Data Protection Policy

This Data Protection Policy outlines Baha Visa’s commitment to ensuring the security and integrity of personal data in accordance with applicable laws including The Bahamas Data Protection (Privacy of Personal Information) Act.

1. Purpose

The purpose of this policy is to protect the rights and freedoms of individuals whose personal data Baha Visa collects and processes, and to ensure compliance with data protection legislation.

2. Scope

This policy applies to all employees, contractors, consultants, partners, and vendors handling personal data on behalf of Baha Visa.

3. Principles of Data Protection

• Lawfulness, fairness, and transparency
• Purpose limitation
• Data minimization
• Accuracy
• Storage limitation
• Integrity and confidentiality

4. Data Subject Rights

• Right to access
• Right to rectification
• Right to erasure
• Right to restrict processing
• Right to object
• Right to data portability

5. Legal Basis for Processing

We collect and process personal data only when there is a legal basis to do so, such as user consent, contractual necessity, or legitimate business interest.

6. Data Security Measures

• Encrypted storage and communication
• Access control and role-based permissions
• Regular security audits and risk assessments
• Staff training and awareness

7. Data Retention

Personal data is retained only as long as necessary for the purpose it was collected. Data no longer needed is securely destroyed or anonymized.

8. Breach Notification

In the event of a data breach, Baha Visa will notify affected individuals and relevant authorities within the required timeframes, including steps taken to mitigate the breach.

9. Contact for Concerns

If you have any questions or concerns about how your data is handled, contact our Data Protection Officer at privacy@bahavisa.com.