Privacy Policy

Effective and last updated: 31 October 2026

This policy explains how eClass Kenya handles personal information when you visit eclass.co.ke, create an account, buy or study a course, teach, or use an institution learning account. For privacy questions and requests, contact info@eclass.co.ke.

Information we collect

The information depends on the services you use:

• Account and profile: your name, email address, sign-in credentials and account role. You may add a display name, photograph, phone number, location, website, professional headline or biography.
• Learning activity: course enrolments, lesson completion, assessment submissions, scores, attempts, marking feedback and certificate records where these features are used.
• Purchases: the products you select, billing contact details, organisation and location details you provide, order amounts, payment method, payment status and transaction references or responses.
• Institution accounts: institution and administrator details, membership, assigned courses and learning progress. An institution may supply information to manage your access.
• Contributions and enquiries: reviews, ratings, materials you publish and information you send when contacting us. Avoid including sensitive information in public contributions.
• Browser and connection information: cookie choices, requested interface preferences and the technical information needed to deliver web requests, such as IP address and browser details. Hosting and security services may keep operational logs.

Some information is necessary to provide a requested service: for example, an email address for an account, learning records for course progress, and billing information for an order. If you do not provide required information, the related service may not be available. Optional profile fields can be left blank.

How and why we use information

We use information to create and manage accounts, provide purchased or assigned learning access, record progress, assess submitted work, administer certificates, manage orders, answer enquiries, and protect the site against misuse.

The applicable basis depends on the activity. Providing an account, course or order generally involves fulfilling your request or agreement with us. Account security and service administration involve legitimate interests, subject to your rights. Some records may be needed to meet legal obligations. Optional external media relies on your cookie choice. Giving consent for optional media is separate from creating an account or buying a course.

Who can see your information

Access depends on your role and the service involved. Authorised site staff administer accounts and orders. Course authors or authorised markers can access relevant assessment submissions and results. Authorised institution managers can see member names, email addresses, assignments and progress for the institution they manage.

Using a work or institutional email address may associate your account with an institution whose recorded website, subdomain or administrator email domain matches that address. Contact us if an association is incorrect. Where an institution manages your learning, its own privacy notice and responsibilities may also apply.

Instructor names and published course information are visible publicly. Approved reviews display the reviewer’s name, rating, date and review text; the review form’s email address is not displayed with the review. Materials and profile information that you publish may be visible to others. Do not include private contact details in public text unless you intend to share them.

Hosting, technical support and payment services may handle information needed for their functions. Information may also be disclosed when required by law or needed to address fraud, disputes or legal claims. These purposes do not make private learning records generally available to other visitors.

Payments

For an order, we retain billing details, the items ordered, payment status and relevant transaction records. If an online payment option is offered, the provider identified during checkout receives the information needed to process it, which may include your name, email, mobile number, location, order reference, amount and currency. We may retain confirmations and details returned by that provider.

Card authorisation details are handled by the selected payment provider. Do not send card security codes, mobile-money PINs or account passwords to us by email or in course content. An invoice or bank-transfer purchase may require manual payment confirmation. Payment providers have their own privacy notices.

Cookies and browser storage

Essential cookies support functions such as signing in and keeping your cart. Browser storage also remembers requested interface settings and can keep an assessment draft during the browser session.

• Cookie choice: the eclass_cookie_consent cookie records your decision and its date for 180 days. It does not contain your account ID.
• Cart: the site’s cart cookie can last about one month. Sign-in cookie duration depends on the login session and WordPress settings.
• Requested preferences: settings such as the reader’s dark mode may remain in browser storage until you clear them. Assessment drafts use session storage; submitted assessment records are held separately by the site.
• Optional external media: embedded players from services such as YouTube, Vimeo and Google Drive stay inactive until you allow external media. Loading a player can send connection information to its provider and allow that provider to use cookies.

Choose Customise, Reject all or Accept all in the cookie notice. Reject all leaves essential functions available and does not enable external media. You can change your choice through Cookie settings in the footer or the lesson reader’s site menu. Turning external media off removes active consent-controlled players and stops them loading again on this site. It does not erase cookies already set by another provider; use your browser or that provider’s controls to manage those cookies.

Browser controls can also block or clear cookies and storage. Blocking essential storage may affect sign-in, carts, saved preferences or drafts.

External services and international processing

External links and services have their own privacy practices. Optional video players are covered by the media choice above. Some profile images use Gravatar: a request to that service can include an email-derived identifier and normal connection details. An image request is separate from consenting to an embedded video.

External providers may process information outside Kenya. We do not promise that every service stores information only in Kenya. Applicable Kenyan requirements govern transfers of personal information outside Kenya; contact us for information about the providers and safeguards relevant to your use. You can decline optional external media without declining essential account functions.

How long information is kept

Account and learning records remain associated with your account while it is maintained. Order, assessment and certificate records may need to be retained for payment reconciliation, qualification verification, disputes or applicable legal requirements. The necessary period depends on the record and its purpose; there is no single automatic deletion period for all site records.

You may request account closure or deletion of personal information. We will consider the request, explain any necessary retention, and identify what can be removed or anonymised. Restarting a course or clearing your browser does not by itself delete earlier assessment or server records. Cookie and browser-storage periods are described above.

Security

The site uses HTTPS connections and access permissions for account, learning and administration features. Use a unique password, keep your sign-in details private, and sign out on shared devices. Contact us if you suspect unauthorised access. No website or transmission method can guarantee absolute security.

Your choices and privacy rights

Subject to the conditions and exceptions in applicable Kenyan data protection law, you can ask to see your personal information, correct inaccuracies, request deletion, object to or restrict relevant processing, and request a portable copy where that right applies. You can withdraw optional-media consent using Cookie settings. Withdrawal does not undo processing that already occurred.

Send requests to info@eclass.co.ke, stating the account email and what you need. Do not include your password. We may need proportionate information to confirm your identity or your authority to act for someone else. We will explain any applicable limits when responding.

You may raise a concern with Kenya’s Office of the Data Protection Commissioner. Its complaints portal provides a route to lodge a complaint. Contacting us does not remove your right to contact the regulator.

Children’s information

Children’s information requires additional care and the permissions required by Kenyan law. Parents, guardians and institutions should contact us before sharing a child’s information so that appropriate consent and learning arrangements can be confirmed. If you believe information has been supplied without the required permission, contact us so it can be reviewed.

Changes and contact

We may update this policy when the site’s services, data uses or applicable requirements change. The date at the top identifies the current version. Significant changes should be brought to your attention through the site or an appropriate account communication.

eClass Kenya
Website: eclass.co.ke
Privacy enquiries: info@eclass.co.ke