Privacy Policy

1 Overview & Who We Are

EduSens Africa ("we", "us", "our") is a career guidance and education consultancy based in Kenya. We operate the website at edusensafrica.com and offer career consultation services, digital career guides, and educational content.

For the purposes of the Kenya Data Protection Act, 2019, EduSens Africa acts as the Data Controller — meaning we determine how and why your personal data is collected and used. We are responsible for ensuring your data is handled lawfully, fairly, and transparently.

We take your privacy seriously. This policy tells you exactly what data we collect, why we collect it, how long we keep it, and what rights you have over it.

2 Who This Policy Applies To

This policy applies to anyone who:

• Visits or browses the EduSens Africa website
• Books or enquires about a career consultation
• Purchases or downloads one of our career guides
• Subscribes to our newsletter or mailing list
• Contacts us via email, WhatsApp, or social media
• Follows or engages with our content on YouTube, Facebook, or TikTok

Our consultation services are available to secondary school graduates (aged 18 and above) and parents or guardians only. We do not offer direct consultations to individuals under the age of 18.

3 What Personal Data We Collect

We only collect personal data that is necessary, adequate, and relevant to the purpose for which it is collected. We do not collect excessive data.

When you book a consultation, we may collect:

• Full name
• Email address and phone number
• Educational background (e.g. KCSE results, courses of interest)
• Career interests and goals shared during consultation
• Payment reference details (we do not store card or M-Pesa PIN details)

When you visit our website, we may automatically collect:

• Browser type and device information
• Pages visited and time spent on the site
• General location (country/region level only — not precise GPS)
• Referral source (how you found our website)

When you subscribe to our newsletter or mailing list:

• Your email address and name

4 How We Use Your Data

We use your personal data only for the specific purposes for which it was collected. We will never use your data for any other purpose without informing you first.

• To deliver consultations — reviewing your background and goals to provide personalised career guidance
• To process bookings and payments — confirming appointments and sending session reminders
• To send you relevant content — career tips, new guides, or blog posts (only if you have subscribed)
• To improve our services — understanding how people use our website so we can make it more useful
• To comply with legal obligations — maintaining records where required by Kenyan law

We will never use your data for automated decision-making that significantly affects you without your explicit knowledge and consent.

5 Your Consent

Under the Kenya Data Protection Act, 2019, we are required to obtain your informed, freely given, specific, and unambiguous consent before collecting or processing your personal data.

By booking a consultation with EduSens Africa, you consent to:

• The collection and use of your personal information as described in this policy
• EduSens Africa contacting you regarding your consultation session
• Your consultation notes being retained for service delivery purposes

By subscribing to our mailing list, you consent to:

• Receiving career guidance content, blog updates, and new guide announcements
• EduSens Africa storing your email address for this purpose

You may withdraw your consent at any time by contacting us at edusensafrica@gmail.com or by clicking "Unsubscribe" in any email we send you. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

6 Data Sharing — We Do Not Sell Your Data

EduSens Africa does not sell, rent, trade, or share your personal data with third parties for marketing or commercial purposes. Your personal information is treated as confidential.

We may share limited data only in the following strictly controlled circumstances:

• Service providers: Tools we use to operate our business (e.g. booking platforms, email newsletter services, payment processors) — these are bound by their own data protection policies and may not use your data for their own purposes
• Legal requirement: Where we are required by Kenyan law, court order, or a lawful request by a government authority to disclose data
• Your explicit request: Where you have specifically asked us to share your information with a third party

Any third-party tools we use (such as Calendly for bookings or Mailchimp for newsletters) are selected based on their own data protection commitments. We will update this policy if we change any of these tools.

7 How Long We Keep Your Data

We retain your personal data only for as long as is necessary for the purpose it was collected, or as required by Kenyan law.

• Consultation records — retained for up to 2 years after your last interaction with us, then securely deleted
• Email subscriber data — retained for as long as you remain subscribed; deleted within 30 days of unsubscribing
• Website analytics data — retained in aggregated, anonymised form for up to 12 months
• Payment reference records — retained for 7 years as required by Kenyan tax and financial regulations

When your data is no longer needed, we will securely delete or anonymise it so it can no longer be linked to you.

8 How We Protect Your Data

We take reasonable technical and organisational measures to protect your personal data against loss, theft, unauthorised access, disclosure, alteration, or destruction.

• Our website uses HTTPS encryption to protect data in transit
• Access to consultation records is restricted to authorised personnel only
• We use reputable, established third-party platforms with their own security standards
• We do not store sensitive financial data (such as card numbers or M-Pesa PINs) on our systems

In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify the Office of the Data Protection Commissioner (ODPC) within 72 hours and will inform affected users without undue delay, as required under the DPA.

9 Your Rights Under the Kenya Data Protection Act

The Kenya Data Protection Act, 2019 gives you the following rights over your personal data. You may exercise any of these rights by contacting us at hello@edusensafrica.com.

We will respond to all data rights requests within a reasonable timeframe and at no charge to you.

10 Protection of Minors

The Kenya Data Protection Act places a special duty on data controllers to protect the personal data of children. EduSens Africa takes this very seriously.

Our consultation services are only available to individuals aged 18 and above, or to parents and guardians acting on behalf of their family. We do not knowingly collect personal data directly from anyone under the age of 18.

If you are a parent booking a session that involves discussing your child's educational path, the personal data collected relates to the consultation and is held under your consent as the parent or guardian. We will not process a child's data beyond what is necessary for this purpose.

If you believe we have inadvertently collected data from a minor, please contact us immediately at edusensafrica@gmail.com and we will delete that data promptly.

11 Cookies & Website Tracking

Our website may use cookies — small text files stored on your browser — to improve your experience. Where cookies collect personal data, this falls under the Data Protection Act, 2019.

• Essential cookies: Necessary for the website to function. These do not require your consent.
• Analytics cookies: Help us understand how visitors use our site (e.g. which pages are most visited). These are used in aggregate and anonymised form. We will request your consent before activating these.
• Marketing cookies: We do not currently use marketing or advertising cookies. If this changes, we will update this policy and seek your consent.

You can control or delete cookies at any time through your browser settings. Disabling cookies may affect some features of our website.

12 Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in Kenyan data protection law. When we make significant changes, we will:

• Update the "Last Updated" date at the top of this page
• Notify subscribers via email where the changes materially affect their rights
• Post a notice on our website homepage

We encourage you to review this policy periodically. Continued use of our website or services after changes are posted constitutes your acceptance of the updated policy.