[ INSTITUTIONAL COMPLIANCE & SAFEGUARDING ]

Privacy & Cookie Policy

Our binding commitment to participant dignity, institutional confidentiality, and digital privacy under Law N° 058/2021 of Rwanda and global GDPR benchmarks.

Effective: January 1, 2026 · Version: 3.2 · Data Controller: Qrate Creative Communications

Documentary Field Safeguarding & Participant Rights

At Qrate, privacy is not simply a legal compliance metric—it is the foundation of ethical storytelling. When documenting communities, beneficiaries, clinicians, educators, and field personnel, we operate under our strict Ethical Field Consent Framework:

Multi-Lingual Informed Consent

Prior to any filming or photography, participants receive full verbal and written briefings in their native language (Kinyarwanda, English, French, Swahili) outlining exact broadcast channels, duration, and intent.

Child & Vulnerable Group Protection

Minors require dual-verified parental or legal guardian consent alongside institutional safeguarding officer sign-off. We strictly prohibit exploitative, distress-inducing, or undignified depictions.

Perpetual Right of Revocation

Documentary participants maintain the right to withdraw consent at any stage of production without prejudice, penalty, or disruption to their relationship with partner NGOs.

Non-Commercialization of Field Assets

Raw photographic, audio, or cinematic material captured during partner engagements is never sold, licensed to stock agencies, or used for third-party commercial exploitation.

Digital Data Collection & Legal Bases

We process digital information solely for clear, legitimate institutional communications and client partnerships under Law N° 058/2021 (Rwanda) and the EU General Data Protection Regulation (GDPR):

A. Consultation & Inquiry Data

When you submit an inquiry via our contact form or schedule a director session via Calendly, we collect your name, institutional email address, organization name, country, and project brief. This is processed under the legal basis of contractual necessity and legitimate interest to respond to your request.

B. Strategic Intel & Framework Downloads

Access to our open-source playbooks, budget calculators, and field checklists requires minimal institutional identification to prevent automated scraping and understand resource utility.

C. Technical & Aggregate Analytics

We collect aggregated, anonymized technical telemetry (browser type, operating system, approximate geographic country, time spent per case study) without collecting personal fingerprinting identifiers.

Cookie Policy & Tracking Technologies

Cookies are small cryptographic tokens placed on your device to ensure interface stability and remember your accessibility preferences. We categorize our cookie usage into two transparent tiers:

Category	Purpose	Duration	Default State
Strictly Essential	Session persistence, security headers, form anti-CSRF token verification, and cookie preference storage.	1 Year	Active (Mandatory)
Performance & Analytics	Anonymized traffic metrics, reading depth evaluation, and performance monitoring. No cross-site advertising tracking.	90 Days	Consent Required

Manage Your Cookie Preferences

You can update or withdraw your consent preferences at any time.

Data Security, Storage & Sub-Processors

All data in transit is encrypted using industry-standard TLS 1.3 cryptographic protocols. We retain client and participant records only for the period necessary to deliver contracted creative deliverables or fulfill statutory auditing requirements.

Absolute Guarantee: Qrate never sells, rents, monetizes, or distributes personal or institutional data to advertising networks, data brokers, or AI training marketplaces.

Vetted Sub-Processors

GitHub Pages & CDN Infrastructure: Secure, encrypted static hosting and global asset delivery.
Calendly LLC: Direct director consultation scheduling (SOC 2 Type II certified).
EmailJS / Google Workspace: Encrypted inquiry routing with multi-factor authentication.

Your Rights & DPO Inquiries

Under Rwandan Law N° 058/2021 and international privacy regulations, data subjects possess enforceable rights:

Right to Access & Portability Request a certified copy of any personal or organizational data stored by Qrate.

Right to Rectification Promptly correct inaccurate, outdated, or incomplete records.

Right to Erasure ("To Be Forgotten") Request permanent deletion of your records from our active communications database.

Right to Object & Restrict Restrict the processing of specific documentary archives or communications.

Direct Privacy & Safeguarding Contact

To exercise your data rights, request media archives, or report a safeguarding inquiry, please contact our institutional Data Protection Officer directly:

✉ comms@qrate.rw · 📍 Kigali, Rwanda · Response SLA: Within 48 Hours