Privacy Policy

1. Purpose of This Policy

This Privacy Policy explains how Learn with Isaac collects, uses, stores, shares, protects, and deletes personal data when you visit our website, apply for a programme, create an account, enrol for a course, make payments, attend classes, use the student or instructor portal, receive notifications, contact support, or complete online assessments.

We aim to follow Uganda's Data Protection and Privacy Act, 2019 and the Data Protection and Privacy Regulations, 2021. These laws require personal data to be processed fairly and lawfully, for specific purposes, with transparency, security safeguards, appropriate retention, and respect for data subject rights.

2. Personal Data We Collect

• Identity and contact details: name, username, email, phone, location, age or date of birth where required.
• Application and enrolment details: selected course, education background, learning goals, instructor expertise, portfolio links, application status, and admission notes.
• Learning records: enrolments, attendance-related records, course access, materials viewed, submissions, assessment answers, marks, feedback, results, and certificates.
• Assessment integrity data: selfie image, consent record, IP address, browser information, fullscreen exits, paste/copy attempts, tab switching, activity flags, timestamps, and risk scores where strict mode is enabled.
• Payment records: amount, currency, course, payment status, transaction reference, gateway tracking ID, receipts, callbacks, and reconciliation data.
• Communication records: contact messages, chat messages, support requests, notification preferences, newsletter subscription, and delivery status.
• Technical data: IP address, device type, browser, user agent, session identifiers, cookies, PWA install events, advertisement impressions/clicks, logs, and security events.

3. Why We Use Personal Data

• To review applications and manage enrolment.
• To provide courses, live classes, materials, assignments, assessments, results, and certificates.
• To verify learner identity and protect academic integrity.
• To process payments, reconcile transactions, and manage balances.
• To send class reminders, assessment deadlines, results, payment updates, service notices, and optional updates.
• To support learners, instructors, staff, and applicants.
• To secure the platform, prevent fraud, investigate misuse, and maintain audit records.
• To improve courses, user experience, reporting, and platform reliability.

4. Lawful Basis and Consent

We process personal data where you have given consent, where processing is necessary to provide requested services or perform a contract, where we must comply with legal or administrative obligations, where we need to protect legitimate educational, security, payment, or operational interests, or where another lawful basis applies.

For strict online assessments, we request an explicit consent confirmation before the assessment starts. If you do not consent to required assessment integrity controls, you may not be able to take that assessment online and should contact Learn with Isaac for guidance.

5. Children's Data

Where a learner is below 18 years, personal data should be provided by, or with the knowledge and consent of, a parent, guardian, or authorised person. We use children's data only for legitimate learning, enrolment, protection, support, assessment, payment, and administrative purposes.

6. Sharing and Service Providers

We do not sell personal data. We may share limited personal data with authorised staff, instructors, payment processors, email/SMS/notification providers, hosting providers, technical support providers, regulators, law enforcement, professional advisers, or partners where necessary for the purposes described in this policy.

Where a service provider processes data for us, we expect them to protect the data and use it only for the authorised purpose.

7. International Storage or Processing

Some technology providers may store or process data outside Uganda. Where this happens, we take reasonable steps to use providers and safeguards that support protection of personal data, or we rely on consent or another lawful basis where applicable.

8. Security Measures

• Access controls for admin, instructor, and student areas.
• Role-based permissions for sensitive admin modules.
• Password hashing and login rate limiting.
• Private storage for sensitive assessment selfie files.
• Audit logs for important staff actions.
• Secure payment status checks through approved payment gateway APIs.
• Regular backups, server security, and monitoring where configured in production.

9. Cookies, Push Notifications, and Tracking

We use cookies and similar technologies for login sessions, security, preferences, PWA functionality, notification setup, and basic analytics such as advertisement impressions or clicks. Browser push notifications are optional and require browser permission. You may disable notifications in your browser or in the notification settings page where available.

10. Retention and Deletion

We keep personal data only for as long as needed for learning, administration, payment records, academic records, legal compliance, dispute resolution, security, reporting, and legitimate institutional purposes. Detailed retention periods are set out in our Data Retention & Deletion Policy.

When retention expires, we delete, anonymise, or securely archive records where appropriate and technically possible, subject to lawful exceptions.

11. Your Data Protection Rights

Subject to applicable law and necessary verification, you may request access to your personal data, correction of inaccurate data, deletion where lawful, restriction or objection to certain processing, withdrawal of consent where processing depends on consent, and information about how your data is used.

We may decline or limit a request where retention or processing is required for legal, payment, academic, security, dispute, or legitimate administrative reasons.

12. Complaints

If you believe your privacy rights have been affected, contact us first so we can review and respond. You may also raise a complaint with Uganda's Personal Data Protection Office where applicable.

13. Changes to This Policy

We may update this policy when laws, services, technology, or our processing practices change. The latest version will appear on this page with the updated date.