Skip to main content
Mountain Ceramics Company

# Privacy Policy

Version 1 · Updated 27 Oct 2026

Privacy Policy

TESTING DRAFT — NOT APPROVED FOR PRODUCTION. Prepared on 27 October 2026 to support registration testing. A qualified privacy lawyer must verify this notice against the company's actual operations, applicable law, hosting locations, and service providers before production use. Publishing it records user acceptance.

Version: Draft 1 Document type: PRIVACY_POLICY Business: Mountain Ceramic Company LTD, Kacyiru, Gasabo, Kigali, Rwanda Privacy contact: info@mountainceramic.com

1. Who we are and what this notice covers

Mountain Ceramic Company LTD operates this website. This notice describes personal information that may be processed when you browse the site, register, shop, contact us, save a room design, manage cookie preferences, or subscribe to company updates. It is a testing draft, not a final statement of legal rights or obligations.

2. Information the service uses

Depending on what you do, the service may process:

  • Account and sign-in information: first and last name, email address, optional phone number, password verifier (not your plain-text password), email-verification state, security and sign-in records, and account settings.
  • Legal acceptance and security data: the versions of the registration documents you accept, acceptance time, IP address and browser user-agent recorded with that acceptance, and security or rate-limiting records. Contact-form rate limiting uses a hashed IP value.
  • Orders and delivery: order contents, product and quantity details, prices, discounts, currency, order history, contact information, delivery address and instructions, optional tax identification number, and payment method and status.
  • Payment records: transaction references, payer phone where applicable, refund records, and information returned by a payment provider. Payment options depend on what the site offers at checkout. The final notice must identify the actual providers and confirm exactly what payment data this site receives.
  • Messages and designs: details and messages you submit through contact forms, replies, and room-visualizer designs or preferences you choose to save.
  • Newsletter: email address, subscription and confirmation status, consent time, and unsubscribe records. Subscription requires a separate affirmative choice and email confirmation.
  • Device, preference, and usage data: language and necessary sign-in preferences, cookie choices, basic request/security logs, and—only if you opt in—Google Analytics usage information.

Do not submit payment-card security codes, account passwords, or other sensitive information in a contact message.

3. How we use information

We use information to create and secure accounts; verify email addresses; provide requested website features; answer enquiries; prepare and fulfil orders; coordinate delivery and payment; send transactional messages such as verification, order, and password-reset emails; record legal-document acceptance; administer opted-in newsletters; prevent abuse and fraud; maintain the service; and meet applicable legal obligations.

Newsletter marketing is separate from account and order messages. You may unsubscribe from marketing messages using the link provided. Cookie-based analytics is optional and is loaded only after you enable it.

4. Legal grounds and choices

The appropriate legal ground depends on the purpose and the law that applies. Processing may be needed to provide an account or requested transaction, to meet a legal obligation, to protect the service, or may rely on consent where consent is requested (such as newsletter subscriptions and optional analytics). The company must have counsel confirm the applicable grounds and consent language before launch. You may withdraw a consent choice going forward, without affecting processing that already occurred lawfully.

5. Cookies and local storage

The site uses necessary browser storage to support sign-in and requested preferences. The mcc_cookie_consent cookie records your analytics choice for up to 180 days. Optional Google Analytics is activated only after you opt in; the implementation configures anonymized IP and disables Google advertising signals. If you decline analytics, it is not loaded and analytics cookies are cleared where the browser permits.

The visualizer may keep an anonymous session identifier in browser local storage so a design session can continue. Other browser storage may be used for temporary interface state. You can change cookie settings from the site controls or use your browser settings; disabling necessary storage may prevent sign-in or preferences from working.

6. When information is shared

We do not sell personal information. Information may be made available to authorized staff and service providers only as needed for hosting and database operations, email delivery (including Resend), payment processing, delivery, security, analytics you enable, and support. Providers may process information under their own terms and may operate in countries other than Rwanda. The company must confirm its actual provider list, contracts, safeguards, and processing locations before production.

We may also disclose information when required by law or when reasonably necessary to protect people, rights, property, or the security of the service.

7. Retention and security

We keep information for as long as needed for the purposes described above, to operate your account and transactions, to handle disputes, and to meet legal and accounting duties. Account deletion does not necessarily remove order, payment, legal-acceptance, security, or other records that must be retained. Exact retention periods must be set and documented by the company after legal review.

We use safeguards intended to protect information, including password hashing, access controls, and security monitoring. No online service or transmission can be guaranteed completely secure.

8. Your choices and requests

Subject to applicable law, you may ask to access or correct information about you, request deletion or restriction, object to certain processing, or withdraw consent. You may also update account information, request account deletion by writing to info@mountainceramic.com, manage analytics preferences on the site, and unsubscribe from the newsletter. We may need to verify your identity and may retain some information where the law requires or permits it.

9. Children

The service is not designed to collect children's personal information. The company must confirm the applicable age requirements and parent or guardian rules with counsel. If you believe a child has provided information improperly, contact us.

10. Changes and contact

We will show the current version and publication date on the website. Material changes will be handled in accordance with applicable law, including new consent where required. For privacy questions or requests, contact info@mountainceramic.com or write to Mountain Ceramic Company LTD, Kacyiru, Gasabo, Kigali, Rwanda.

Lawyer and operator review required: confirm controller identity and registration details; applicable legal grounds and rights; actual hosting, email, analytics, payment, and delivery vendors and transfer locations; data retention periods; children's rules; complaint authority and process; and the accuracy of each data category and security statement.