Your data on EyaTickets: what Rwandan law says and how we protect it

Law N° 058/2021 governs the protection of personal data in Rwanda. Here is, in plain language, what it changes for you as an EyaTickets user — and what we actually do to comply with it.

Your rights

The law guarantees you a right of access, rectification, erasure and portability over your personal data, with a legal processing time of 30 days for any request.

What we collect, and why

EyaTickets collects your Mobile Money number and possibly your email to deliver your tickets, as well as your purchase history for customer support. No data is collected beyond what is necessary for the service.

Where your data is stored

Your data is hosted by Supabase (EU-West-1 region, Ireland) and the application is served by Vercel (United States) — two hosting providers subject to internationally recognized security standards.

How to exercise your rights

For any request relating to your data, write to us at legal@eyatickets.com. For a deletion request specifically, follow the procedure detailed on our Delete your data page.

The full details of our processing activities are available in our Privacy Policy.