Privacy Policy

UPCOT manufactures and supplies steel sheet, roofing and fabricated profiles in Rwanda. For the information described on this page we are the data controller — the company that decides why it is held and what happens to it.

Our address is KG 40 Street 16, Kigali, Rwanda, P.O. Box 7348. You can reach us at info@upcot.rw or on +250 788 382 155.

This website collects one thing: the information you enter into the quote request form. There is no account, no login and no telemetry. Nothing is gathered in the background.

What you give us:

• check_circle Your contact details: first and last name, business email, phone number and company name.
• check_circle Your project details: location, timeline, and any notes you write.
• check_circle What you asked us to quote: the products and quantities you selected, and any custom bend profile you drew in the simulator, including its measurements.

What is recorded automatically:

• check_circle A hashed form of your IP address. This is not your address: it is a one-way hash we cannot reverse, used only to limit how often a single source can submit.
• check_circle Your approximate country, as reported to us with the request by our hosting provider.
• check_circle A timestamp and a reference number for your request.

This site sets no cookies and carries no advertising trackers. It does keep a count of page views and of how many people start a quote request, so that we can tell whether the site is doing its job. That count records no identifier of any kind — no address, not even the salted hash the forms use, and no cookie or session — so nothing in it can be traced back to you. See our Cookie Policy for the detail.

We use your request for one purpose: to prepare and send you a quote. We do not sell it, we do not use it for advertising, and we do not build a profile of you.

Why we are allowed to process it: we handle your request because you asked us for a quote, which makes processing it necessary to take the steps you asked for before entering into a contract. The abuse-prevention data is processed under our legitimate interest in keeping the form available to real customers. We do not use your request for anything else.

How long we keep it: quote requests are deleted from our database 24 months after receipt. A copy remains in our spreadsheet until we remove it. Rate-limiting counters are deleted after two days.

We use a small number of service providers to run this site. They process your request on our instructions and for no other purpose. They operate globally, so it may be processed outside Rwanda; each is bound by its own data-processing terms with us.

• Cloudflare — hosts this website, stores your request in a database, and provides Turnstile, which checks that the quote form is being used by a person rather than a bot.
• Google — a spreadsheet holds a copy of each request so our sales team can work from it.
• Telegram — our workshop team receives a notification containing your project details, so custom work reaches the people who make it.

The map on our contact page is also provided by Google, but it is not loaded until you click to load it. See our Cookie Policy for that.

We disclose your information to anyone else only where the law requires it. We never sell it, and we do not share it for advertising. If we bring in another service that handles your request, we will name it here first.

You can ask us for a copy of the information we hold about your request, ask us to correct anything wrong in it, ask us to delete it, or object to the way we are using it.

Write to info@upcot.rw and we will action it within 30 days. If we are required to keep something by law, we will tell you that in our reply rather than simply declining.

If you are not satisfied with our answer, you can raise the matter with Rwanda's data protection supervisory authority, the National Cyber Security Authority.