Privacy Policy

CourseCore ("we," "our," or "us") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our educational platform.

We operate in compliance with the Kenyan Data Protection Act (2019), the Basic Education Act (2013), and other relevant privacy and education regulations. This policy applies to all users of our platform, including students, investors, instructors, and visitors.

We use your information for the following purposes, always in compliance with Kenyan law:

• Educational Services: Providing access to courses, tracking progress, and issuing certificates
• Platform Management: Managing user accounts, processing payments, and maintaining security
• Communication: Sending important updates, notifications, and educational content
• Compliance: Meeting legal obligations under education and data protection laws
• Improvement: Enhancing our services and developing new features
• Support: Providing customer service and technical assistance

Under the Kenyan Data Protection Act (2019), we process your data based on the following legal grounds:

• Contract Performance: Processing necessary to provide our educational services
• Legal Obligation: Compliance with education and financial regulations
• Legitimate Interest: Improving services and ensuring platform security
• Consent: Where you have explicitly agreed to specific processing activities
• Public Interest: Educational purposes that benefit society

We may share your information in the following circumstances, always in compliance with Kenyan law:

• Educational Partners: Sharing student progress with instructors and institutions
• Investors: Providing impact reports while protecting student privacy
• Service Providers: Working with trusted third parties for platform operations
• Legal Requirements: Responding to lawful requests from authorities
• Safety and Security: Protecting users and preventing fraud
• Business Transfers: In case of merger, acquisition, or asset sale

Note: We never sell your personal information to third parties for marketing purposes.

CourseCore implements comprehensive security measures to protect your information:

• Encryption: All data is encrypted in transit and at rest
• Access Controls: Strict authentication and authorization protocols
• Regular Audits: Security assessments and vulnerability testing
• Employee Training: Staff education on data protection best practices
• Incident Response: Procedures for handling security breaches
• Compliance Monitoring: Regular review of security practices

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Account Information: Retained while your account is active
• Educational Records: Kept for regulatory compliance (minimum 7 years)
• Financial Records: Retained as required by tax and financial laws
• Analytics Data: Anonymized after 2 years
• Marketing Data: Removed upon withdrawal of consent

You may request deletion of your personal information, subject to legal and regulatory requirements.

Under the Kenyan Data Protection Act (2019), you have the following rights:

• Access: Request a copy of your personal information
• Correction: Update inaccurate or incomplete information
• Deletion: Request removal of your personal data
• Portability: Receive your data in a structured format
• Restriction: Limit how we process your information
• Objection: Object to certain processing activities
• Withdraw Consent: Revoke previously given consent

To exercise these rights, contact us at privacy@coursecore.co.ke. We will respond within 30 days.

We use cookies and similar technologies to enhance your experience:

• Essential Cookies: Required for platform functionality
• Performance Cookies: Help us improve our services
• Analytics Cookies: Provide insights into platform usage
• Preference Cookies: Remember your settings and choices

You can control cookie settings through your browser preferences. Disabling certain cookies may affect platform functionality.

CourseCore is committed to protecting the privacy of children and young learners:

• Age Verification: We verify student ages during registration
• Parental Consent: Required for students under 18 years
• Limited Data Collection: Only necessary information is collected
• Educational Focus: All data processing serves educational purposes
• Special Protections: Enhanced security for children's data

Parents or guardians can review, modify, or delete their child's information at any time.

CourseCore may transfer your data internationally in compliance with Kenyan law:

• Legal Compliance: All transfers comply with data protection laws
• Adequate Protection: Recipient countries must provide adequate data protection
• Standard Contracts: Use of approved contractual clauses
• Limited Scope: Only necessary data is transferred
• Monitoring: Regular review of international data flows

We may update this Privacy Policy to reflect changes in our practices or legal requirements:

• Material changes will be communicated via email and platform notifications
• Updates will be posted on this page with a new effective date
• Continued use of our services constitutes acceptance of updated policies
• Users will be notified of significant changes at least 30 days in advance