Privacy Policy

1. Introduction

1.1 Buruburu Catholic Institute of Fine Arts ("BIFA," "we," "us," "our") takes our responsibilities under the data protection laws in Kenya seriously. This policy explains how we collect, use, disclose and/or process the personal data of applicants, students, parents/guardians, alumni, suppliers, and website visitors ("you" or "your"), and helps you make an informed decision before providing us your personal data.

1.2 This statement should be read together with our Terms and Conditions.

1.3 The data controller of your personal data is BIFA.

1.4 This statement applies to all applicants, students, parents/guardians, alumni, suppliers, and anyone who has dealings with the institute.

2. Collection of Information

We collect your personal information with your knowledge and consent when you, among other things:

• Apply for admission to a course or programme
• Ask for more information about our courses, or contact us with a query or complaint
• Respond to or participate in a survey, event, or promotion
• Interact with our admissions or student affairs staff
• Visit any of our premises
• We may also collect information from examination bodies (KNEC, TVET-CDACC) and regulatory bodies (TVETA) to verify academic records

3. What Information Is Collected

The information we collect and store about you includes, but is not limited to:

• Your identity, including your name, photograph, address, phone number, ID/passport number, date of birth, email address, and gender
• Academic records, including KCSE results, certificates, and portfolio submissions
• Parent/guardian and next-of-kin details, where applicable
• Fee payment information, including M-Pesa and bank transaction details
• Your contact with us, such as calls, emails, or social media interactions

4. Use of Information

We may use your information to:

• Process applications for admission and manage enrolment
• Respond to your queries or concerns
• Verify your identity and academic qualifications, including with KNEC, TVET-CDACC, and TVETA
• Assess suitability for a course or programme
• Collect fees and maintain financial records
• Keep you informed about courses, events, and news, unless you opt out of such messages
• Comply with legal, governmental, or regulatory requirements
• Maintain alumni relations
• Prevent and detect fraud
• Administer our website and online platforms

5. Lawful Basis for Processing Your Information

We process your personal information based on the lawful bases provided under Kenya's Data Protection Law, including performance of an enrolment/education service agreement, BIFA's legitimate interests, compliance with a legal obligation, your consent, public interest, or your vital interest.

6. Retention of Information

We retain your personal data in line with our legal and regulatory obligations and for institutional record-keeping purposes. [TODO: BIFA to confirm the specific retention period applicable to student/applicant records, e.g. per Ministry of Education or TVETA requirements, before publishing.]

7. Disclosure of Information

We may disclose your information to law enforcement or regulatory authorities where legally required, to examination and accreditation bodies (KNEC, TVET-CDACC, TVETA) for verification purposes, to service providers who help us deliver our services, and to any other party we are legitimately required to share data with.

8. Marketing

We may use your personal data to keep you informed about BIFA's courses, events, and open days. You can ask us to stop sending you marketing messages at any time by contacting us using the details below.

9. Access to and Updating Your Information

If you believe our records contain inaccurate or incomplete information about you, please visit our admissions office to make the necessary amendments. Some changes will only be made once supporting documentation has been provided.

10. Safeguarding and Protection of Information

BIFA has put in place technical and operational measures to protect the integrity and confidentiality of your data.

11. Your Rights

Subject to legal and contractual exceptions, you have rights under data protection law including the right to be informed, the right to access your personal data, the right to request correction, the right to request erasure, the right to object to or withdraw consent to processing, and the right to request restricted processing. To exercise any of these rights, please contact us using the details below.

12. Cookies

We may use cookies and similar technologies on our website. See our Cookie Policy for full detail.

13. How to Contact Us

If you have questions about this privacy policy, email us at information@bifa.ac.ke or call +254 721 837 917.

14. Right to Lodge a Complaint

You have the right to lodge a complaint with the Office of the Data Protection Commissioner, Kenya.

15. Amendments to This Statement

BIFA reserves the right to amend this statement at any time. Please check this page regularly for updates.

16. Disclaimer

Our website may from time to time contain links to third-party websites. If you follow such a link, note that these sites have their own privacy policies, and we do not accept responsibility for them.