LEGAL · THE RECORD
Privacy policy.
Your information is private, protected, and never sold.
EFFECTIVE 27 July 2026 · LAST UPDATED 27 July 2026
1Our commitment
Imaara Bridge exists because people trust us with decisions that matter — where they will live, what they will buy, and where they will build. That trust extends to your personal information.
This policy explains, in plain language, what we collect, why we collect it, how we protect it, who we share it with, and the rights you can exercise at any time. We do not sell your personal data. We never have and we will not.
If anything here is unclear, write to us at hello@imaarabridge.com and we will explain it properly.
2Who we are (data controller)
Imaara Bridge (also trading as Imaara Bridge Africa) is the data controller responsible for the personal data described in this policy.
- Registered address: Kigali Heights, KG 7 Ave, Kigali, Rwanda
- Company registration number: 156512016
- Email: hello@imaarabridge.com
- Telephone: +250 788 871 929
- Hours: Monday–Friday, 09:00–18:00 CAT
- Privacy contact / Data Protection Officer: the Privacy Team, privacy@imaarabridge.com
3Scope
This policy applies to:
- the website imaarabridge.com (English and French versions);
- your account, the client portal, and the community;
- our advisory services (relocation, property, business and investment, legal coordination, concierge); and
- our newsletters, events, and correspondence with you.
It does not apply to third-party websites we link to, or to independent professionals (lawyers, notaries, banks, government agencies) who act as their own data controllers. Their privacy terms govern their handling of your information.
4Information we collect
4.1 Information you give us
| Category | Examples | Where it comes from |
|---|---|---|
| Identity | Full name, date of birth, nationality, country of residence | Enquiry forms, account signup, onboarding |
| Contact | Email, telephone/WhatsApp, postal address | Forms, correspondence |
| Account | Username, password (hashed), account type (client or community member), preferences | Signup, settings |
| Enquiry & goals | Your objectives, timeline, budget range, services of interest, and what "home" means to you | Contact form, consultations |
| Client & engagement | Engagement scope, advisor notes, milestones, correspondence, meeting records | Delivery of services |
| Verification (KYC/AML) | Government ID, passport, proof of address, source-of-funds information, sanctions/PEP screening results | Onboarding, where legally required |
| Transaction | Fees, invoices, payment references, and (where applicable) property or business transaction details | Engagements |
| Documents | Titles, due-diligence reports, contracts, and files you upload to your portal | Portal, engagements |
| Community | Profile details, event RSVPs, posts and comments | Community participation |
| Communications | Emails, messages to your advisor, call notes, support requests | Correspondence |
4.2 Information we collect automatically. Device and browser type, IP address, approximate location (city/country), pages viewed, referring source, session activity, and cookie identifiers — recorded in our server and hosting logs. See Section 11 (Cookies).
4.3 Information from third parties. Where relevant and lawful, we may receive information from: identity-verification and sanctions-screening providers; land, company, and public registries (for verification work you have asked us to perform); our vetted partners and referral sources; and social or advertising platforms if you interact with our content there.
4.4 Special category and children's data. We do not seek sensitive personal data (such as health, religion, or political opinions). If a service genuinely requires it — for example, health information relevant to a relocation or schooling need — we will ask for it separately and rely on your explicit consent.
Our services are for adults. We do not knowingly collect data from anyone under 18. Where we hold family details (for example, children's schooling needs), that information is provided by the parent or guardian. If you believe a minor's data has reached us in error, contact us and we will delete it.
5Why we use your information, and our legal basis
| Purpose | Legal basis |
|---|---|
| Respond to your enquiry and provide consultations | Steps at your request prior to a contract |
| Deliver advisory services and manage your engagement | Performance of a contract |
| Create and operate your account and client portal | Performance of a contract |
| Verify identity, run KYC/AML and sanctions checks | Legal obligation; legitimate interests (fraud prevention) |
| Conduct verification and due diligence you have requested | Performance of a contract |
| Operate the community, events, and member directory | Consent; legitimate interests |
| Send newsletters, guides, and dispatches | Consent (withdrawable at any time) |
| Improve our website, services, and security | Legitimate interests |
| Keep records, resolve disputes, and enforce agreements | Legal obligation; legitimate interests |
| Comply with tax, accounting, and regulatory duties | Legal obligation |
Where we rely on legitimate interests, we have considered your rights and are satisfied our processing is proportionate and would not be unexpected. You may object at any time (see Section 9).
Where we rely on consent, you may withdraw it at any time — this does not affect processing carried out before withdrawal.
7International transfers and data location
Our clients are global, and some of our technology providers operate outside Rwanda. Where personal data is stored or accessed outside Rwanda, we take the steps required by Rwandan law — including holding the necessary registration certificate authorising offshore storage, and putting appropriate contractual safeguards in place.
Where we transfer data of individuals in the European Economic Area or the United Kingdom, we rely on recognised safeguards such as standard contractual clauses, together with additional measures where needed.
You may request details of the safeguards applying to your data by writing to privacy@imaarabridge.com.
8How long we keep it
We keep personal data only as long as necessary for the purpose it was collected, then delete or anonymise it.
| Type | Indicative retention |
|---|---|
| Enquiries that do not become engagements | [ 24 ] months from last contact |
| Client engagement records and correspondence | [ 7 ] years after the engagement ends |
| KYC/AML records and identity documents | As required by applicable law, typically [ 5–10 ] years |
| Transaction, invoicing, and accounting records | As required by Rwandan tax and accounting law |
| Account and portal data | While your account is active, then [ 12 ] months |
| Community profile and posts | While you remain a member, then removed on request |
| Newsletter subscription | Until you unsubscribe |
| Server logs and cookie data | Up to [ 26 ] months |
Longer retention may apply where needed to establish, exercise, or defend legal claims.
9Your rights
Subject to applicable law, you have the right to:
- Access — obtain a copy of the personal data we hold about you.
- Rectification — have inaccurate or incomplete data corrected.
- Erasure — ask us to delete data where there is no continuing lawful reason to keep it.
- Restriction — ask us to pause processing while a concern is resolved.
- Objection — object to processing based on legitimate interests, and to direct marketing at any time.
- Portability — receive certain data in a structured, machine-readable format.
- Withdraw consent — at any time, without affecting prior processing.
- Complain — to a supervisory authority (see Section 14).
To exercise any right, email privacy@imaarabridge.com. We will respond within the period required by law (and in any event without undue delay). We may need to verify your identity first — a safeguard that protects you.
Exercising your rights is free. We will only charge, or decline, where a request is manifestly unfounded or excessive, and we will explain why.
10How we protect your information
We apply security measures appropriate to the sensitivity of what you entrust to us, including:
- encryption in transit (TLS) and at rest for stored documents;
- hashed passwords, secure session management, and optional two-factor authentication;
- role-based access — advisors and staff see only what their work requires;
- a private, access-controlled client portal for documents rather than open email where practical;
- vetted processors under written data-protection terms;
- logging, monitoring, backups, and staff confidentiality obligations.
No system is perfectly secure. If a breach occurs that is likely to result in a risk to your rights, we will notify the supervisory authority and affected individuals as required by law, and tell you what happened and what to do.
Please help us: use a strong, unique password, enable two-factor authentication, never share your login, and treat unexpected payment-instruction emails with suspicion — we will never change bank details by email without confirming with you by telephone.
12Marketing communications
With your consent, we send the starter guide, dispatches, event invitations, and occasional updates. Every email has a one-click unsubscribe, and you can manage preferences in your account settings. We may still send service messages (verification, security, billing, and updates about your engagement) — these are not marketing and cannot be opted out of while you hold an account or engagement.
13Automated decision-making
We do not make decisions producing legal or similarly significant effects about you by automated means alone. Screening tools may flag a matter for review, but a human being always makes the decision.
15Changes to this policy
We may update this policy as our services, technology, or the law evolves. We will change the "last updated" date above and, where changes are significant, notify you by email or a notice on the site. Continued use after the effective date means you accept the updated policy.
16Contact us
Imaara Bridge · Kigali Heights, KG 7 Ave, Kigali, Rwanda
Privacy: privacy@imaarabridge.com · General: hello@imaarabridge.com · +250 788 871 929
Monday–Friday, 09:00–18:00 CAT
Imaara Bridge — Build Your Roots Home.