Your privacy matters. Here's exactly how we handle your data.
Last updated: May 17, 2026
All data is encrypted in transit and at rest.
We tell you exactly what we collect and why.
You can request access, correction, or deletion of your data.
We only send marketing emails with your explicit consent.
In plain English: We collect only what we need to run our store and serve you. We don't sell your data to anyone. You can ask us to delete your account and data at any time by emailing bellatisgroup@gmail.com.
Bellatis Ltd is an e-commerce company specializing in cosmetics and beauty products, based in Kigali, Rwanda. We operate the website bellatis.com. For any privacy-related matters, contact us at bellatisgroup@gmail.com.
We collect information you provide directly to us, including: • Account information: name, email address, phone number, and password (hashed). • Order information: shipping address, billing details, and purchase history. • Communication data: messages you send us via our contact form. • Newsletter subscriptions: your email address if you subscribe to our newsletter. We also automatically collect certain technical data when you visit our site: • Page views and browsing behavior on our site. • Device and browser type, IP address (anonymized). • Referring website (where you came from). • Cookies and similar tracking technologies.
We use the information we collect to: • Process and fulfill your orders. • Send order confirmations, shipping updates, and receipts. • Respond to your customer service requests and inquiries. • Detect and prevent fraud and security breaches. • Improve our website, products, and services. • Send you marketing emails (only with your consent, and you can opt out at any time). • Comply with legal obligations applicable in Rwanda and internationally.
We process your personal data under the following legal bases: • Contract: Processing necessary to fulfill orders you have placed. • Legitimate interests: Improving our services, preventing fraud, and analytics. • Consent: For sending marketing communications. You may withdraw consent at any time. • Legal obligation: Where we are required by law to process your data.
We use cookies and similar technologies to: • Keep you signed in to your account. • Remember your cart and preferences. • Analyze website traffic and user behavior (anonymized). • Improve website performance. You can control cookies through your browser settings. Disabling certain cookies may affect site functionality. We do not use third-party advertising cookies.
We do not sell, trade, or rent your personal data to third parties. We may share your data with: • Shipping and logistics partners: to deliver your orders. • Payment processors: to handle transactions securely (they do not store your card details on our servers). • Email service providers: to send transactional and marketing emails. • Legal authorities: where required by law or court order. All third parties are bound by confidentiality agreements and are not permitted to use your data for their own purposes.
We retain your personal data for as long as necessary to: • Maintain your account and provide you with our services. • Comply with our legal obligations (e.g., tax and financial records are kept for 5 years). • Resolve disputes and enforce our agreements. When data is no longer needed, it is securely deleted or anonymized.
You have the following rights regarding your personal data: • Right of access: Request a copy of the personal data we hold about you. • Right to rectification: Request correction of inaccurate or incomplete data. • Right to erasure: Request deletion of your personal data ("right to be forgotten"), subject to legal obligations. • Right to restriction: Request that we limit how we use your data. • Right to data portability: Request your data in a machine-readable format. • Right to object: Object to processing based on legitimate interests. • Right to withdraw consent: For marketing emails, opt out at any time via the unsubscribe link. To exercise these rights, contact us at bellatisgroup@gmail.com. We will respond within 30 days.
We take data security seriously and implement appropriate technical and organizational measures, including: • HTTPS encryption for all data in transit. • Hashed and salted passwords (we never store plain-text passwords). • Restricted access to personal data on a need-to-know basis. • Regular security reviews and updates. While we strive to protect your data, no method of transmission over the internet is 100% secure. If you believe your account has been compromised, contact us immediately.
Our Service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
Your data is stored and processed in Rwanda. If we transfer data outside Rwanda, we ensure appropriate safeguards are in place in accordance with applicable data protection laws.
We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the "Last Updated" date and, where appropriate, sending you an email notification. We encourage you to review this page periodically.
For any questions or concerns about this Privacy Policy or our data practices, please contact: Bellatis Ltd — Data Protection Email: bellatisgroup@gmail.com Phone: +250 794 488 115 Kigali, Rwanda You also have the right to lodge a complaint with the relevant data protection authority in Rwanda.
