PRIVACY & DATA PROTECTION POLICY

This Privacy & Data Protection Policy explains how Belgo Congo Role, Inc. (“BCR,” “we,” “us,” or “our”) may collect, use, retain, disclose, and protect personal data received through its website and related digital activities. It applies, as relevant, to visitors, people contacting us, membership applicants, communication subscribers, participants, donors, potential partners, and other persons interacting with BCR online.

Belgo Congo Role, Inc. is the organization responsible for the processing described in this Policy, subject to the independent roles of certain third-party providers. Questions about privacy or applicable rights may be directed to the contact information at the end of this Policy.

Depending on the interaction, BCR may process:

• name and identity or profile information voluntarily provided
• contact details, including email, telephone, country or region
• organization, role, profession, or professional affiliation
• membership or participation application information
• partnership or collaboration proposal information
• communication preferences and newsletter subscriptions
• event and activity information
• information needed to process or document an appropriate financial contribution
• messages, requests, and documents voluntarily submitted
• technical information such as IP address, browser, device, security logs, and navigation data where available.

BCR may also receive personal data from sources other than the individual, for example a partner, event organizer, public source, or service provider, where appropriate and permitted. Where required, BCR provides the applicable information concerning that processing.

BCR may use personal data to:

• respond to inquiries and manage communications
• administer membership, participation, or collaboration requests
• organize events, conferences, research, and programs
• manage institutional communications and subscriptions
• process or document appropriate contributions and transactions
• operate, secure, and improve the website
• prevent abuse, fraud, and security incidents
• comply with legal, accounting, administrative, or regulatory obligations
• protect the legitimate rights and interests of BCR and affected persons.

Depending on the jurisdiction and context, processing may rely on consent, steps requested by the individual, legal obligations, BCR’s legitimate interests where not overridden by applicable rights, or another basis permitted by applicable law.

Subscription to optional newsletters or communications should remain separate, where required, from membership, partnership, donation, or general contact submissions. Individuals may use the unsubscribe mechanism provided or contact BCR. Withdrawal of consent does not affect processing lawfully carried out before withdrawal.

BCR’s general forms are not designed to request unnecessary sensitive personal data. Unless clearly necessary and requested, visitors should avoid submitting information concerning health, political opinions, racial or ethnic origin, religious beliefs, biometric data, sex life, sensitive government identifiers, or other specially protected information.

Where payments are available, they may be processed by a third-party payment provider. BCR does not intend to store full payment-card numbers directly on its own server. Actual processing depends on the provider and technical configuration used.

BCR does not sell personal data. Data may be disclosed as appropriate to hosting, forms, communications, analytics, payment, security, and professional service providers, and to authorities where required by law. Disclosures should be limited to what is appropriate for the relevant purpose.

Because BCR has an international mission, data may be processed in more than one country, including the United States or countries where providers or authorized persons are located. Where specific international-transfer rules apply, BCR seeks to use an appropriate basis or safeguard. This Policy does not claim that a particular transfer mechanism is in use until the actual configuration has been verified.

BCR retains personal data for a period reasonably necessary for the relevant purposes, legal and accounting obligations, security, dispute resolution, and appropriate institutional records. Retention periods may vary by data category. BCR does not publish a generic or fictitious uniform retention period.

BCR seeks to use reasonable administrative, organizational, and technical measures, which may include access controls, strong passwords, multi-factor authentication where available, secure connections, backups, and role-based access. No system can guarantee absolute security.

Depending on location and applicable law, individuals may have rights to information, access, correction, erasure, restriction, objection, portability, withdrawal of consent, and complaint to a competent authority. These rights do not necessarily apply identically in every jurisdiction and may be subject to legal exceptions.

BCR may request reasonable information to verify identity and the scope of a request before responding. BCR seeks to address valid requests within applicable timeframes and may retain a reasonable record of the request and response.

BCR’s general website is not designed to intentionally collect personal data from minors without an appropriate framework. If BCR learns that data was collected inconsistently with applicable requirements, it may take reasonable steps to delete or otherwise appropriately handle it.

BCR’s use of cookies and similar technologies is described in its Cookie Policy. Where prior consent is required for non-essential technologies, they should be configured in accordance with applicable requirements.

The website may link to external services. Their privacy practices are governed by their own policies. The presence of a link or third-party service does not automatically constitute an institutional partnership with BCR.

BCR does not intend, through its general website, to make decisions producing significant effects on an individual based solely on automated processing, unless specifically disclosed and handled under an applicable framework.

BCR may update this Policy to reflect changes to the website, services, providers, practices, or applicable law. The published version will state its last-updated date.

Belgo Congo Role, Inc. 4903 Laythan Jace Ct Snellville, GA 30039-6735 United States Email: info@belgocongorole.com Website: belgocongorole.org