At Botswana Institute of Banking and Finance (“we,” “us,” “our”), we are committed to protecting your personal data and respecting your privacy. This Privacy Notice explains how we collect, use, store, and protect the personal data of students, clients, and other individuals who interact with us in the course of providing training services.
We are committed to ensuring compliance with applicable data protection laws and regulations, including the Data Protection Act.
- Information We Collect
We may collect the following types of personal data, which are necessary for us to provide our training services effectively:
- Personal identification information: Name, date of birth, gender, identification number, nationality.
- Contact information: Email address, phone number, residential address, emergency contact details.
- Professional and educational information: Academic background, professional qualifications, current occupation.
- Financial information: Payment details such as credit/debit card numbers, bank account details, transaction history related to course fees.
- Media and communications: Photographs, video footage, or audio recordings taken during training sessions, events, or webinars, including your participation in online discussions or webinars.
- Sources of Personal Data
- We collect most of the personal data directly from you. You give us this personal data when you complete the various application forms you are given to populate for any training service solicited from us. Some of your personal data is collected indirectly from third parties.
- How We Use Your Personal Data
We process your personal data for the following purposes:
- Providing training services: to enrol you in courses, process training applications, track your progress, and provide certifications, to manage course materials, assignments, and communicate with you regarding course schedules and updates.
- Communication: to send you essential course-related notifications, training materials, updates, and reminders, to provide customer service and respond to any inquiries or feedback.
- Financial and payment processing: to process payments for courses, issue invoices, and handle refunds or billing issues, if applicable.
- Legal and regulatory compliance: to meet legal requirements and regulations applicable to our training programs, such as reporting, accounting, and auditing obligations, to comply with tax laws, educational regulatory standards, and other industry-specific requirements.
- Marketing and promotional activities (only with your consent): to send you promotional materials about upcoming courses, events, webinars, and other training opportunities that may be of interest to you. You can opt-out of marketing communications at any time.
- Legal Basis for Processing Personal Data
We process your personal data based on the following legal grounds:
- Consent: We obtain your consent for specific processing activities such as sending promotional materials or using media recordings for marketing.
- Contractual necessity: We process personal data as required to fulfil our contract with you (e.g., enrolling you in courses, processing payments).
- Legal obligation: We process personal data to comply with applicable legal requirements and regulations.
- Legitimate Interest: We may process personal data for purposes that align with our legitimate business interests, such as improving our services or ensuring security.
- Sharing Your Personal Data
We may share your personal data with the following parties under specific circumstances:
- Service providers: Third-party service providers who assist us in delivering training services, processing payments, hosting our learning platforms, conducting surveys or storage. These third parties are bound by contractual agreements to protect your data.
- Legal authorities: We may disclose your personal data to regulatory bodies, law enforcement agencies, or other authorities if required by law or in response to a legal request.
- Partners: With your consent, we may share your information with educational or professional partners who offer complementary training services or resources.
- Data Retention
We will retain your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Notice, or as required by law. When your data is no longer needed, we will securely delete or anonymize it.
- Your Rights
You have the following rights:
- Right to access: You can request a copy of the personal data we hold about you.
- Right to rectification: You can ask us to correct any inaccurate or incomplete information.
- Right to erasure: You can request the deletion of your personal data, subject to certain conditions.
- Right to restrict processing: You can ask us to limit how we process your data.
- Right to data portability: You may request to receive your personal data in a structured, commonly used format to transfer to another provider.
- Right to object: You can object to the processing of your data for certain purposes, including marketing.
- Right to withdraw consent: If you have given consent for certain data processing activities, you may withdraw it at any time.
To exercise any of these rights, please contact us at +267 395 2493.
- Security of Your Personal Data
We take appropriate technical and organisational measures to protect your personal data against unauthorized access, disclosure, alteration, and destruction. Our security measures include encryption, secure storage solutions, firewalls, and access control policies to protect your data.
- International Data Transfers
If personal data is transferred outside of Botswana to a country lacking an adequacy decision, we will implement appropriate safeguards, such as standard contractual clauses, and rely on permitted derogations if necessary.
- Updates to This Privacy Notice
We may update this Privacy Notice from time to time. When we make significant changes to how we process your personal data, we will inform you.
- Contact Us
If you have any questions about this Privacy Notice or wish to exercise any of your data protection rights, please contact us at:
Data Protection Officer (DPO)
DPO Phone number: +267 395 2493