1. Introduction

King Umurundi Freedom (“KUF-ASBL”, “we”, “us”, “our”) is a registered non-profit civil society organization dedicated to monitoring, documenting, and advocating against human rights violations, corruption, and governance abuses in Burundi.

This Privacy Policy explains how we collect, use, store, share, and protect the personal information of individuals (“you”, “your”) who use our website, submit information, request assistance, or engage with our services.

We are committed to protecting your privacy, ensuring confidentiality, and maintaining the highest standards of ethical and legal compliance. By accessing or using our website, you agree to the practices described in this Privacy Policy.

2. Information We Collect

We collect information in the following categories:

2.1 Information You Provide Directly

 

a) Contact Forms & Submissions

When you contact us or submit a form, we collect:

• Name
• Email address
• Telephone number (if provided)
• Message content
• Any documents, photos, videos, or evidence you voluntarily submit

 

b) Reporting of Human-Rights Violations

Individuals reporting incidents may provide:

• Personal identification information
• Witness statements
• Evidence (images, videos, documents)
• Location details
• Information about alleged perpetrators
• Sensitive information related to threats, arrests, detention, torture, or harassment

 

c) Donations (if applicable)

If the website later integrates donations, we may collect:

• Billing information

• Transaction identifiers

• Payment confirmations
  Note: Payment card info is NOT stored by us.

 

2.2 Information Collected Automatically

When you visit our website, we automatically collect:

• IP address
• Browser type and version
• Device information
• Geographic location (approximate)
• Pages visited and time spent
• Referring URLs
• Cookies and similar tracking technologies

This information is used to improve website performance, security, and analytics.

2.3 Information from Third Parties

We may receive credible information from:

• Partners and NGOs
• International organizations
• Public records
• Media reports

This may include personal information relevant to human-rights documentation.

3. How We Use Your Information

We use personal data only for lawful, legitimate, and explicitly stated purposes.

3.1 Operational and Support Purposes

• To respond to your inquiries or requests
• To document human-rights violations
• To provide support to victims and vulnerable individuals
• To verify and authenticate submissions
• To conduct investigations and fact-checking

3.2 Advocacy, Reports & Publications

We may use aggregated or anonymized information to:

• Produce human-rights reports
• Conduct statistical analysis
• Raise awareness of abuses
• Support advocacy before national or international bodies

We NEVER publish identifiable information without explicit consent, unless required to save life or prevent imminent harm.

3.3 Security and Fraud Prevention

• To detect malicious activity
• To protect the integrity of our platforms
• To ensure safety of victims, witnesses, and contributors

3.4 Website Improvement

• To analyze user behavior
• To improve features, speed, and user experience
•  

4. Legal Basis for Processing

Depending on the context, we process data on these grounds:

• Consent — You voluntarily submit information.
• Legitimate Interest — For human-rights monitoring and organizational functions.
• Vital Interests — To protect individuals at risk of harm.
• Legal Obligation — When required by applicable laws or judicial orders.

5. How We Protect Your Data

We take extensive measures to safeguard personal information:

• Encrypted website (HTTPS)
• Restricted access to sensitive files
• Secure storage systems
• Data minimization and anonymization
• Firewalls & anti-malware systems
• Regular security audits
• Sensitive submissions involving threats, violence, or state abuses are stored in high-security confidential repositories accessible only to authorized personnel.

6. Sharing of Information

We do NOT sell or commercialize personal data.

We may share information only under specific conditions:

6.1 With Your Explicit Consent

For example, if you authorize us to publish your testimony or share it with a partner organization.

6.2 With Trusted Partners

Strictly for:

• Legal assistance
• Protection services
• Advocacy support
• Emergency response

Partners must sign confidentiality agreements.

6.3 For Legal or Safety Reasons

We may disclose information if:

• Required by lawful request
• Necessary to protect life, safety, or prevent a serious crime
• Needed to defend our rights, members, or contributors

6.4 Publication

Only anonymized or aggregated information may be publicly shared in reports.

7. Data Retention

We retain information only as long as necessary:

• Contact messages: up to 24 months
• Human-rights submissions: retained indefinitely for accountability and evidence, unless deletion is requested (see Section 10)
• Cookies: per browser settings
• Data no longer needed is anonymized or securely deleted.

8. Children’s Privacy

We do not knowingly collect data from individuals under 16 years unless:

• They are victims/witnesses needing protection
• A guardian or responsible adult provides consent

Sensitive cases involving minors are handled with strict confidentiality.

9. International Data Transfers

As part of global human-rights work, your information may be securely transferred to:

• International partners
• Advocacy bodies
• Human-rights institutions abroad

All transfers follow strict security, confidentiality, and legal compliance principles.

10. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access your personal data
• Correct inaccurate information
• Request deletion (“Right to be Forgotten”)
• Withdraw consent
• Object to processing
• Request data portability
• Ask how your information is used

To exercise your rights, contact us at contact@kingumurundifreedom.org