect each account from access by others.
• To route inquiries and connect buyers directly with sellers.
• To process payments (rent, ad placements, featured listings) via mobile money.
• To measure traffic and improve the site (the admin Cookies Report shows aggregate figures only).

5. Payments

Payments are processed through MTN Mobile Money (and other mobile-money providers). We store a payment reference, amount, provider, status and the payer phone number to confirm and reconcile transactions. We do not store your mobile-money PIN.

6. Sharing & third parties

We share data only as needed to run the service: with our hosting and database provider (Supabase) and the mobile-money provider for payment confirmation. Contact details on a public listing (e.g. a shop or auction listing) are visible to other users so they can reach you — that is the purpose of the listing. We do not sell personal data.

7. Data retention

We keep personal data only as long as necessary for the purposes above or as required by law. Listings and accounts are kept while active; analytics are retained in aggregate. You may request deletion of your account data (see Your rights).

8. Security

Passwords are hashed (scrypt), sessions are signed tokens, and each tenant can only access their own dashboard data. We use industry-standard transport encryption. No system is perfectly secure, but we work to protect your information.

9. Your rights

Subject to Rwandan data-protection law (Law No. 058/2021 on the protection of personal data and privacy), you may request access to, correction of, or deletion of your personal data, and withdraw consent for analytics cookies. To exercise these rights, email privacy@megiramall.com.

10. Children

The service is not directed to children under 16, and we do not knowingly collect their data.

11. Changes

We may update this policy; material changes will be reflected by the "Last updated" date above.

12. Contact

Questions? Email privacy@megiramall.com or use our Contact page. See also our Data Protection statement and Terms of Service.