Privacy policy

Privacy Policy (New Stone Rwanda Ltd)

Privacy Policy (New Stone Rwanda Ltd)

Last updated: January 6, 2026

New Stone Rwanda Ltd (“New Stone Rwanda”, “we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data. We supply and showcase premium building finishes, including ceramic tiles, aluminium profiles, pavers, and crafted claddings, and we primarily use our website to help customers discover products, request quotes, book showroom visits, and get expert guidance. Newston Rwanda

This Privacy Policy explains what personal data we collect, how we use it, how we protect it, and your rights under Rwanda’s legal framework, including Law No 058/2021 of 13/10/2021 relating to the protection of personal data and privacy. Minict+1

1) Who we are (Data Controller)

For the personal data described in this policy, New Stone Rwanda Ltd is the data controller (meaning we decide why and how your personal data is processed).

Business address: KG 210 St, Kimironko, Kigali, Rwanda. 300×600-modern-tiles-catalogue
Phone: +250 784 013 384 / +250 788 306 379. Newston Rwanda

If you have privacy questions or want to exercise your rights, contact us using the details above (or through our website contact channels).

2) What this Privacy Policy covers

This policy applies when you:

Visit our website
Request a quote, consultation, or showroom visit
Contact us by phone, form submission, WhatsApp, email, or social media
Engage with our ads or social media pages (where applicable)

It does not cover third-party websites that may be linked from our site (see Section 11).

3) Personal data we collect

We collect personal data in three main ways: (a) data you provide, (b) data collected automatically, and (c) data from third parties.

A) Data you provide to us

Depending on how you contact us, we may collect:

Identity & contact details: full name, phone number, email address, company name, job title
Inquiry details: products you’re interested in (e.g., tile categories, sizes, finishes), quantities, budget range, preferred timeline
Project details (optional): location (district/sector), site needs, photos you send us, measurements you share
Communication content: messages you send, attachments, and your request history

B) Data we collect automatically

When you browse our website, we may automatically collect:

Device and technical information: IP address, browser type, operating system, device identifiers
Usage data: pages visited, time spent, clicks, referring pages, approximate location (derived from IP)
Log data: system logs used for website security, troubleshooting, and performance

C) Data we may receive from third parties

We may receive personal data from:

Social media platforms if you interact with us there (according to their privacy settings)
Service providers that help us run our website (e.g., hosting, analytics, spam prevention)

We do not intentionally collect sensitive personal data (such as health data, biometric data, or similar). If you choose to share sensitive information, please avoid doing so unless it is truly necessary.

4) Why we use your personal data

We use your personal data for the following purposes:

Responding to inquiries and providing support
To answer questions, recommend products, share catalogues, and provide technical guidance.
Preparing quotes and managing business communications
To prepare pricing estimates, handle negotiations, and follow up on your requests.
Booking and managing showroom visits or consultations
To schedule visits, confirm details, and improve your experience.
Improving our website and customer experience
To understand how visitors use our website and improve navigation, content, and performance.
Security and fraud prevention
To protect our website, prevent abuse/spam, and maintain system integrity.
Marketing (where permitted)
To send product updates, promotions, and inspiration content when you have requested it, or where permitted by applicable law. You can opt out at any time.
Legal and compliance
To comply with legal obligations, respond to lawful requests, or establish/exercise legal claims.

5) Legal basis for processing

We process personal data based on one or more of these legal grounds (depending on context):

Consent: when you voluntarily submit details via a form, request a callback, or opt in to marketing (you may withdraw consent).
Contract / steps before a contract: when you request a quote or information needed to supply products or services.
Legitimate interests: to operate and secure our website, improve services, and communicate with customers in a reasonable way.
Legal obligation: to meet legal and regulatory requirements.

Rwanda’s data protection framework emphasizes transparency and informing individuals about how their data is collected and used. Data Protection Office+1

6) Cookies and similar technologies

We use cookies and similar technologies to:

Make the website function properly
Remember preferences (where applicable)
Improve performance and understand website usage
Help protect the website from abuse/spam

Types of cookies we may use

Strictly necessary cookies: required for core site functions (cannot be disabled via banner in many cases)
Preferences cookies: remember settings (if enabled)
Analytics cookies: help us understand site usage (set only with consent where required)
Marketing cookies: used to measure campaigns or personalize ads (set only with consent where required)

Managing cookies

You can control cookies through:

Your browser settings (block/delete cookies)
Any cookie consent banner/settings (if enabled on the site)

Note: blocking some cookies may affect site functionality.

7) How we share your personal data

We do not sell your personal data.

We may share your personal data with:

Internal team members who need it to respond to you (sales, customer support)
Trusted service providers (processors) who help us operate the website and communications (e.g., hosting, analytics, spam protection, email tools)
Professional advisors (legal, audit) when necessary
Authorities where required by law or to protect rights and safety
Business transfers (if we restructure, merge, or transfer assets—data may be part of the transfer with appropriate protections)

When we use service providers, we expect them to process personal data only on our instructions and to implement appropriate safeguards.

8) International transfers and storage outside Rwanda

Our website and service providers may use systems that store or process data outside Rwanda (for example, cloud hosting, analytics, or email systems).

Where personal data is transferred or stored outside Rwanda, we will take steps to ensure the transfer is handled lawfully and securely in line with Rwanda’s requirements, which can include appropriate safeguards and/or required authorizations/consents in relevant cases. Rwandalii+1

9) How long we keep your data (Retention)

We keep personal data only as long as necessary for the purposes described in this policy, including:

Inquiry data: typically kept for as long as needed to support your request and follow-ups
Customer/business relationship data: kept as needed for ongoing service, recordkeeping, and legitimate business needs
Legal/tax records: retained as required by applicable law

When personal data is no longer needed, we will securely delete, anonymize, or archive it in line with applicable requirements.

10) How we protect your data (Security)

We apply appropriate technical and organizational measures designed to protect personal data, such as:

Access controls (limiting who can access data)
Security monitoring and logging
Use of secure systems and configurations (where applicable)

No method of transmission or storage is 100% secure, but we work to maintain safeguards appropriate to the risk.

11) Third-party links and embedded content

Our website may include links to third-party sites or embedded content (such as videos or social media). If you follow a third-party link, their privacy policy applies, not ours. We recommend reviewing third-party privacy policies before sharing personal data.

12) Your rights and choices

Under Rwanda’s data protection framework, you have rights relating to your personal data. In particular, individuals should be informed about key privacy details (identity of the controller, purposes, recipients, retention, withdrawal of consent, and rights such as access/rectification/erasure/restriction/objection), and the ability to appeal to the supervisory authority. Data Protection Office

Subject to applicable conditions and exceptions, your rights may include:

Right to be informed about collection and use of your data
Right of access to personal data we hold about you
Right to rectification (correct inaccurate or incomplete data)
Right to restriction of processing in certain cases
Right to erasure in certain cases
Right to object to certain types of processing
Right to withdraw consent at any time (where processing is based on consent)

How to exercise your rights

Contact us using the phone number(s) listed in Section 1. We may ask you to verify your identity before fulfilling certain requests.

13) Complaints (Supervisory Authority)

If you believe your rights have been violated, you can contact Rwanda’s Data Protection & Privacy Office (DPO) for guidance or to lodge a complaint.

DPO contact highlights: Toll-free 9080 and official emails including complaint@dpo.gov.rw are listed by the DPO. Data Protection Office+1

14) Children’s privacy

Our website and services are intended for general audiences and business customers. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact us so we can address it appropriately.

15) Changes to this policy

We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory changes. When we update it, we will revise the “Last updated” date at the top of this page.