Privacy Policy

Please read our Privacy Policy to understand how we collect, use, share and protect your personal information. All undefined and capitalized terms contained in this Privacy Policy shall have their meaning set forth in the Bumbuntu / Little Stones Communications Terms of Use.

HOW WE COLLECT YOUR PERSONAL INFORMATION

We collect your personal information when you interact with Bumbuntu platform built on Circle and/or Website, such as when you create an account on the Bumbuntu platform built on Circle, apply for membership or book an event.

We also collect information regarding your use of Bumbuntu’s App via Circle and/or Website, to help us improve and optimise our services.

PERSONAL INFORMATION WE COLLECT FROM YOU

We collect personal information via the Bumbuntu platform built on Circle and/or Website. We collect and use different kinds of personal data: identity data, contact data, transaction data, technical data, profile data, usage data, user generated content. Data is provided in different ways:

Membership application

Membership onboarding

Booking and paying for experiences

Third Party Data (invitation of Guest(s), referral of potential Members)

Geolocation data, if you provide your consent to do this

USE OF YOUR PERSONAL INFORMATION

Bumbuntu uses personal information for the following purposes:

Website and Circle’s mobile application

Processing payments

Marketing and communications

Member support

New product development

Financial analysis and investor relations

Safety and security

4. LEGAL BASIS FOR THE COLLECTION OF YOUR INFORMATION

We will always collect personal information from you only where we either:

1. Have your consent to do so;
2. Need the personal information to perform a contract with you (such as payment processing and experience delivery);
3. Need to collect your data for our legitimate interests (for instance to improve our services, or to ensure the safety and security of our members, partners and employees);
4. Need to use your information to comply with any legal obligation or regulatory requirement to which we are subject

SHARING YOUR PERSONAL INFORMATION

We may disclose your personal data to any partner or provider that makes available an experience you book or use through our website, or to third parties who provide data processing services to us (such as Circle, Stripe, Klaviyo and Typeform).

PROCESSING YOUR PAYMENTS

We use Stripe, a third party payment processor, for your payments for the events you book with us and to collect your monthly/quarterly/annual membership. We do not store card details on our server. Credit and debit card payments are processed by Stripe on their secure payments server and all card details are fully encrypted and stored by them. Your payment will be processed by Stripe, who collects, uses and processes your information, including payment information, in accordance with their privacy policy. You can access their privacy policy via the following link: https://stripe.com/gb/privacy

REFERRING MEMBERS AND INVITING FRIENDS

While using our website we may be using service providers, who may collect, store and/or process third party data. We make reasonable efforts to engage with trusted partners that post a privacy policy governing their collection, processing and use of non-personal and personal information.

INTERNATIONAL DATA TRANSFER

Information you submit to us is stored within the European Economic Area on our third-party hosting provider’s servers. This means that we are legally oblidged by the GDPR to protect your personal data within prescribed standards.

Our third-party hosting provider is Amazon Web Services. Their privacy policy is available here: https://aws.amazon.com/privacy/

Your personal data is or may be transferred outside the EEA in specific situations: Stripe’s services in Europe are provided by a Stripe affiliate—Stripe Payments Europe Limited (“Stripe Payments Europe”) – an entity located in Ireland. In providing Stripe Services, Stripe Payments Europe transfers personal data to Stripe, Inc. in the US.

RETENTION OF YOUR PERSONAL INFORMATION

We will retain your personal information as long as needed to fulfill the purposes explained in Section 3, in case we have a legitimate interest or for a period specifically required by applicable regulations or laws. 

When determining the retention period, we will take into account: our contractual obligations and rights in relation to the information involved;

legal obligation(s) under applicable law to retain data for a certain period of time; statute of limitations under applicable law(s); our legitimate interests (potential) disputes; and guidelines issued by relevant data protection authorities.

We will securely delete your personal information where we no longer require it for the purposes collected.

YOUR RIGHTS 

You have the following data protection rights:

• Accessing or requesting a copy or your information
• Updating or deleting your personal information
• Restricting or stopping the processing of information
• Opt-out of marketing communications
• Where we have asked for your consent, withdrawing this consent at any time
• Filing a complaint to your data protection authority
• Any other rights, as granted by applicable legislation

CHANGES TO OUR PRIVACY POLICY

We may update our Privacy Policy from time to time. If we make significant changes, we will notify you in advance of the changes through our Circle app or other means, such as email. We encourage you to periodically review our Privacy Policy for the latest information.

Use of our services after an update amounts to consent to the updated Privacy Policy to the extent permitted by law.

CONTACT DETAILS

If you have any questions or concerns about our Privacy Policy or how we use your personal information specifically, you can contact us at hello@bumbuntu.com