Privacy Policy

1. Information We Collect

Information you provide

• Account details name, email address, phone number, and password when you register.
• Learner profiles names and ages of children you add to your account.
• Assessment responses answers to career pathway questions submitted on behalf of a learner.
• Order and delivery information name, county, and address when purchasing physical products.
• Payment details M-Pesa phone number used to initiate STK push payments. We do not store card or full M-Pesa PIN data.
• Support messages subject and message text when you contact our help team.

Information collected automatically

• Browser type, device type, and operating system.
• Pages visited and time spent on those pages.
• IP address and general geographic location (country/city level).
• Session cookies that keep you logged in during a visit.

2. How We Use Your Data

• To create and manage your account and learner profiles.
• To generate personalised career pathway assessment results and certificates.
• To process M-Pesa payments and fulfil product orders.
• To send order confirmations and delivery updates via SMS or email.
• To respond to support requests.
• To improve our assessment tools and platform experience.
• To comply with legal obligations under Kenyan law.

We do not use learner data for advertising purposes.

3. Data Sharing

We do not sell your personal data. We may share it with:

• Safaricom / M-Pesa to process payments via the Daraja API.
• SMS providers to send order and assessment notifications.
• Email service providers to send transactional emails.
• Legal authorities if required by Kenyan law or a valid court order.

All third-party processors are contractually required to protect your data and use it only for the purpose we specify.

4. Children's Privacy

Our platform is designed for use by parents and guardians on behalf of learners. We do not knowingly collect personal information directly from children under 13 without verified parental consent.

Learner profiles are created and managed by the registered parent or guardian. Assessment results and certificates are associated with the parent's account. If you believe a child's data has been collected without appropriate consent, please contact us immediately so we can delete it.

5. Data Security

We use industry-standard measures to protect your data:

• Passwords are hashed and never stored in plain text.
• All data is transmitted over HTTPS.
• Database access is restricted to authorised personnel only.
• Payment calls go directly to Safaricom's secure API we do not store M-Pesa PINs.

No method of electronic transmission or storage is 100% secure. We will notify affected users promptly in the event of a breach.

6. Your Rights

Under the Kenya Data Protection Act 2019, you have the right to:

• Access request a copy of the personal data we hold about you.
• Correction ask us to correct inaccurate data.
• Deletion request that we delete your account and associated data.
• Objection object to certain uses of your data.
• Portability receive your data in a structured, commonly used format.

To exercise any of these rights, email us at info@kilelechacbc.co.ke. We will respond within 30 days.

7. Cookies

We use session cookies to keep you logged in during a visit. We do not use persistent tracking cookies or third-party advertising cookies. You can disable cookies in your browser settings, but some parts of the platform (such as logging in) will not function without them.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page and, where the changes are significant, notify registered users by email. Continued use of the platform after changes constitutes acceptance of the updated policy.

9. Contact Us

If you have any questions about this Privacy Policy or how we handle your data: