Privacy policy
How CPA Hub Kenya handles personal data, under Kenya's Data Protection Act, 2019.
What we collect, and why
| What | Why |
|---|---|
| Your name, email address, phone number and the programme you study, when you create an account | To run your account, confirm your email, reach you about payments, and mark the videos you play with your name |
| Your M-Pesa payments: the confirmation code, amount, payer name and phone number, and the time | To confirm a payment and switch your access on, and to keep the financial records the law requires |
| The devices you sign in from (browser type), and your sign-in times | To limit an account to two devices, and to tell you when a new device signs in |
| What you study: lessons opened, how far you got, notes emailed | To save your progress across devices, and to spot an account being used to copy material |
| Pages visited, IP address and browser, for every visitor | To keep the site secure (rate limits, blocking abuse) and to count visits |
| Emails we send you | A copy is kept so we can see whether a payment or sign-in email was delivered |
Cookies
We use only the cookies the site needs to work: one that keeps you signed in, and one that protects forms against being submitted from another site. No advertising cookies, and no third-party trackers.
Who else handles it
- DigitalOcean hosts the site, its database and the lesson files, in its Frankfurt, Germany data centre.
- An email delivery provider sends our emails to you.
- Safaricom (M-Pesa) and our bank process your payment; we receive the payment notification.
- Cloudflare Turnstile, where shown on a form, checks that the form is filled in by a person.
We do not sell your data or share it for marketing.
How long we keep it
Account data is kept while your account is open. Payment records are kept for as long as Kenyan tax and accounting law requires, even after an account is closed. Visit and security logs are kept only as long as they are useful for security and counting visits.
Your rights
Under the Data Protection Act, 2019 you may ask to see the personal data we hold about you, to have it corrected, or to have it deleted (except records we must keep by law), and you may object to how we use it. Contact us from the email address on your account. You can also complain to the Office of the Data Protection Commissioner (ODPC).
We may update this policy; the version on this page is the one that applies.