Privacy Policy – Hitimu Academy
Effective Date: 11th June 2025
Who We Are
Hitimu Academy is an online learning platform available at https://hitimu.academy. We are committed to providing accessible, practical skills training. For any privacy-related matters, please contact us at:
Email: admin@hitimu.academy
Address: Nairobi, Kenya
What Personal Data We Collect and Why
We collect the following types of personal data to deliver and improve our services:
- Identity and Contact Data: Name, email address, phone number
- Account Preferences: Course interests and personal settings
- Transactional Data: Payment records, enrollment history
- Technical Data: IP address, device and browser information
- Usage Data: Learning activity, progress tracking
- Contact Forms: Information you submit via message or inquiry forms
This information is used to provide learning access, manage user accounts, deliver certificates, improve services, and meet legal obligations.
Comments and Media
If commenting is enabled, we collect data such as name, email, and IP address for spam prevention. Uploaded media such as profile pictures may be publicly visible depending on your settings.
Cookies
We use cookies to enhance user experience, store preferences, maintain secure sessions, and analyze platform performance. You can manage cookie preferences in your browser settings.
Analytics
We use tools such as Google Analytics and WP Statistics to monitor website usage.
WP Statistics
WP Statistics collects anonymized data such as IP address (anonymized), browser details, referring websites, and pages visited. The data is used for statistical purposes only and helps us understand visitor behavior on our site.
- No personal user profiles are created.
- Data is not shared with third parties.
- IP addresses are anonymized before storage.
- All statistical data is stored locally on our server (within Kenya or via our secure hosting provider).
Who We Share Your Data With
We may share data with trusted third-party services to facilitate our operations:
- Payment processors like M-Pesa and Stripe
- Hosting and storage providers
- Email communication and customer support tools
These services comply with relevant data protection standards and confidentiality agreements.
How Long We Retain Your Data
We retain different types of data for varying durations:
- Contact form submissions: 6 months
- Analytics data: 12 months
- Purchase and enrollment records: Up to 10 years
- User account data: Until account deletion request
Your Rights Over Your Data
You have the right to request access to, correction of, or deletion of your personal data. You may also object to processing, withdraw consent, or request data portability. To exercise these rights, contact us at admin@hitimu.academy.
Where Your Data Is Sent
Data may be processed or stored outside Kenya. We ensure all international data transfers meet applicable legal standards, including GDPR-equivalent safeguards where relevant.
How We Protect Your Data
We implement a range of security measures to safeguard your data, including:
- Secure SSL encryption
- Two-factor authentication
- Protected hosting environments
- Staff privacy training and access controls
Data Breach Procedures
In the event of a data breach, we will promptly investigate, take corrective action, and notify affected users in accordance with legal requirements.
Third-Party Data Sources
We may receive additional data from platforms such as payment services or educational integrations. This information is used solely to verify transactions or enhance service delivery.
Automated Decision Making
Hitimu Academy does not engage in automated decision-making or profiling that impacts users’ rights or access to services.
Legal Compliance
We adhere to the Kenyan Data Protection Act and relevant international privacy regulations, including GDPR, where applicable.
Contact Us
For any questions, concerns, or data access requests, please contact:
Email: admin@hitimu.academy
Address: Nairobi, Kenya