Privacy and Data Protection Policy

1. Introduction

EduLead Consultants Ltd respects the privacy of customers, learners, website visitors and business contacts. This policy explains how we collect, use, disclose, store and protect personal data when people visit our website, create accounts, purchase products, participate in courses or communicate with us. We aim to handle personal data in accordance with Kenya's Data Protection Act, 2019, applicable regulations and other relevant legal requirements.

2. Information we may collect

Identity and contact information: name, username, email address, telephone number and relevant billing details.

Account and learning information: account details, course enrolments, learning progress, assessment records where applicable, support requests and information submitted to learning communities or virtual laboratories.

Transaction information: product purchased, transaction reference, amount, currency and payment status.

Technical information: IP address, browser and device information, log records and cookie data where collected.

Payment-card information is handled through the payment provider's systems to the extent supported by the integration. We do not intentionally collect card security codes through ordinary support channels.

3. Why we use personal data

We may use personal data to administer accounts, supply purchased products, confirm payments, manage refunds, prevent fraud, enrol learners, maintain relevant training records, respond to enquiries, maintain security, communicate service information, send permitted promotional communications and meet legal, accounting or dispute-resolution obligations. Where consent is required, we will request it; where another lawful basis applies, processing will follow that basis.

4. Service providers and disclosures

We may share necessary information with payment processors such as Paystack; hosting, website and learning-platform providers; email and customer-support providers; security and analytics providers; professional advisers; and regulators or public authorities where legally required. We share information reasonably necessary for the purpose and expect providers to meet applicable obligations.

5. International data transfers

Some service providers may store or process information outside Kenya. Where personal data is transferred internationally, EduLead will take steps required by applicable law, including appropriate safeguards or lawful transfer mechanisms.

6. Data retention

We retain personal data only as long as reasonably necessary to provide services, maintain learning records, resolve disputes and meet legal obligations. Retention periods vary by data category. When information is no longer required, we will delete or anonymise it where appropriate, subject to legal requirements.

7. Security

We take reasonable technical and organisational measures to protect personal data against unauthorized access, loss, alteration or disclosure. No internet-based system can be guaranteed completely secure. Customers should use strong passwords, protect credentials and report suspected account compromise promptly.

8. Cookies

Our website may use cookies or similar technologies to maintain sessions, remember preferences, support security and understand usage. Where required, we will provide notice and obtain consent before using non-essential cookies. Disabling cookies in a browser may affect functionality.

9. Data-protection rights

Subject to applicable law, you may have rights to be informed about processing, access your personal data, request correction or deletion, object to or restrict certain processing, withdraw consent where processing relies on consent, and exercise other rights provided by law. Contact us to make a request. We may verify identity before responding and will handle requests within applicable legal time limits.

10. Children's information

Some educational services may be used by younger learners. Where we process children's personal data, we will apply appropriate safeguards and comply with applicable requirements concerning parental or guardian consent where required. Parents or guardians may contact us with questions.

11. Privacy contact and complaints

Privacy enquiries: support@eduleadconsultantsltd.co.ke
EduLead Consultants Ltd, P.O. Box 10192-00400, Nairobi, Kenya.
You may also have the right to complain to Kenya's Office of the Data Protection Commissioner.

12. Changes

We may update this policy to reflect changes in services, technology or legal obligations. Revised versions will be published with an updated effective date.