Privacy notice

Profplanet is operated by Profplanet Technologies, Nairobi, Kenya. This notice explains what personal data we collect from students and trainers, why we collect it, and the rights you have over it. It is written to meet our obligations under Kenya's Data Protection Act, 2019.

What we collect

• Account details you provide at registration: your name, email address, phone number, role, and the course and institution you tell us you are associated with.
• Payment records: the amount, date, reference and status of payments you make. We do not see or store your mobile money PIN, and we do not store card details.
• Usage information: the material you open, download or attempt, and any contributions you make to the content. This is what enables progress tracking and revision suggestions.
• Material you upload to the platform.

Why we collect it

• To provide your account and the learning material appropriate to it.
• To process payments and deliver what you have paid for.
• To enable trainers to plan sessions and record competency for their own classes.
• To maintain the accuracy of our content, since contributions are attributed to the person who made them.
• To send communications relating to your account and your studies, such as password resets, payment confirmations and platform updates. We do not sell your data.

Who we share it with

We share the minimum necessary with the service providers that operate the platform on our behalf, including payment processing, email delivery and hosting. Each receives only what it needs to perform that function, and none of them may use your data for their own purposes.

Trainers can see work submitted to them as part of their class. Material you keep privately in your account remains private unless you choose to share it. We do not sell personal data.

Storage, transfers and retention

Some of our service providers operate outside Kenya, so your data may be transferred and processed abroad. Where that happens we take reasonable steps to ensure it remains protected to a comparable standard.

We retain account and payment records for as long as you hold an account, and for such period afterwards as the law requires. On request we delete your personal data, retaining only what we are legally obliged to keep.

Your rights

Under the Data Protection Act you have the right to:

• Be informed of the personal data we hold about you and obtain a copy.
• Have inaccurate data corrected.
• Request deletion of your data.
• Object to, or request restriction of, our processing.
• Lodge a complaint with the Office of the Data Protection Commissioner.

To exercise any of these rights, contact us at the address below. We will respond within the period allowed by law.

Security

The platform is served over an encrypted connection, passwords are stored in hashed form, and access to production systems is restricted. No system is without risk; should a breach affect your personal data we will notify you and the Commissioner as the law requires.

Children

Profplanet is intended for TVET students, who are generally aged 16 and above. If you are under 18, please ensure a parent or guardian consents to your use of the platform and to any payment made.

Changes to this notice

Where this notice changes we will update the date above, and bring material changes to your attention within the platform.

Contact

Profplanet Technologies
Email: info@profplanet.co.ke
Nairobi, Kenya