Privacy Policy – Bayimba Centre for Visual and Performing Arts

Updated: October 17, 2025

Introduction

Bayimba Cultural Foundation (“we,” “us,” or “our”) is committed to protecting the privacy and security of your personal data. This Privacy Policy outlines our practices and procedures for collecting, using, and disclosing your personal data when you interact with us, including through our website, social media, and other online platforms.It ensures compliance with Uganda’s Data Protection and Privacy Act, 2019 and aligns with International best practices, Including the EU General Data Protection Regulation (GDPR) principles.

What Information Do We Collect?

We collect various types of information, including:

Personal Data: Name, email address, phone number, and other contact information.
Usage Data: Information about your interactions with our website, social media, and other online platforms.
Payment Information: Credit card details, billing address, and other payment-related information.
Safeguarding Information: Relevant data to ensure the safety and wellbeing of minors or vulnerable persons in our programs (with consent).

How Do We Use Your Information?

We use your information for various purposes, including:

Communication: Responding to your inquiries, providing updates about our programs and events.
Donations and Payments: Processing donations, payments, and other transactions.
Program Management: Managing our programs, events, and activities.
Marketing and Promotion: Promoting our organization, programs, and events.
Safeguarding: Ensuring safety and wellbeing of participants particularly children and vulnerable persons.

Disclosure of Your Information

We may disclose your information to:

Service Providers: Third-party vendors, consultants, and service providers who assist us in our operations.
Partners: Organizations and individuals who partner with us in our programs and events.
Authorities: Government agencies, law enforcement, and other authorities, as required by law.

All third parties must adhere to confidentiality and data protection obligations consistent with this policy.

Data Security

We implement various security measures to protect your personal data, including:

Encryption: Encrypting sensitive information, such as payment details.
Access Controls: Limiting access to authorized personnel only.
Data Backup: Regularly backing up our data to prevent loss.
Staff audit and training on data protection and safeguarding procedures.

Data Retention and Disposal

We retain your personal data only for as long as necessary for the purposes outlined in this policy or as required by law. When no longer needed, data is securely deleted or anonymized to prevent unauthorized access or disclosure.

Safeguarding Children and Vulnerable Persons

We are committed to ensuring the safety and wellbeing of children and vulnerable individuals participating in our programs.

When collecting data from or about minors, we obtain consent from parents or guardians and apply additional protection measures.
Staff and volunteers receive safeguarding training to recognize and respond appropriately to concerns.
All interactions (registrations, virtual workshops, photo/video use) follow safeguarding and child protection procedures.
Online platforms used by us maintain strict privacy settings and moderated engagement.

Data Breach and Response

In an event of a data breach, we will promptly:

Assess the situation
Take corrective action
Notify affected individuals (if required)
Report to the relevant authorities in accordance with applicable laws.

Accessibility

We are committed to providing equitable access to our programs, services and information. Our website and online platforms strive to comply with recognized accessibility standards such as (WCAG 2.1). This policy and related materials can be provided in alternative formats (e.g. large print, Braille and audio) upon request.

Inclusion and Non -Discrimination

We uphold values of equity, diversity and inclusion in all aspects of our work. We do not collect, use or disclose data in ways that discriminate on basis of race, gender ,disability ,age , religion, sexual orientation or any other protected status. Our communication and engagement practices are culturally sensitive and inclusive of all communities we serve.