Elimu Pepe Privacy Policy

1. Introduction

Welcome to Elimu Pepe ("Elimu Pepe", "we", "us", "our"). We value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, protect, and share your data when you interact with our services.

This policy applies to:

• Visitors to our website

• Registered users of the Elimu Pepe learning platform

• Parents or guardians of underage users

• Institutional or business clients (B2B users)

2. Our Role in Protecting Your Data

Elimu Pepe acts as a Data Controller. This means we are responsible for deciding how and why your personal data is processed. We operate under:

• The Kenya Data Protection Act, 2019

• The General Data Protection Regulation (GDPR), where applicable (e.g., for users in the EU)

3. Your Responsibilities

As a user, you are responsible for:

• Reading and understanding this Privacy Policy

• Ensuring you have proper consent before sharing someone else’s personal data with us

• Reviewing additional terms (such as a Data Processing Agreement, if you represent an institution)

4. When We Collect Personal Data

We collect personal data when:

• You register, request a demo, or use our services

• You contact us through customer support

• You give consent to receive marketing communications

• Data is collected automatically through your device or browser

If you are just visiting the website and do not interact with it, we do not collect personal data.

5. Types of Data We Collect

Identification and Contact Data:

• Full name

• Email address

• Phone number

Demographic Information:

• Gender (only collected with consent and only if required for educational or reporting purposes)

User Account Data:

• Username or login credentials

• Settings and preferences

Payment and Financial Information:
When you make payments through Elimu Pepe:

• We collect M-Pesa transaction information, such as transaction ID and the phone number used

• We also store payment history via our mobile payment gateway

Technical and Device Information:

• IP address

• Browser and operating system details

• Device type and time zone

Usage Data:

• Platform activity and session logs

• Time spent on the platform

• Pages visited and features used

Media and Uploaded Content:

• Photos and videos shared through the platform

• Metadata associated with those uploads

6. Why We Use Your Data and Legal Grounds

We use your data to:

• Provide and manage your account and our services (legal basis: contract)

• Improve our platform and services, including analytics and testing (legal basis: legitimate interest)

• Offer customer support and troubleshoot problems (legal basis: legitimate interest)

• Send you marketing communications (legal basis: consent)

• Meet legal or regulatory obligations (legal basis: legal obligation)

7. Your Privacy Rights

You have control over your data. You may:

• Choose not to provide personal data (some services may not work)

• Opt out of marketing messages

• Block or delete cookies in your browser

• Contact us to access, correct, or delete your personal data

You also have rights under the Kenya Data Protection Act and, where applicable, the GDPR. These include:

• The right to access your data

• The right to correct incorrect or incomplete data

• The right to request deletion of your data

• The right to object to automated decisions

• The right to receive your data in a portable format

• The right to limit how your data is processed

• The right to withdraw consent at any time

To exercise any of these rights, email: support@elimupepe.co.ke

8. How We Protect Your Data

We implement a range of security measures, including:

• Encrypted data transfers using TLS/SSL

• Secure cloud infrastructure

• Strict internal access controls and staff training

While we do our best to protect your data, no system is 100% secure. You are also responsible for keeping your login credentials confidential.

9. Data Retention

We store personal data only as long as needed to:

• Provide our services

• Comply with legal or regulatory requirements

• Support customer service or resolve disputes

• Meet contractual terms with institutions or partners

Exact retention periods may vary depending on the nature of the data and user agreements.

10. Third Parties We Work With

We may share your data with trusted service providers who:

• Host our servers

• Process payments (e.g., M-Pesa)

• Help us communicate with users

• Offer customer support tools

Where data is transferred outside of Kenya or the European Economic Area (EEA), we ensure appropriate safeguards are in place.

11. Cookie Use

Visitors:
Cookies are not used for tracking or analytics unless you interact with the website (e.g., by requesting a demo or submitting a form). Consent is required before we collect any such data.

Registered Users:
We use:

• Session cookies to support logins and core functionality

• Persistent cookies to enhance your experience (e.g., remembering preferences)

Your Choices:
You can block or delete cookies through your browser settings at any time. Please note, disabling some cookies may affect certain features, but you will still have basic access to the platform.

Third-Party Cookies:
We do not control third-party cookie use (e.g., video tools or embedded content). However, we monitor all service providers to ensure they follow our data protection standards. Where needed, we will inform you and request your consent.

12. Children’s Data

Elimu Pepe is built for K–12 learners, all of whom are considered minors.

• Users under 18 must have verifiable parental or guardian consent before using the platform.

• We take extra care when collecting and processing data from minors.

Parental Rights:
Parents or legal guardians can:

• Access their child’s personal data

• Request correction or deletion of that data

• Monitor and review platform use

Our Commitments:

• We handle children’s data in compliance with the Kenya Data Protection Act (2019) and Article 8 of the GDPR where applicable

• We require verified consent before collecting or processing children’s data

• We implement safety and privacy measures specific to young users

13. Changes to This Policy

We may update this policy to reflect:

• Legal changes

• Changes to our services or technology

We will notify you about material updates via:

• Email

• In-platform alerts

• Updated “last revised” date

We encourage you to review this policy periodically.

14. Contact Us

For any privacy questions, requests, or complaints, please contact us:

Email: support@elimupepe.co.ke