Privacy notice · Version 1.0

Your data,
explained.

Effective on publication. This notice explains how SCI2PRO AFRICA VENTURES LTD processes personal data for Code Coach.

Controller and contact

SCI2PRO AFRICA VENTURES LTD is the data controller. You can contact our privacy team at [email protected], Western Heights, Karuna Road, Westlands, or P.O. Box 11732-00100, Nairobi, Kenya.

What we collect and why

We collect your name, email address, password hash or verified Google sign-in identity, adult confirmation, course progress, quiz responses, notifications, and communications preferences to create and secure your account and provide learning services. We collect order, course, payment-reference, status, amount, and Kenyan mobile-number data to arrange and confirm M-Pesa payments. We do not receive or store M-Pesa PINs or payment credentials.

We use this data to perform our agreement with you, meet legal and tax obligations, protect the service from misuse, and—only with your separate consent—send course follow-ups or measure site use with Google Analytics. You may withdraw optional consent at any time without affecting your account or course access.

Cookies and third parties

Code Coach uses necessary session and security cookies to sign you in and protect forms. Google Analytics is optional and is loaded only after you choose to accept analytics cookies; its configured analytics retention period is 14 months. You can change that choice at any time using “Cookie preferences” in the footer.

We use Contabo in Germany for hosting, databases, and backups; Brevo for email services, with hosting in France, Germany, and Belgium; Google for optional Analytics and sign-in; YouTube when a course page embeds a video; and SCI2PRO’s Kenya payment service, which uses Safaricom Daraja. These providers may process the minimum data needed to provide their services. We require appropriate safeguards before transferring personal data outside Kenya and review processor arrangements regularly.

Retention and security

We review dormant account data after 24 months, retain email-delivery records for 12 months, retain privacy-request records for 24 months after closure, and configure backups to expire after 35 days. Payment and tax records are retained for at least five years from the relevant reporting period, or longer where the law or a live dispute requires it.

We use access controls, password hashing, HTTPS in production, signed payment webhooks, and restricted staff access. No online service can promise absolute security, but we assess and improve our safeguards as required.

Your rights and complaints

You may ask to access, correct, erase, restrict, object to, or receive a portable copy of your personal data. Submit a verified privacy request or email [email protected]. Access requests are handled within seven days; correction, erasure, restriction, and objection requests within 14 days; and portability requests within 30 days, subject to applicable law. If you are dissatisfied, you may complain to the Office of the Data Protection Commissioner.

Children and changes

Code Coach is for adults aged 18 or older and does not knowingly collect children’s personal data. We will update this notice when our processing changes and will publish the new version here.