Privacy Policy

Last updated: 19 October 2026

1. Who we are

This policy explains how MCSTUDIO Ltd ("MCSTUDIO", "we", "us") handles personal data collected through www.mcstudio.rw, in line with Law N° 058/2021 of 13/10/2021 relating to the protection of personal data and privacy in Rwanda. It applies only to this website; data shared in the course of a client engagement is governed by the agreement for that engagement. Your use of the site is also subject to our Terms & Conditions.

• Company: MCSTUDIO Ltd
• Registered address: Norrsken House, KN 78 St, Kigali, Rwanda
• Contact: team@mcstudio.rw

2. Key terms

• Personal data: any information that identifies you, or could identify you, such as your name, email address or IP address.
• Data processor: a service provider that handles personal data on our behalf and on our instructions.
• Processing: anything done with personal data, such as collecting, storing, using, sharing or deleting it.
• Usage data: information collected automatically when you browse the site, such as your IP address, browser type, pages visited and time spent on them.
• Cookies: small files a website stores on your device to remember information about your visit.
• You: anyone who visits this site or contacts us through it.

3. What we collect

• Contact form: your name, email address, phone number (optional) and the content of your message.
• Security data: your IP address, used to limit abuse of the contact form.
• Analytics: pages visited, approximate location, device and browser information, collected using cookies.

We do not ask for sensitive personal data (such as health, financial or identity-document information), confidential business information, or personal data about other people. Please do not include it in your message. If you do, you confirm that you are entitled to share it, and you accept that it is sent over a channel not designed for sensitive information.

4. Why we use it, and on what basis

• To reply to your enquiry and discuss a possible project with you, based on your consent when you send the form and on steps you ask us to take before entering into a contract.
• To protect the site from spam and abuse, based on our legitimate interest in keeping our services secure.
• To understand how the site is used and improve it, based on our legitimate interest.

We do not sell your personal data, we do not send you marketing unless you ask for it, and we do not use your data for automated decisions that have legal or similarly significant effects on you.

5. Who we share it with

We use trusted service providers (data processors) to run this site, who process personal data only to provide their service to us:

• Website hosting – to serve this site to you.
• Email delivery – to deliver contact form messages to our team.
• Website analytics – to produce statistics about how the site is used.

Some of these providers may also process data under their own terms and privacy policies, which we do not control.

We may also disclose personal data where required by Rwandan law or by a competent authority, or where necessary to protect our rights, our users or the public.

If MCSTUDIO is involved in a merger, acquisition or sale of assets, personal data may be transferred as part of that transaction. Where the law requires, we will inform you of any such change.

6. Transfers outside Rwanda

Some of these providers store or process data outside Rwanda. Where personal data leaves Rwanda, we rely on providers that commit, through their data processing terms, to protect it with appropriate safeguards, and we handle such transfers as permitted by Law N° 058/2021. By contacting us through this site, you understand that your message will be processed by these providers outside Rwanda.

7. How long we keep it

We keep contact form messages only as long as needed to respond and follow up, and generally no longer than 24 months after our last exchange with you. If an enquiry becomes a client engagement, it is kept for as long as that engagement and our legal, tax and accounting obligations require. Analytics data is kept for no longer than 14 months. We may also keep data for longer where needed to comply with the law or to establish, exercise or defend legal claims. When data is no longer needed, we delete or anonymise it.

8. How we protect it

We use appropriate technical and organisational measures, including encrypted connections (HTTPS), restricted access to messages, and spam and rate-limit protection on our forms. However, no website, email or internet transmission is completely secure. We cannot guarantee the security of information you send us, and you send it at your own risk. If a personal data breach occurs that is likely to put your rights at risk, we will notify the NCSA and, where required, you, as the law requires.

9. Your rights

Under Law N° 058/2021 you have the right to:

• be informed about how your personal data is used;
• access the personal data we hold about you;
• have inaccurate data corrected, and have data erased;
• object to, or ask us to restrict, processing;
• receive your data in a portable format;
• withdraw your consent at any time, without affecting processing already carried out.

To exercise any of these rights, contact us at team@mcstudio.rw. We may ask you to confirm your identity first, and we will reply within 30 days. Some rights have limits: where the law allows, we may decline requests that are manifestly unfounded, excessive or repetitive, and we may keep data that we are legally required to keep or that we need to establish, exercise or defend legal claims.

If you are not satisfied with our response, you may lodge a complaint with the National Cyber Security Authority (NCSA), www.ncsa.gov.rw.

10. Cookies

We do not use cookies for advertising. The site uses the following type of cookie:

These cookies are set by our analytics provider, which may update their names and durations from time to time.

You can block or delete cookies in your browser settings. The site, including the contact form, will still work fully.

11. Children's privacy

This site is meant for businesses and is not directed at children under 18. We do not knowingly collect personal data from children. If you believe a child has sent us personal data, contact us and we will delete it.

12. Links to other websites

This site links to websites and services we do not operate, such as social networks and AI assistants. Their own privacy policies apply when you use them, and we are not responsible for how they handle your data.

13. Changes to this policy

We may update this policy at any time. Changes take effect when posted on this page, and the date at the top shows when it last changed. Your continued use of the site after a change means you accept the updated policy.

14. Limitation of liability

To the extent permitted by law, MCSTUDIO is not liable for any loss or damage arising from unauthorised access to information sent over the internet, from events beyond our reasonable control, or from the acts or omissions of third-party services and websites we do not control. Nothing in this policy limits liability that cannot be limited under Rwandan law. Our Terms & Conditions also apply.

15. Governing law and disputes

This policy is governed by the laws of the Republic of Rwanda. Any dispute arising from or relating to it will first be addressed through good-faith discussion. If it cannot be resolved within 30 days, it may be submitted to the competent courts in Kigali or, where both parties agree in writing, to arbitration at the Kigali International Arbitration Centre (KIAC), seated in Kigali and conducted in English. This does not affect your right to complain to the NCSA.

This policy does not create any contractual rights beyond those given by law. If any part of it is found unenforceable, the rest remains in effect. If this policy is translated, the English version prevails.

16. Contact us

For any question about this policy or your personal data:

• Email and phone: team@mcstudio.rw, +250 739 260 239
• Post: MCSTUDIO Ltd, Norrsken House, KN 78 St, Kigali, Rwanda