Skip to content

Privacy Policy

Last updated:

Legal review required. This document is a draft provided for information and must be reviewed by qualified legal counsel before publication.

This policy explains how Gwavo Technologies SAS (“Gwavo Technologies”, “we”, “us”) collects and uses personal data when you visit this website or contact us through it. We collect as little as possible, use it only for clear purposes, and never sell it.

Who is responsible for your data

Gwavo Technologies SAS, a company based in the Democratic Republic of the Congo, is responsible for the personal data processed through this website.

For any question about this policy or your personal data, please reach us through the contact page of this website.

Data we collect

You can browse this website without creating an account or telling us who you are. We only collect personal data that you choose to send us through the contact form, together with a limited amount of technical data needed to operate and protect the site.

When you submit the contact form, we receive:

  • Your full name, business email address, company and country
  • The type of inquiry and the description of your project
  • Optionally, an indicative budget range and timeline
  • Your acknowledgment of this privacy policy

Technical data

The contact form contains a hidden field designed to detect automated spam. It is not visible to human visitors and is used for no other purpose.

To protect the form against abuse, your IP address is processed briefly in server memory to limit the number of submissions from the same source. It is not stored in a database and is discarded once the rate-limiting window has passed.

Like most websites, our hosting provider may record server logs — such as IP address, browser user agent, requested page and time of access — for security and operational purposes.

How and why we use your data

We use the information you send through the contact form only to read, answer and follow up on your inquiry. We do not use it for advertising, and we do not add you to a marketing list without your separate consent.

Where data protection law requires a legal basis, we rely on the steps you ask us to take before a possible contract, on our legitimate interest in responding to business inquiries, and on our legitimate interest in keeping the website secure. Technical data is used solely to operate, secure and protect the website.

Cookies and local storage

This website sets a single cookie, on the contact page only, and only to protect the contact form against forged submissions from other websites (cross-site request forgery). It holds a random value and nothing about you, is not used to recognise or track you, can only be read by this website, and expires after 24 hours. Because it is strictly necessary for the security of the form, it does not require your consent. No other cookie is set.

The website does not store any information in your browser’s local storage either.

The language of the site is determined by the address you visit (/en or /fr) and by the language preference your browser sends automatically. No cookie is used for this.

Website analytics

If enabled by the website operator, we use Cloudflare Web Analytics to understand overall traffic, such as page views and performance. This service does not use cookies, does not build visitor profiles and does not track individuals across websites.

We do not use advertising trackers, social media pixels or any form of cross-site tracking.

Who we share data with

We do not sell, rent or trade your personal data. We share it only with service providers that help us operate the website, and only to the extent necessary:

  • Our email delivery provider, when configured, which transmits contact form submissions to our team
  • Our hosting provider, which serves the website and may keep the server logs described above
  • Cloudflare, if web analytics is enabled, for aggregated traffic measurement
  • Public authorities, where we are legally required to disclose information

International transfers

Our service providers may process data in countries other than your own, including outside the Democratic Republic of the Congo and the European Union. Where such transfers occur, we rely on the safeguards offered by those providers and required by applicable data protection laws.

How long we keep data

Contact form messages are kept for as long as needed to handle your inquiry and any resulting business relationship, and are then deleted unless we are required to retain them by law.

IP addresses used for rate limiting are held in memory only for a short period. Server logs are kept according to our hosting provider’s retention policy.

How we protect data

Data sent through this website is encrypted in transit. We apply server-side validation, rate limiting, restricted access to submissions and secure configuration practices to protect the information you share with us. No system is entirely free of risk, but we work to keep that risk as low as reasonably possible.

Your rights

Depending on the data protection laws that apply to you — including, for visitors in the European Union, the General Data Protection Regulation (GDPR) — you may have the right to:

  • Access the personal data we hold about you
  • Have inaccurate data corrected
  • Request the deletion of your data
  • Object to or request restriction of certain processing
  • Receive your data in a portable format, where applicable
  • Lodge a complaint with a competent data protection authority

Changes and contact

We may update this policy when our website or practices change. The date at the top of this page shows when it was last revised.

To exercise your rights or ask a question about this policy, please contact us through the contact page of this website. We may need to verify your identity before acting on a request.