List of active policies

Name	Type	User consent
CEMASTEA Data Privacy Policy	Privacy policy	All users

CEMASTEA Data Privacy Policy

Summary

CEMASTEA is committed to protecting your privacy in accordance with the Data Protection Act (2019) of Kenya.

To facilitate your training, assessment, and certification, we collect and process personal data including your Name, National ID, TSC Number, Contact Details, and Academic Performance. This data is used strictly for:

Managing your user account and course enrollments.
Tracking professional development progress.
Issuing certificates and reporting to the Teachers Service Commission (TSC) and Ministry of Education.

Your data is stored securely and is never sold to third parties. By agreeing to this policy, you consent to CEMASTEA processing your data for these educational and compliance purposes.

Full policy

1. Introduction

The Centre for Mathematics, Science and Technology Education in Africa (CEMASTEA) ("we," "our," or "us") is committed to protecting your personal data and ensuring your privacy rights are upheld in accordance with the Constitution of Kenya (2010) and the Data Protection Act, 2019.

This policy explains how CEMASTEA collects, uses, stores, and protects your personal information when you use our Learning Management System (LMS).

2. Identity of the Data Controller

For the purposes of this policy, the Data Controller is:

Name: Centre for Mathematics, Science and Technology Education in Africa (CEMASTEA)
Physical Address: Karen-Bogani Road, Nairobi
Data Protection Officer (DPO) Contact: dpo@cemastea.ac.ke

3. What Personal Data We Collect

We collect and process the following personal data to provide you with educational services:

Personal Identification: Full name, email address, phone number, TSC Number (if applicable), and National ID/Passport number.
Academic & Professional Information: School/Institution of affiliation, course enrollments, assessment grades, assignment submissions, and training attendance records.
Technical Data: IP address, browser type, device information, and system login activity logs.
Sensitive Data: (Only if applicable) Biometric data, health status, or other sensitive personal data will only be collected with your explicit additional consent.

4. Purpose of Data Collection

We collect your data for the following specific and legitimate purposes:

Account Management: To create and manage your user account on the CEMASTEA LMS.
Training Delivery: To facilitate online training, grade assessments, and track professional development progress.
Certification: To verify identity and participation for the issuance of certificates upon course completion.
Communication: To send important notifications regarding training schedules, deadlines, and system updates.
Compliance: To meet statutory obligations as required by the Ministry of Education, Teachers Service Commission (TSC), or other regulatory bodies.
Security: To monitor unauthorized access and ensure the security of the platform.

5. Lawful Basis for Processing

We process your personal data based on the following lawful grounds as outlined in Section 30 of the Data Protection Act:

Consent: You have given clear and informed consent to the processing of your data for the purposes stated above.
Performance of a Contract: Processing is necessary to provide the training services you have enrolled in.
Legitimate Interests: Processing is necessary for CEMASTEA's legitimate interests in managing the national training programs and ensuring network security.

6. Data Retention

We will retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by law.

Active Accounts: Data is retained while you are an active participant in our training programs.
Inactive Accounts: Data may be archived [Insert Number] years after your last activity, unless legally required to be kept longer for academic or professional development records.

7. Your Rights as a Data Subject

Under the Data Protection Act, you have the following rights:

Right to be Informed: To know how your data is being used.
Right of Access: To request a copy of the personal data we hold about you.
Right to Rectification: To request correction of false or misleading data.
Right to Erasure: To request the deletion of your data where there is no compelling reason for its continued processing.
Right to Withdraw Consent: You may withdraw your consent at any time; however, this may affect your ability to access specific training modules.
Right to Object: To object to the processing of your data for specific purposes.

To exercise any of these rights, please contact our Data Protection Officer at: [Insert DPO Email Address].

8. Data Security

CEMASTEA has implemented appropriate technical and organizational measures to safeguard your personal data against unauthorized access, accidental loss, destruction, or damage. These measures include secure server hosting, encryption, and password-protected access.

9. Third-Party Sharing and Transfers

We do not sell your personal data. We may share your data with:

Service Providers: Third-party vendors who support our IT infrastructure, bound by strict confidentiality agreements.
Government Bodies: The Teachers Service Commission (TSC) or Ministry of Education for reporting and certification purposes.
Legal Authorities: If required by law or a court order.

10. Consent Declaration

By clicking "I Agree" below, you confirm that:

You have read and understood this Privacy Policy.
You freely give your specific and informed consent for CEMASTEA to collect and process your personal data for the purposes outlined above.