Privacy Policy

1. Who we are

darasa.my (a product of Click2Skill, operated by [legal entity]) respects your privacy. This policy explains what personal data we collect, how we use it, and your rights under the Data Protection Act, 2019.

2. Information we collect

Account information: your name, email address, and password (stored securely, never in plain text).
Payment information: processed by our payment provider (Paystack). We do not store your full card details; we receive a record of the transaction (amount, reference, method).
Learning data: the courses you enrol in, your progress, quiz attempts, and certificates.
Communications: messages you send us and your email preferences.
Technical and usage data: basic information such as device, browser, and how you use the Platform, including via cookies (see our Cookie Policy).

3. How we use your information

To create and manage your account and give you access to courses.
To process payments and send receipts.
To send transactional emails (confirmations, access, reminders, completion, password resets).
To send marketing emails about new courses and offers, where you have not opted out.
To provide support, improve the Platform, and keep it secure.
To comply with legal obligations.

4. Legal basis

We process your data on the basis of: performing our contract with you (providing courses you buy); your consent (for marketing emails, which you can withdraw at any time); our legitimate interests (improving and securing the Platform); and legal obligations.

5. Sharing your information

We do not sell your personal data. We share it only with service providers who help us run the Platform, under appropriate safeguards, including: our database and authentication provider, our payment provider (Paystack), our email provider, and our hosting/video providers. We may disclose data if required by law.

6. International transfers

Some of our providers process data on servers outside Kenya. Where this happens, we take reasonable steps to ensure your data remains protected to a standard consistent with the Data Protection Act, 2019.

7. Data retention

We keep your data for as long as your account is active and as needed to provide the service. We retain certain records (such as payment and tax records) for longer where the law requires. You can request deletion as described below; some records may be retained or anonymised where we are legally required to keep them.

8. Your rights

Under the Data Protection Act, 2019 you have the right to: access your data; correct inaccurate data; request deletion; object to or restrict certain processing; withdraw consent; and request a copy of your data. To exercise these, email hello@darasa.my. You also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC).

9. Marketing choices

You can opt out of marketing emails at any time using the unsubscribe link in those emails or in your account settings. We will still send essential transactional emails related to your account and purchases.

10. Security

We use reasonable technical and organisational measures to protect your data, including encryption of passwords and restricted access. No system is perfectly secure, but we work to keep your data safe.

11. Children

The Platform is intended for users aged 18 and over. We do not knowingly collect data from children without parental or guardian consent. If you believe a child has provided us data without consent, contact us and we will address it.

12. Changes to this policy

We may update this policy from time to time. We will post the updated version with a new "last updated" date and, where appropriate, notify you.

13. Contact

Privacy questions or requests: hello@darasa.my · 0758 991 116 · Westlands, Nairobi, Kenya.