Privacy Policy

MegaP Book House Ltd is a children's book publisher based in Kigali, Rwanda. The Cyiza Foundation is our nonprofit arm. This website serves both the MegaP Book House storefront and the Cyiza Foundation's donation and information pages.

For any privacy question, contact us at megapbhouse@gmail.com (MegaP Book House) or emelyneuwamariya@gmail.com (Cyiza Foundation).

We only collect what we need to serve you:

• Contact enquiries: your name, email address, and the message you send us.
• Book orders: your name, email, phone number, delivery address, and the items you ordered.
• Donations: your name (optional), email, phone (optional), the amount, and any message you add.
• Technical data: your IP address is processed transiently to apply rate limits and protect against abuse. We do not use advertising or analytics tracking cookies.

Payment card / mobile-money details are never collected or stored by us.They are entered directly on our payment provider's secure checkout (see section 5).

• To respond to your enquiries.
• To process, fulfil, and ship your book orders, and email receipts and updates.
• To process donations to the Cyiza Foundation and email acknowledgements.
• To keep records required for accounting, tax, and fraud prevention.
• To secure the website (e.g. rate limiting) and prevent abuse.

Where the EU/UK GDPR applies, we rely on:

• Performance of a contract — to fulfil orders you place.
• Consent — when you contact us or make a donation.
• Legitimate interests — to secure our site and prevent abuse.
• Legal obligation — to retain transaction records.

Payments (card and mobile money) are processed by Pesapal, our third-party payment provider. When you pay, you are taken to Pesapal's secure checkout; they handle your payment details under their own privacy policy. We only receive confirmation of whether a payment succeeded, along with the reference and method — never your full card or mobile-money credentials.

We do not sell your personal data. We share it only with the service providers that make this website work, each acting on our instructions:

• Pesapal — payment processing.
• Resend — sending transactional emails (receipts, confirmations).
• Neon — our PostgreSQL database hosting.
• Vercel — website and application hosting.

We may also disclose data where required by law or to protect our legal rights.

• Contact enquiries are kept while relevant, then deleted.
• Order and donation records are kept for as long as required by accounting and tax law. On a valid deletion request we remove the personal fields (anonymise the record) while retaining the anonymised transaction for legal compliance.

We use only essential cookies/technology needed to make the site and checkout work. We do not use advertising, profiling, or third-party analytics cookies, so no cookie-consent banner is required for tracking.

Depending on where you live (including under the GDPR and California's CCPA), you have the right to:

• Access a copy of the personal data we hold about you.
• Ask us to correct or delete it.
• Object to or restrict certain processing.
• Opt out of any sale of personal data — note we do not sell data.
• Not be discriminated against for exercising these rights.

You can exercise access and deletion instantly and securely here: Manage your data. For anything else, email us using the addresses in section 1.

We do not sell or share your personal information for cross-context behavioural advertising. California residents may request to know, delete, or correct their information using the Manage your data tool, and will not be treated differently for doing so.

Our books are made for children, but our website and purchasing are intended for adults (parents, guardians, educators, and institutions). We do not knowingly collect personal data directly from children. If you believe a child has provided us data, contact us and we will delete it.

Our providers may process data outside Rwanda (for example in the EU or US). Where required, we rely on appropriate safeguards for such transfers.

We may update this policy from time to time. The “Last updated” date at the top reflects the latest version. Material changes will be posted on this page.