This Privacy Notice explains how Visions Talents Ltd collects, uses, stores and protects your personal data when you use the Visions Talents Household Payroll Platform at payroll.visionstalents.com. It applies to household employers who register on the platform and to the household employees whose data is entered by those employers.
Visions Talents Ltd is registered as a Data Controller and Data Processor with the National Cyber Security Authority (NCSA) under Law No. 058/2021 of 13/10/2021 relating to the protection of personal data and privacy in Rwanda.
1. Who we are
Visions Talents Ltd · TIN: 156000833 · KG 548, House 12, Kigali, Rwanda · contact@visionsafrica.com
2. What data we collect
From household employers (account holders):
Full name, email address and phone number
Tax Identification Number (TIN)
RSSB number
National ID number or passport number
Ishema account phone number
Declaration preferences and tax settings
Password (stored as an encrypted hash)
From household employees (entered by the employer):
Full name
National ID number or passport number
ID document scan or photograph
RSSB number
Salary, transport allowance and other benefits
Employment start date and status
Generated data:
Monthly payroll records including PAYE, pension, maternity and CBHI calculations
Declaration history and filing status
Audit logs, login timestamps and IP addresses
Notification history
3. Why we collect this data
To provide payroll management and statutory tax compliance services
To calculate PAYE, RSSB, maternity and CBHI deductions
To generate Ishema declaration files for the Rwanda Revenue Authority
To send deadline reminders and service notifications
To maintain secure records of payroll history
To comply with applicable Rwandan tax and labour laws
4. Legal basis for processing
Contractual necessity: processing is required to deliver the services you have engaged us to provide
Legal obligation: processing is required to comply with Rwandan tax and social security laws
Legitimate interest: processing of platform activity logs and audit records to maintain platform security
5. How we store and protect your data
Your data is stored securely on servers hosted by DigitalOcean LLC, located in Frankfurt, Germany. We apply the following safeguards:
Sensitive identifiers (TIN, RSSB number, National ID number) are encrypted at rest
All data transmission is protected by HTTPS encryption (TLS 1.2 and 1.3)
Access is restricted by role-based controls and requires authenticated login
Login attempts are rate-limited to prevent unauthorised access
Storage outside Rwanda
The platform is hosted on servers in Frankfurt, Germany, subject to the EU General Data Protection Regulation (GDPR). Visions Talents Ltd holds, or is in the process of obtaining, authorisation from the NCSA to store personal data outside Rwanda in accordance with Article 50 of Law No. 058/2021.
6. Who we share your data with
Rwanda Revenue Authority (RRA) and RSSB, for statutory declarations
DigitalOcean LLC, as our hosting provider, under a GDPR-compliant Data Processing Agreement
Where required by Rwandan law or a competent court order
7. How long we keep your data
We retain personal data for as long as your account is active and for seven (7) years following termination, in line with Rwandan tax record-keeping requirements.
8. Your rights
Under Law No. 058/2021, you have the right to access, correct, delete, or restrict processing of your personal data. Contact us at contact@visionsafrica.com. We will respond within thirty (30) days.
To lodge a complaint: NCSA Data Protection Office · dpp@ncsa.gov.rw · Toll free: 9080
9. Changes to this notice
We may update this Privacy Notice from time to time. We will notify registered users of material changes by email and update the effective date above.