+250 785 095 938 [email protected] Request a Meeting
ATAR — TAX ADVISOR — RRA Certified
Legal

Privacy Policy

Last updated: 28 October 2026

1. Who We Are

BAC PRACTICE LTD ("BAC Practice", "we", "us") operates the website at https://bacpractice.com. We are committed to protecting the personal information you share with us.

2. Information We Collect

We may collect the following information:

  • Contact form submissions — name, email address, phone number and message content when you use our contact form
  • Authentication data — profile information (name, email, phone, avatar) provided by Pherraxo when you sign in via OAuth 2.0
  • Usage data — pages visited, browser type, and IP address collected through server logs for security and analytics

3. How We Use Your Information

We use collected information to:

  • Respond to your enquiries and provide requested services
  • Authenticate and manage admin user accounts
  • Improve our website and services
  • Comply with legal obligations

We do not sell, rent or trade your personal information to third parties.

4. Authentication via Pherraxo

Our admin panel uses Pherraxo OAuth 2.0 for authentication. When you sign in, Pherraxo shares your profile information with us according to the scopes you authorise. Please refer to Pherraxo's Privacy Policy for details on how they handle your data.

5. Cookies & Sessions

We use a single session cookie (bacpractice_session) to maintain your login state. This cookie is HTTP-only, secure (HTTPS), and expires after 30 days of inactivity. We do not use tracking cookies or third-party advertising cookies.

6. Data Retention

Contact form messages are retained for as long as necessary to respond to your enquiry and for record-keeping. You may request deletion of your data at any time by contacting us.

7. Your Rights

Under applicable law, you have the right to access, correct or request deletion of your personal data. To exercise these rights, contact us at [email protected].

8. Security

We implement appropriate technical and organisational measures to protect your data, including HTTPS encryption, HTTP-only secure cookies, CSRF protection, and access controls.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will indicate the date of the most recent revision at the top of this page. Continued use of our website after changes constitutes acceptance.

10. Contact

For privacy-related questions, contact us at [email protected] or +250 785 095 938.