Privacy Policy

1. Who We Are

The Medical Insurance Scheme of the University of Rwanda (MIS-UR) is a health insurance scheme established to provide medical coverage to students, staff and their dependents at the University of Rwanda.

This website (mis.ur.ac.rw) is operated by MIS-UR and serves as an information and communication platform for our university community.

2. Information We Collect

We collect two types of information:

Information you provide voluntarily:

• Name, email address and phone number when you submit a contact form
• Message content you send through our contact form

Information collected automatically:

• IP address and approximate geographic location
• Browser type and operating system
• Pages visited and time of visit
• Referring website (where you came from)
• Device type (desktop, mobile, tablet)

We do NOT collect sensitive personal data such as health records, financial information or identity documents through this website.

3. Cookies & Tracking

We use cookies to improve your experience and understand how our site is used. You will be asked for your consent before analytics cookies are set.

Essential cookies (always active):

• misur_vid — anonymous session identifier (1 year, httpOnly)

Analytics cookies (require consent):

• misur_consent — stores your cookie preference (1 year)
• Page visit data is logged when consent is granted

You can withdraw consent at any time by clearing your browser cookies or clicking "Decline" on the cookie banner. No third-party analytics services are used on this website — all analytics are processed internally.

4. How We Use Your Information

• To respond to your enquiries submitted through the contact form
• To understand which pages are most visited and improve our content
• To monitor website performance and detect technical issues
• To maintain the security and integrity of our systems

We do not use your information for marketing, profiling or automated decision-making.

5. Sharing of Information

We do not sell, rent or trade your personal information to third parties.

Information may be shared only in the following limited circumstances:

• With University of Rwanda administrative staff who need it to respond to your enquiry
• When required by Rwandan law or a valid legal order
• To protect the rights, safety or property of MIS-UR or the University of Rwanda

6. Data Retention

• Contact form messages: kept until manually deleted by administrators
• Visitor analytics: aggregated data kept for up to 2 years; raw hit logs reviewed periodically
• Cookie data: session cookies expire after 1 year; consent preference stored for 1 year

7. Your Rights

You have the right to:

• Access: request a copy of personal data we hold about you
• Correction: request correction of inaccurate data
• Deletion: request deletion of your personal data
• Withdraw consent: opt out of analytics tracking at any time by clearing cookies
• Objection: object to processing of your personal data

To exercise any of these rights, contact us at the address below.

8. Security

We take reasonable technical and organisational measures to protect your information against unauthorised access, loss or misuse. These include:

• Password hashing for all administrator accounts
• Session-based authentication for admin access
• Input validation and parameterised database queries to prevent injection attacks
• Regular review of access logs

No method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to protecting your data using industry-standard practices.

9. Contact Us

For any privacy-related enquiries, requests or complaints, please contact:

This privacy policy may be updated periodically. The date at the top of this page reflects the most recent revision. Continued use of this website after changes constitutes acceptance of the updated policy.