Privacy Policy

Last Updated: June 26, 2026

At Nexa Academy, your privacy is not an afterthought. It is something we take seriously from the ground up. This Privacy Policy explains how we collect, use, share, store, and protect your personal information when you access or use our website, learning management system (LMS), student portal, mobile applications, educational programmes, events, mentorship services, payment systems, and all related offerings (collectively, the "Services").

We have written this policy in plain language because we believe you deserve to understand exactly how your information is handled, not wade through pages of legalese to find out.

By using our Services, you confirm that you have read and understood this Privacy Policy.

1. Who We Are

Nexa Academy is a professional tech training institution offering skills-based programmes in Software Engineering, Data Science, and Cloud Computing & AI.

For any questions about this policy or how we handle your data, see Section 18 for our contact details.

2. Information We Collect

We collect personal information in two main ways: information you give us directly, and information that is collected automatically as you use our Services.

2.1 Information You Provide Directly

Personal Identification When you register, apply, or interact with us, you may provide your full name, email address, phone number, date of birth, nationality, gender (where applicable), and government-issued identification where a programme requires it.

Educational Background As part of the admissions process, you may submit academic qualifications, professional experience, a resume or CV, a portfolio, and programme application responses.

Account Information To access our platforms, you will create a student account. This includes your username, password, profile details, learning preferences, and notification settings.

Google Sign-In You may choose to create or access your account using "Sign in with Google." When you do, we receive your name, email address, and profile photo from your Google account, which we use only to create and secure your account. We do not access, request, or store your Google Calendar, Drive, Gmail, or any other Google service data.

Communications When you contact our support team, submit feedback, respond to surveys, or participate in mentorship and community interactions, we retain those communications to help us serve you better.

Payment Information When making a payment, we collect billing information, transaction references, payment status, and purchase history. Complete card details are processed directly by our authorised payment providers and are not stored by Nexa Academy.

2.2 Information Collected Automatically

Device and Browser Information When you access our Services, we may automatically collect your device type, operating system, browser type, screen resolution, language settings, and unique device identifiers.

Usage Information We collect data on pages visited, features accessed, learning content viewed, navigation paths, session duration, interaction events, and referral sources, all to help us understand and improve how our platform is used.

Log Data Our systems automatically record IP addresses, login attempts, access timestamps, browser requests, system activity logs, and error reports for security and performance purposes.

3. Learning Management System (LMS) Data

Delivering quality education requires us to track learning activity within our LMS. This may include:

• Course enrolments and lesson progress
• Assignment and project submissions
• Quiz results, examination scores, and assessment records
• Attendance and participation data
• Discussion forum activity
• Certificate completion status

We use this data to deliver course content, monitor learning progress, assess performance, generate certificates, and continuously improve our educational programmes.

4. Mobile Application Data

If you use a Nexa Academy mobile application, we may collect device information, application usage data, crash reports, diagnostic information, notification preferences, and authentication activity. This data is used solely to improve application performance, maintain security, and deliver a better learning experience.

5. Information from Third Parties

We may receive information about you from trusted third parties, including payment providers, educational partners, event registration systems, scholarship partners, recruitment partners, analytics providers, and marketing platforms. Where this occurs, such information may be combined with data already associated with your account, and will be handled in accordance with this policy.

6. How We Use Your Information

We use personal information for legitimate educational and operational purposes. Specifically:

Service Delivery To create and manage your account, process applications, deliver courses, provide mentorship services, manage student records, and issue certificates.

Platform Operations To maintain and monitor our systems, troubleshoot issues, improve platform functionality, and enhance the overall user experience.

Communications To keep you informed about programme updates, enrolment information, course announcements, assignment deadlines, student support, service notices, and policy changes. We will only contact you with information that is relevant to your relationship with Nexa Academy.

Payments and Financial Administration To process transactions, verify payments, prevent fraud, manage approved refunds, and maintain accurate financial records.

Security and Compliance To protect student accounts, detect and investigate abuse or suspicious activity, enforce our policies, and comply with applicable legal obligations.

Marketing and Promotions Where permitted and where you have not opted out, we may use your information to send newsletters, promote courses and events, and share relevant educational opportunities. You may opt out of marketing communications at any time by following the unsubscribe link in any communication or by contacting us directly.

7. Legal Bases for Processing

We process your personal information on the following grounds:

• Consent: where you have explicitly agreed to a specific use
• Contractual obligation: where processing is necessary to deliver the Services you have enrolled for
• Legal obligation: where we are required to process data to comply with applicable law
• Legitimate interests: where processing is necessary for our genuine operational and educational interests, provided those interests are not overridden by your rights
• Protection of vital interests: in circumstances where processing is necessary to protect safety

8. How We Share Your Information

We do not sell your personal information. We do not trade it, rent it, or use it to profit at your expense.

We may share your information only in the following circumstances:

Service Providers We work with trusted providers who support our operations, including cloud infrastructure, learning platforms, payment processing, email delivery, analytics, customer support, and security monitoring. These providers access only the information necessary to perform their functions and are contractually bound to handle it appropriately.

Educational Partners Certain programmes may involve educational institutions, employers, mentors, or certification partners. Where this is the case, we share only the information necessary to deliver the relevant aspect of the programme.

Legal Requirements We may disclose your information where required to comply with a legal obligation, respond to a lawful request from authorities, protect the rights and safety of our students and staff, or prevent fraud or abuse.

9. International Data Transfers

Our Services may involve the processing or storage of data in countries outside your country of residence, including where our third-party providers are based. Where international transfers occur, we take reasonable steps to ensure that appropriate safeguards are in place to protect your information, consistent with applicable data protection standards.

10. How Long We Keep Your Information

We retain your personal information only for as long as necessary to fulfil the purposes described in this policy. Retention periods vary depending on the nature of the data:

• Active student records are maintained throughout your enrolment and for a reasonable period after programme completion
• Academic records, certificates, and transcripts may be retained for extended periods to support future verification requests
• Financial records are kept in line with applicable accounting and tax requirements
• Data collected for security purposes is retained as long as necessary to investigate and resolve any relevant incidents

When data is no longer needed, we dispose of it securely.

11. How We Protect Your Information

We implement reasonable technical, administrative, and organisational safeguards to protect your personal information from unauthorised access, loss, misuse, or disclosure. These include:

• Encryption of data in transit and at rest
• Secure authentication systems and access controls
• Network monitoring and intrusion detection
• Regular security reviews and audits
• Backup and recovery procedures

While we take security seriously, no method of data transmission or storage is completely infallible. We encourage you to use strong passwords, keep your login credentials private, and notify us immediately if you suspect any unauthorised access to your account.

12. Student Communities and Public Content

Some of our Services include discussion forums, student communities, project showcases, and public profiles. Information you share in these spaces may be visible to other users, including fellow students, mentors, and visitors to the platform.

Please exercise caution when posting publicly. Content shared in community spaces may remain accessible even after your account is closed. Nexa Academy is not responsible for how other users may interact with or use publicly shared content.

13. Cookies and Similar Technologies

We use cookies and similar tracking technologies across our platforms. These help us authenticate users, remember preferences, improve performance, analyse usage, and maintain security.

For a full explanation of how we use cookies and how you can manage your preferences, please refer to our Cookie Policy (https://nexaacademy.co.ke/cookie-policy).

14. Your Rights

Depending on applicable law, you may have the right to:

• Access: request a copy of the personal information we hold about you
• Correction: request that inaccurate or incomplete information be corrected
• Deletion: request that we delete your personal information, subject to legal and contractual obligations
• Restriction: request that we limit how we process your information in certain circumstances
• Objection: object to certain types of processing, including direct marketing
• Withdrawal of consent: withdraw consent at any time where processing is based on consent
• Data portability: request your data in a structured, commonly used format where applicable

To exercise any of these rights, please contact us using the details in Section 18. We may ask you to verify your identity before processing your request, and we will respond within a reasonable timeframe.

15. Children's Privacy

Our Services are generally intended for individuals who meet our enrolment eligibility requirements, which include a minimum age of 18. Where minors participate in any programme, documented parental or guardian consent is required as outlined in our Terms of Service.

We do not knowingly collect personal information from children in a manner that violates applicable law. If we become aware that we have collected information from a minor without appropriate consent, we will take prompt steps to delete it.

16. Third-Party Links and Services

Our platforms may contain links to third-party websites, tools, or services. Nexa Academy is not responsible for the privacy practices of those third parties, and this policy does not apply to their services. We encourage you to review the privacy policies of any third-party service you access through our platforms.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable requirements. When we do, the revised version will be published on this page with an updated "Last Updated" date.

We will make reasonable efforts to notify enrolled students of material changes. Your continued use of our Services after any update constitutes your acceptance of the revised policy. If you do not agree with a change, please discontinue use of the relevant Services and contact us.

18. Contact Us

If you have any questions about this Privacy Policy, how we handle your personal information, or wish to exercise your data rights, please reach out to us.

Nexa Academy

Email: info@nexaacademy.co.ke

Website: https://nexaacademy.co.ke

We aim to respond to all privacy-related enquiries within a reasonable timeframe.

This Privacy Policy was last reviewed and updated on June 26, 2026.