1. Introduction
This Privacy Policy explains how GRIC Africa Learning Platform (“we”, “us”, “our”) collects, uses, and protects personal data when you use our website and learning services.
We comply with applicable data protection laws, including the General Data Protection Regulation (GDPR), principles similar to the Children’s Online Privacy Protection Act (COPPA), and the Kenya Data Protection Act, 2019.
2. Our Commitment to Privacy
Your privacy matters to us. We collect only the information needed to provide a safe and effective learning experience, especially for children. Personal data is protected, never sold, and used only to improve learning and track progress. Parental or guardian consent is required for young learners.
3. Information We Collect
We may collect:
- Personal data: Name, email address, age, school information
- Account data: Login credentials and profile details
- Learning data: Progress, assessments, activity
- Technical data: IP address, device type, browser, usage logs
We follow data minimisation and collect only what is necessary.
4. Legal Basis for Processing
We process personal data based on:
- Consent (including parental consent for children)
- Contractual necessity (to provide learning services)
- Legitimate interests (platform improvement and security)
- Legal obligations under applicable laws
5. How We Use Information
We use data to:
- Deliver and manage learning services
- Track and improve learner progress
- Personalise user experience
- Communicate important updates
- Ensure safety and prevent misuse
6. Children’s Privacy and Parental Consent
We take children’s privacy seriously:
- We require verifiable parental or guardian consent before collecting data from children
- We limit collection to what is necessary for education
- We do not use children’s data for advertising or profiling
- Parents/guardians can access, review, or request deletion of a child’s data
7. Data Sharing
We do not sell personal data.
We may share data only:
- With trusted service providers under strict data protection agreements
- Where required by law or regulatory authorities
- To protect user safety and platform integrity
8. Data Transfers
Where personal data is transferred outside Kenya, we ensure appropriate safeguards in line with the Kenya Data Protection Act, 2019, including:
- Adequacy decisions
- Standard contractual clauses
- Secure processing agreements
9. Data Security
We implement appropriate safeguards to protect personal data, including:
- Secure systems and encryption where applicable
- Access controls and authentication
- Ongoing monitoring and risk management
10. Data Retention
We retain personal data only for as long as necessary to:
- Provide services
- Comply with legal and regulatory obligations
- Resolve disputes and enforce agreements
Data is securely deleted or anonymised when no longer needed.
11. Your Rights
Under applicable laws, users and parents/guardians have the right to:
- Access personal data
- Correct or update information
- Request deletion of data
- Object to or restrict processing
- Withdraw consent at any time
- Lodge a complaint with the Office of the Data Protection Commissioner (ODPC) Kenya
12. Cookies and Tracking
We use cookies and similar technologies to:
- Maintain platform functionality
- Analyse usage and improve services
Where required, consent will be obtained for non-essential cookies.
13. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date.
14. Contact Us
For privacy-related questions or requests:
GRIC Africa
Email: [email protected]