Data Protection Policy

At Africa Education Hub, we are committed to protecting the privacy and security of personal data. This Data Protection Policy outlines our approach to handling, processing, storing, and protecting user data in compliance with relevant data protection laws and best practices. This policy applies to all users, employees, partners, and third parties who interact with our platform and services.

• Personal Data: Any information that identifies or can be linked to an individual.
• Data Subject: The individual whose personal data is collected and processed.
• Processing: Any action performed on personal data, including collection, storage, usage, modification, or deletion.
• Data Controller: Africa Education Hub, responsible for determining how personal data is processed.
• Data Processor: Any third-party service provider processing data on our behalf.

We adhere to the following principles when handling personal data:

• Lawfulness, Fairness, and Transparency: Personal data is collected and processed in a lawful, fair, and transparent manner.
• Purpose Limitation: Data is collected for specific, legitimate purposes and not used beyond those.
• Data Minimization: We only collect the necessary amount of personal data.
• Accuracy: We ensure personal data is kept accurate and up-to-date.
• Storage Limitation: Data is retained only as long as necessary or as required by law.
• Integrity and Confidentiality: We implement security measures to protect personal data from unauthorized access.

We collect the following types of personal data:

• Contact details (name, email, phone number).
• Educational information (courses enrolled, academic progress).
• Technical data (IP addresses, browser type, device information).

We process this data to provide services, manage user accounts, ensure security, and comply with legal requirements.

Users have the following rights concerning their personal data:

• Right to Access: Request access to personal data.
• Right to Rectification: Correct inaccurate or incomplete data.
• Right to Erasure: Request deletion of personal data.
• Right to Restrict Processing: Request limited processing under certain conditions.
• Right to Data Portability: Request a copy of your data in a structured format.
• Right to Object: Object to data processing for certain purposes, such as marketing.

We implement security measures to safeguard personal data, including:

• Data encryption for secure transmission and storage.
• Access control to restrict unauthorized access.
• Regular security audits to identify and fix vulnerabilities.

We retain personal data only as long as necessary for legal and business purposes. Once no longer required, data is securely deleted.

We do not sell personal data but may share it with:

• Service providers for cloud hosting, analytics, and customer support.
• Legal authorities when required by law.
• Business partners in the event of mergers or acquisitions.

We monitor compliance with this policy and take immediate action in the event of a data breach. Affected users will be notified as required by law.

We may update this policy periodically. Any significant changes will be communicated via email and published on our website.