1. Information We Collect

1.1. Information You Provide Directly

• **Registration Data:** Name, email address, and demographic information (e.g., location, educational background).
• **Contact Information:** Phone number (essential for WhatsApp communication and M-PESA payment verification).
• **Payment Verification Data (Crucial for Manual Enrollment):** Due to our current manual enrollment process, we collect your M-PESA confirmation text/screenshot, which contains the payment amount, transaction ID, and the sending phone number.

1.2. Information Collected Via Platform

• **Usage Data:** Course progress, completion status, quiz scores, time spent on lessons, and forum participation (collected by the Open edX platform).
• **Device Data:** IP address, browser type, operating system, and unique device identifiers (standard web logging).

2. How We Use Your Information

We also use your data for the following purposes:

• **Service Delivery:** To operate, maintain, and provide all features of the RTTI courses and the Open edX platform.
• **Communication:** To send you essential updates, payment confirmations, and support communications (often via WhatsApp).
• **Affiliate Program:** To track successful referrals and process KES 100/- payouts to affiliate members.
• **Improvement:** To monitor learning patterns, improve course content, and develop new educational products.
• **Security:** To protect against unauthorized access, fraud, and system abuse.

3. Sharing Your Information (Third Parties)

We only share your information with trusted third parties necessary for the operation of our educational services:

4. Data Security and Your Rights

4.1. Security Measures

We implement industry-standard technical and organizational security measures to protect your data from unauthorized access, disclosure, alteration, or destruction. However, no internet transmission is 100% secure, and we urge you to keep your login credentials private.

4.2. Your Rights

As a user, you have the right to access, correct, update, or request deletion of your personal data. To exercise these rights, please contact our administrative team via email.

Note: Deletion requests are subject to our legal and service obligations (e.g., maintaining transaction records for accounting).

4.3. Compliance (Kenyan Context)

We strive to comply with relevant data protection principles, including the Kenyan Data Protection Act, 2019, ensuring data is processed lawfully, fairly, and transparently, and that consent is respected.