Effective date: 28 July 2026

Youth City Association (“we”, “us” or “our”) respects your privacy. This Privacy Policy explains how we collect, use, disclose, store and protect personal data when you use youthcity.bh, create an account, purchase products, apply for membership, submit a reservation or registration form, contact us, or otherwise take part in our programmes and activities.

1. Who we are

Youth City Association operates in the Kingdom of Bahrain and manages youthcity.bh. Youth City 2030 is an initiative and programme managed and operated by Youth City Association in collaboration with the Ministry of Youth Affairs. For the purposes of Law No. (30) of 2018 with respect to Personal Data Protection, Youth City Association is the data controller responsible for determining why and how the personal data described in this Policy is processed.

2. Personal data we collect

Depending on how you use the website, we may collect:

  • Identity and contact details: name, email address, telephone number, organisation or entity name, job title and similar contact information.
  • Membership and programme details: information supplied in membership, event, activity or programme applications, including information needed to assess eligibility and communicate with you.
  • Reservation details: requested dates and times, purpose of a booth or presentation, activity type, requirements, and the names, roles and contact details of representatives or presenters.
  • Account and order details: username, account profile, billing and delivery details, products ordered, order history, transaction status, refunds and customer-service records.
  • Payment information: payments are processed by the payment service provider offered at checkout. We do not normally receive or store your complete payment-card details, although we receive transaction confirmations and information needed to manage an order or refund.
  • Communications: messages, enquiries, feedback and records of our correspondence with you.
  • Technical and usage information: IP address, browser and device information, pages visited, referring page, date and time of access, language preferences, cart and session identifiers, cookie information, security logs and limited order-attribution information.

Please provide only accurate information that is relevant to your request. If you give us personal data about another person, you must be authorised to do so and should make this Policy available to them.

3. How we use personal data

We use personal data to:

  • operate, maintain, secure and improve the website;
  • create and manage accounts, carts, orders, payments, deliveries and refunds;
  • process membership, programme, registration and reservation requests;
  • organise events and communicate with applicants, participants, representatives and customers;
  • respond to enquiries and provide support;
  • prevent fraud, misuse, spam and security incidents;
  • keep appropriate administrative, financial and legal records; and
  • comply with applicable laws, lawful requests and regulatory obligations.

We process personal data where it is necessary to provide a service or take steps at your request, where you have given consent, where we must comply with a legal obligation, or where we have a legitimate interest that does not override your rights, such as protecting our services and administering our activities. Where processing depends on consent, you may withdraw that consent at any time, without affecting earlier lawful processing.

4. Cookies and similar technologies

The website uses cookies and similar technologies that are necessary for functions such as language selection, secure login, account sessions, shopping carts, checkout, fraud prevention and website security. These cookies may remember your cart or session for a limited period.

If we introduce non-essential analytics, advertising or marketing cookies, we will provide any notice or choice required by applicable law. You can control cookies through your browser, but blocking necessary cookies may prevent parts of the website from working correctly.

5. When we share personal data

We do not sell personal data. We may share it only as reasonably necessary with:

  • authorised Youth City Association personnel and volunteers who need it for their duties;
  • programme, venue or event partners where needed to administer the activity you requested;
  • government or regulatory authorities, including the Ministry of Youth Affairs, where required by law or necessary to administer a relevant programme;
  • trusted service providers supporting hosting and cloud storage, website forms, email delivery, security, payments, order fulfilment, delivery and technical support; and
  • professional advisers, law-enforcement bodies, courts or other parties where disclosure is required or permitted by law, or necessary to protect rights, safety and security.

Service providers may use personal data only for the services they provide to us and must protect it appropriately.

6. External websites and services

Our website may link to external services, including social-media platforms and mobile-app stores. When you follow an external link, that provider processes information under its own privacy policy. We are not responsible for the privacy practices of third-party websites or services.

7. International transfers

Some service providers or cloud systems may process or store personal data outside the Kingdom of Bahrain. We will make such transfers only in accordance with Law No. (30) of 2018 and its implementing decisions, including where the destination is recognised as providing adequate protection, the competent authority has authorised the transfer, the data subject has validly consented, or another exception permitted by law applies. Where required, we implement appropriate contractual, technical and organisational safeguards.

8. How long we keep personal data

We retain personal data only for as long as necessary for the purpose for which it was collected, including completing an order, administering a reservation or programme, handling a query, maintaining security and meeting accounting, audit, dispute-resolution and legal requirements. Retention periods vary according to the type of record and our obligations. When data is no longer needed, we delete it, anonymise it or securely restrict its use.

9. Security

We use reasonable administrative, technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure. No internet service can be guaranteed completely secure, so please protect your account credentials and contact us if you suspect unauthorised use.

10. Your rights

Subject to Law No. (30) of 2018 with respect to Personal Data Protection and any applicable exceptions, you may have the right to:

  • ask whether we process your personal data and request notification of, and access to, the data being processed;
  • request rectification, blocking or erasure where data is inaccurate, incomplete, outdated or processed unlawfully;
  • object to processing for direct-marketing purposes;
  • object to processing that causes, or is likely to cause, unwarranted substantial material or moral damage;
  • request reconsideration by a person where a qualifying decision is based solely on automated processing;
  • withdraw consent where processing is based on consent; and
  • lodge a complaint in accordance with the procedures prescribed under Bahrain’s personal data protection legislation.

To exercise a right, submit a written request to Youth City Association through an official contact channel. We may need to verify your identity and may retain information where the law requires or permits us to do so.

11. Children and young people

Our activities may involve children and young people. We aim to collect only the information reasonably needed to administer the relevant activity and to apply appropriate safeguards. Where consent from a parent or guardian is required by law or by the programme, the application should be completed or approved by that parent or guardian. A parent or guardian may contact us about a child’s personal data using the email address above.

12. Changes to this Policy

We may update this Privacy Policy when our services, practices or legal obligations change. The latest version will be published on this page with a revised effective date.

View Cart Checkout Continue Shopping