Rimaax Privacy Policy

Last Updated: October 19, 2025

At Rimaax, we value your trust and are committed to protecting the privacy and confidentiality of your personal and business information. This Privacy Policy explains how we collect, use, store, and share your information in connection with our services, including accounting, tax advisory, internal audit, compliance, and financial reporting. By using our services, you consent to the practices described in this policy

We collect information to provide accurate and effective services. This includes personal information such as names, contact details, identification documents, and financial information; business information including company registration documents, financial statements, tax filings, and other materials necessary to deliver our services; and service usage data such as communication logs, emails, and interactions related to advisory or reporting services. This information may be collected directly from you, your authorized representatives, or from public and regulatory sources as required for compliance purposes.

Rimaax uses client information to deliver professional services, prepare accurate financial statements, tax filings, and management reports, communicate important updates and regulatory advice, and comply with all applicable Rwandan laws and professional standards. We treat your data as strictly confidential and do not sell or share it with unauthorized third parties. Information may only be shared with regulatory authorities, trusted service providers under strict confidentiality agreements, or as necessary for legal proceedings, audits, or the protection of our rights.

We implement strong technical and organizational measures to protect your information against unauthorized access, loss, or misuse. Clients are responsible for safeguarding their access credentials and any sensitive documents shared with Rimaax. We retain personal and business data only as long as necessary to provide services and comply with Rwandan law. Upon closure of your engagement, your data is kept for six (6) months to allow for reactivation or retrieval, after which it is permanently deleted or anonymized.

Under Rwandan law, clients have the right to access, correct, or request deletion of their data where legally permissible. Clients may also object to processing, restrict processing, request portability, or raise concerns regarding automated decision-making or profiling. Our services are not intended for minors under 16, and we do not knowingly collect data from minors without parental or guardian consent. Rimaax may update this Privacy Policy from time to time, with significant changes communicated via email or posted on our website prior to becoming effective. Clients may exercise their rights or ask questions by contacting info@rimaax.com.