Privacy Policy

1. Who we are

Aviedge Group is the data controller responsible for the personal information described in this policy. We are based in Nairobi, Kenya, at 2nd Floor, Business Park, Block B, Wilson Airport, Langata Road. You can reach us at info@aviedgegroup.com or +254 797 224 916.

2. What personal information we collect

We only collect what we actually use the site for. Depending on how you interact with us, that may include:

• Contact form: your name, email address, phone number, the type of enquiry, and your message.
• Account registration: your name, username, email address, phone number, country, and password (stored in hashed, non-reversible form).
• Course admission applications: your name, date of birth, gender, nationality, national ID or passport number, physical address, education and employment history, your course and intake preference, and any supporting documents you upload (e.g. ID copy, academic certificates, passport copy, certificate of good conduct).
• Newsletter subscription: your email address.
• Automatically, via cookies and analytics: general usage data such as pages visited and device/browser type. See Section 9 below.

We do not knowingly collect personal information from children, and this site is not directed at children. If you believe a child has provided us with personal information, please contact us and we will delete it.

3. Why we process it, and on what legal basis

The DPA requires us to have a lawful basis for every purpose we process data for:

• Your consent - for the newsletter, and for submitting the contact and sign-up forms, which we ask for explicitly at the point of collection. You can withdraw consent at any time (see Section 7).
• Performance of a contract - to process your course application, manage your enrollment, and deliver training services once you've applied or registered.
• Legal obligation - where we're required to keep certain records (e.g. for tax or regulatory purposes).
• Our legitimate interests - to keep the site secure, understand how it's used, and respond to enquiries, balanced against your right to privacy.

4. Who we share it with

We do not sell or rent your personal information. We share it only with:

• Service providers who help us run the site and deliver our services (for example, hosting, email delivery, and analytics providers), under obligations to protect your data and use it only for the purpose we've engaged them for.
• Authorities, where required by Kenyan law, court order, or regulation.
• A prospective or actual employer or regulator, but only where you have given us your consent to verify or share your training records with them.

Some of our service providers (for example, our website hosting and analytics providers) process data on servers located outside Kenya. Where we transfer personal data outside Kenya, we take reasonable steps to ensure it continues to be protected to a standard consistent with the DPA.

5. How long we keep it

We keep personal information only for as long as we need it for the purpose it was collected for, plus any additional period required by law (for example, financial and admissions records are typically retained for the statutory periods that apply to educational and tax records in Kenya). After that, we delete or anonymize it. If you ask us to delete your data sooner, see Section 7 - we'll do so unless we have a legal ground to keep specific records.

6. How we protect it

We use technical and organizational measures appropriate to the sensitivity of the data involved, including encrypted connections (HTTPS) between your browser and our servers, hashed password storage, and access controls that limit staff access to only the data needed for their role.

No system is completely secure. If you believe your information has been handled in a way that doesn't match this policy, or you suspect a security issue, please contact us immediately at info@aviedgegroup.com.

7. Your rights under the Data Protection Act

As a data subject under the DPA, you have the right to:

• Be informed of how your data is being used (this policy).
• Access the personal data we hold about you.
• Request correction of inaccurate or outdated data.
• Request erasure of your data, subject to any legal grounds we may have to retain it.
• Object to, or request restriction of, certain processing.
• Receive your data in a portable format.
• Withdraw consent at any time, where we rely on consent to process your data.
• Lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya, if you believe we have not handled your data properly.

If you have an account, you can exercise your access, export and deletion rights yourself from your account's Privacy settings once logged in. Otherwise, or for any other request, email info@aviedgegroup.com and we will respond within a reasonable time.

8. E-communications

You can opt out of marketing emails at any time, free of charge, using the unsubscribe option in the email or by emailing info@aviedgegroup.com. This doesn't affect essential service communications related to an admission or enrollment you've already started.

9. Cookies

We use a small number of cookies: some are necessary for the site to function, and others (analytics) help us understand how the site is used. Non-essential cookies are only set once you've given consent through the cookie banner shown on your first visit.

10. Changes to this policy

We may update this policy from time to time, for example as our services or the law change. We'll post the updated version here with a new "last updated" date.

11. Contacting us

If you have any questions, concerns or complaints about this Privacy Policy or how we handle your data, contact us at: