1. Who we are & the law that applies
Modern Digital Skills is a sole proprietorship based in Westlands, Nairobi, Kenya. We are the data controller for the personal information you share with us through this Platform. This Privacy Policy is written to comply with the Data Protection Act, 2019 (Kenya).
2. What information we collect
We deliberately collect the minimum amount of data needed to run the Platform:
| Data | When we collect it | Why we need it |
|---|---|---|
| Full name | At enrolment | To identify your enrolment and for support |
| Email address | At enrolment & sign-in | To grant course access and contact you |
| Phone number | At enrolment | For account recovery and support |
| Payment reference | At payment | To match your payment to your access |
| Course progress | While studying | To track which lessons you've completed |
| Browser session token | After payment | To keep you signed in to the dashboard |
We do not collect or store your card number, M-Pesa PIN, or any other payment credentials. All payment information is handled directly by Paystack on their secure servers — we only receive a confirmation that your payment succeeded.
3. How we use your information
We use your information for these specific purposes:
- To verify your payment and grant you access to the course you bought.
- To send you transactional emails (e.g. payment confirmation, password reset links, access link recovery).
- To respond to support requests you send us.
- To keep records required by Kenyan tax and accounting law.
- To prevent fraud, abuse, and account sharing.
We do not sell your data to anyone, and we do not use your data for advertising profiles.
4. Who we share your data with
We share your information only with the third parties needed to run the Platform:
- Paystack — to process payments. Paystack sees your name, email, phone, and the amount paid.
- Our web host — your data is stored on the server that runs this Platform.
- YouTube (Google) — when you watch a lesson, YouTube may collect standard playback data. We use the privacy-enhanced ("nocookie") embed to minimise tracking.
- Lawful authorities — if compelled by a valid court order or government request under Kenyan law.
5. How long we keep your data
We keep your enrolment data for as long as your access to the course remains active, plus seven (7) years afterward to comply with Kenyan tax record-keeping requirements. After that, your personal data is deleted or fully anonymised.
Browser session tokens automatically expire after 30 days of inactivity. You may also delete your active session at any time by clicking Log Out inside the dashboard.
6. Your rights under the Data Protection Act, 2019
As a data subject in Kenya, you have the right to:
- Access the personal data we hold about you.
- Correct any information that is wrong or out of date.
- Request deletion of your data, subject to our tax-record obligations.
- Object to processing in certain circumstances.
- Lodge a complaint with the Office of the Data Protection Commissioner of Kenya if you believe your rights have been breached.
To exercise any of these rights, email enroll@moderndigitalskills.com with your request. We will respond within 14 working days.
7. Security
We protect your data with these measures:
- All data is transmitted over HTTPS (encrypted in transit).
- Database access is protected by a unique password and is only reachable from our server.
- We never see or store your card or M-Pesa PIN — Paystack handles all of that.
- We use prepared SQL statements throughout to prevent injection attacks.
- Session tokens are random and long enough to be effectively unguessable.
No system is perfectly secure, but we take reasonable steps appropriate to the size of our business.
8. Cookies & local storage
We use one form of browser local storage: a session token that keeps you signed in to the dashboard after you've paid. This is not a marketing cookie — it has no third-party tracking purpose. Clearing your browser data will remove it, and you'll simply need to sign in again with your email.
9. Children
Our Platform is not designed for children under 18. We do not knowingly collect data from anyone under 18. If you believe a child has used the Platform without parental consent, contact us and we will delete their data.
10. Changes to this policy
We may update this Privacy Policy from time to time. The "Effective from" date at the top reflects the latest version. Material changes will be communicated by email to enrolled students and posted prominently on the Platform.
11. Contact us
For any privacy question or to exercise your rights:
- Email: enroll@moderndigitalskills.com
- Phone: +254 703 767 589
- Address: Westlands, Nairobi, Kenya