Privacy Policy

This Privacy Policy explains how KenyanTutors.com collects, uses, shares, and protects personal data. It is intended to support compliance with Kenya’s Data Protection Act, 2019 and the Data Protection (General) Regulations, 2021, and to provide transparency consistent with GDPR/UK GDPR privacy notice expectations.

Last updated: 11 January 2026

1. Who this policy applies to

This policy applies to visitors to KenyanTutors.com, tutors who apply or create profiles, students and parents who make enquiries, and anyone who subscribes to communications from the Platform.

2. Personal data we collect

Depending on how you use the Platform, we may collect:

• Identity and contact data: name, email address, phone/WhatsApp number, location (where provided).
• Account data: login identifiers, user type, preferences.
• Tutor application/profile data: subjects, experience, education, availability, rates, profile photo, introduction video, supporting documents (where uploaded).
• Communications: messages submitted via forms, emails sent to support addresses, and related administrative records.
• Newsletter data: email address and subscription status.
• Technical data: IP address, device/browser information, timestamps, and security logs.
• Cookies/analytics data: as described in the Cookie Policy (where applicable).

3. How we use personal data (purposes)

• To operate the Platform, including account creation, login, and core site functionality.
• To process tutor applications and publish tutor profiles (where approved).
• To support discovery and communication between tutors and students/parents (as provided by the Platform).
• To respond to enquiries and provide support.
• To send administrative messages about applications, accounts, policy updates, or platform security.
• To send newsletters or platform updates where you have subscribed (and to manage opt-out requests).
• To protect the Platform (fraud prevention, abuse detection, and security monitoring).
• To comply with legal obligations and handle disputes or complaints.

4. Legal bases for processing (Kenya and GDPR/UK GDPR)

We process personal data only where there is a lawful basis. Depending on the context, this may include:

• Performance of a contract / steps before a contract: e.g., creating an account, processing a tutor application, responding to service requests.
• Consent: e.g., newsletter subscriptions or optional profile elements where consent is required. Consent can be withdrawn.
• Legitimate interests: e.g., securing the Platform, preventing abuse, and improving services (balanced against user rights).
• Legal obligation: e.g., compliance, responding to lawful requests, and record-keeping where required.

5. Children’s data

Where personal data relates to a child, we take additional steps to protect the child’s best interests. Where parental or guardian consent is required, we will request it before processing the child’s personal data for that purpose.

6. Sharing and disclosure

We may share personal data with:

• Service providers (processors): hosting, storage, email delivery, security tooling, analytics, and similar infrastructure providers, under appropriate contractual terms.
• Professional advisers: legal, accounting, or audit advisers where necessary.
• Authorities: where required by law, court order, or to protect rights, safety, and security.

We do not sell personal data.

7. International transfers

Platform systems or service providers may process data in countries outside Kenya and/or outside the UK/EEA. Where personal data is transferred internationally, we apply appropriate safeguards required by applicable law, which may include contractual protections and risk-based assessments.

8. Data retention

We retain personal data only for as long as necessary for the purposes described in this policy, unless a longer period is required by law or for dispute resolution and security. Typical retention periods may include:

• Tutor application records: retained for a reasonable period to manage onboarding and support (and deleted or anonymised where no longer required).
• Support communications: retained to manage queries, quality, and dispute handling.
• Security logs: retained for security monitoring and incident investigation.
• Newsletter subscriptions: retained until you unsubscribe, plus a minimal record to respect opt-out requests.

9. Security

We implement technical and organisational measures designed to protect personal data, including access controls, secure configuration, and monitoring. No system is perfectly secure; users should take appropriate precautions (for example, using strong passwords and keeping credentials confidential).

10. Data breach management

If a personal data breach occurs, we assess the risk and take appropriate steps to contain and remediate it. Where required under applicable law, we will notify the relevant regulator and/or affected individuals.

11. Your rights

Subject to applicable law, users may have rights including:

• to be informed about how personal data is used;
• to access personal data;
• to correct inaccurate or misleading data;
• to object to processing in certain circumstances;
• to request deletion/erasure in certain circumstances;
• to withdraw consent where processing is based on consent;
• to lodge a complaint with the relevant regulator.

12. How to exercise your rights

To request access, correction, deletion, or to raise a privacy concern, contact: hello@kenyantutors.com. We may need to verify identity before fulfilling a request.

13. Complaints

If you are located in Kenya and believe your data protection rights have been infringed, you may lodge a complaint with the Office of the Data Protection Commissioner (ODPC). ODPC information is available on its website, including complaint guidance and contact channels.

14. Changes to this policy

We may update this Privacy Policy from time to time. Any updates will be published on this page, and the “Last updated” date will be revised.