Privacy Policy

AYA Informatica (“we,” “us,” or “our”) operates the website ayainformatica.tech (the “Site”). This Privacy Policy explains what personal information we collect, how we use it, and the choices you have.

By using our Site you agree to the practices described here. If you do not agree, please do not use the Site.

We collect only the minimum information necessary. We do not run advertising, third-party tracking pixels, or behavioural analytics.

2.1 Information you provide directly

When you submit our contact form:

• Full name — to address you correctly
• Email address — to reply to your message
• Phone number — optional, only if you provide it
• Subject & message — the content of your enquiry

2.2 Information collected automatically

Our web host (Vercel) may automatically collect standard server-log data: IP address (anonymised after 24 hours), browser type, pages visited, and referring URL. This is used solely for security and infrastructure. We do not build profiles from it.

2.3 Cookies

This Site does not set any first-party cookies or use cookie-based analytics. Our hosting provider may set a technical session cookie strictly necessary to serve the site. No marketing or tracking cookies are used.

We use the information you submit only to:

• Respond to your enquiry or partnership request
• Carry out pre-contractual communications
• Comply with legal obligations

We will never sell, rent, or share your personal data with third parties for marketing purposes.

We use the following sub-processors. Each is bound by their own privacy policy:

Contact form submissions are retained in our email inbox for as long as necessary to fulfil the purpose of your enquiry, and no longer than 2 years unless a longer period is required by law. Server logs collected by Vercel are automatically deleted after 30 days.

Depending on your location, you may have the following rights:

• Access — request a copy of the data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — request deletion of your data
• Portability — receive your data in a machine-readable format
• Objection — object to processing based on legitimate interests

To exercise any of these rights, email ay.company.andy@gmail.com. We will respond within 30 days. Rwandan residents may also contact the Rwanda Information Society Authority (RISA).

We implement appropriate technical and organisational measures including:

• HTTPS / TLS encryption on all pages
• HTTP security headers (HSTS, CSP, X-Frame-Options)
• Rate limiting on our API endpoints
• Input validation and sanitisation on all form fields

No method of internet transmission is 100% secure. We take commercially reasonable precautions but cannot guarantee absolute security.

Our Site is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has submitted information to us, please contact us at ay.company.andy@gmail.com and we will delete it promptly.

We may update this Privacy Policy from time to time. When we do, we will update the “Last Updated” date. Continued use of the Site after changes constitutes acceptance of the updated policy.

For any questions about this Privacy Policy: