Colouring Bahrain Privacy Policy

1. Introduction

This privacy policy explains how Colouring Bahrain uses the personal data we collect from you when you use our website. Colouring Bahrain is an open-source research project and part of the Colouring Cities Research Programme (CCRP). The project is developed by the Bahrain Authority for Culture and Antiquities, which acts as the data controller for the purposes of applicable data protection legislation. We are committed to protecting your privacy in accordance with the Bahrain Personal Data Protection Law (PDPL).

2. What Data Do We Collect?

We actively discourage the provision of personal data. To use the site for viewing, no data is required. For contributors, we collect:

Username: We recommend you do not use your actual name.
Password: Stored as a secure cryptographic hash.
Email Address (Optional): Used only for password resets or in exceptional circumstances regarding account misuse.
Usage Data: We use third-party digital tools for traffic analysis and performance measurement to improve the user experience.

3. Purpose and Legal Basis for Processing

We process your data for the following purposes:

To enable secure login and contributions to the project.
To provide a personalized user experience.
To maintain a public record of contributions.

Legal Basis: We process data based on your explicit consent provided upon registration and for our legitimate interests as a research project, provided these do not conflict with your fundamental rights.

Engagement Data: Certain personal data may be required to monitor user engagement for purposes related to historical or scientific research. This data is not stored within, nor automatically processed by, the Colouring Bahrain platform. It is accessed and used solely by project administrators when necessary, for the purposes of information protection, verification, and maintaining the integrity of contributions.

4. Data Storage and Security

Your data is stored in secure databases using industry-standard practices. We implement technical and organizational measures to protect against unauthorized access or disclosure. Data is transmitted over secure HTTPS connections.

5. International Data Transfers

As part of an international research network, your data may be transferred to and stored on servers located outside the Kingdom of Bahrain. By providing your data and consenting to this policy, you acknowledge and agree to this transfer.

6. Performance and Traffic Analysis

We utilize third-party analytics services to understand how users interact with our platform. These tools collect information sent by your browser, such as pages visited and time spent on the site, to help us measure and improve project performance. This data is processed in an aggregate form that does not identify individual users.

7. Your Data Protection Rights

Under the Bahrain PDPL, you have the following rights:

Right to Access: You may request notification of whether your data is being processed and receive a copy of that data.
Right to Rectification: You may request the correction of inaccurate or incomplete data.
Right to Erasure: You may request the deletion of your data if it is no longer necessary for the project or if processing is illegal.
Right to Object: You may object to processing that causes material or moral damage or for direct marketing purposes.

8. Public Contributions

Please note that when you contribute to Colouring Bahrain, you create a permanent, public record of all data added or changed. The database records your username and the timestamp of the edit, which is made publicly available.

9. Contact Information

If you have questions regarding this policy or wish to exercise your rights, please contact our Data Protection representative ( email address or BACA address ). If we cannot address your concerns, you have the right to lodge a complaint with the Bahrain Personal Data Protection Authority.

Last Updated: March 26, 2026.