Privacy Policy
Last Updated: September 2026
Gihanga Institute of Contemporary Art (GICA) respects the privacy of individuals who interact with the Institute, use our website, register for programmes, become members, or make payments[cite: 3]. This Privacy Policy explains how GICA collects and uses personal information in connection with these activities[cite: 3].
1. Information We Collect
Depending on how you interact with GICA, we may collect[cite: 3]:
- Name[cite: 3];
- Email address[cite: 3];
- Telephone number[cite: 3];
- Membership tier and history[cite: 3];
- Programme, screening, or event RSVP information[cite: 3];
- Payment transaction records[cite: 3]; and
- Information you voluntarily submit via contact forms, inquiries, or admissions surveys[cite: 3].
We seek to collect information that is relevant and reasonably necessary for the activity or service concerned[cite: 3].
2. How We Use Personal Information
GICA may use personal information to[cite: 3]:
- Process memberships and payments[cite: 3];
- Confirm registrations, admissions, and transactions[cite: 3];
- Provide membership access and benefits[cite: 3];
- Communicate with members, visitors, and programme participants[cite: 3];
- Manage exhibitions, screenings, workshops, talks, performances, and residencies[cite: 3];
- Send institutional communications and updates where requested[cite: 3];
- Maintain administrative and financial records[cite: 3]; and
- Meet applicable legal, regulatory, and accounting requirements in Rwanda[cite: 3].
3. Payment Processing
Payments made through GICA's online platforms may be processed by authorised third-party payment providers, including DPO Pay, banks, and mobile money operators[cite: 3]. Where a third-party provider processes payment information, that provider collects and processes information under its own terms and security practices[cite: 3]. GICA does not store or request payment card credentials via unsecured communication channels[cite: 3].
4. Sharing Personal Information
GICA does not sell personal information[cite: 3]. Personal data is only shared with authorized service providers to process payments, provide technical hosting, manage visitor passes, or comply with statutory requirements[cite: 3].
5. Data Security & Retention
GICA implements reasonable organizational and technical protocols to protect personal records against unauthorized access, loss, or misuse[cite: 3]. Information is retained only as long as necessary for administrative, legal, or program purposes, after which it is securely deleted or anonymized[cite: 3].
6. Your Rights
Individuals have the right to request access to or correction of their personal records held by the Institute[cite: 3]. Requests may be directed to our administration team at contact@gica.art[cite: 3].