Privacy Policy

01Who we are

ASPIRE SAFETY & HYGIENE SOLUTIONS (“Aspire”) runs this website and decides how your personal data is used. That makes us the “data controller” under Kenya's Data Protection Act, 2019.

For anything about your data, email info@aspiresafetyhygienesolutions.co.ke or call / WhatsApp +254 725 009 705.

02What we collect

• Your account: full name, email address, and, if you give them, your phone number and country. Your password is stored only in scrambled (hashed) form by our sign-in provider. We can't see it.
• For certificates: your ID or passport number, which is printed on your certificate.
• Your learning: the courses you start, the lessons you complete, your answers and marks in knowledge checks and assessments, and any assignment you submit.
• Certificates: the name, ID number, course, mark, date and certificate number.
• Payments: the amount, method (card or M-Pesa), date and Paystack reference. Your card number and M-Pesa PIN go only to Paystack. We never receive them.
• Company accounts: the company's name and contact details, and which staff have joined.
• Messages: what you send us through the enquiry forms, email or WhatsApp.
• Security: your internet (IP) address, used briefly to stop abuse such as repeated sign-in attempts. If you use fingerprint or face sign-in, we only receive a security key. Your fingerprint or face never leaves your device.

03Why we use it

• To provide the service you signed up for: your account, courses, assessments, certificates, payments and company accounts.
• To keep certificates trustworthy: so employers and inspectors can check them, and so each person has only one account.
• To keep the site safe: preventing fraud, cheating and attacks.
• To meet legal duties: such as keeping payment records for tax.
• To reply to you when you contact us.

We don't sell your data, and we don't use it for advertising. We will only send you marketing if you have agreed to it, and you can stop it at any time.

04Who can see it

• You, when you are signed in.
• Aspire administrators, to run courses, issue certificates and help you.
• Your company account owner, if you joined one: your name, email, progress, results and certificates.
• Anyone who checks a certificate with its number or QR code: the holder's name, course, date, mark and a partly hidden ID number.
• The companies that run parts of our service for us: Supabase (database, sign-in and file storage), Vercel (website hosting), Paystack (payments) and our email delivery provider. They may only use your data to provide their service to us.
• Authorities, if the law requires it.

Some of these providers store data on servers outside Kenya. Where that happens we rely on the safeguards the Data Protection Act requires, such as the provider's contractual data-protection commitments.

05Cookies

We use only the cookies needed to keep you signed in and the site secure. There are no advertising or tracking cookies.

06How long we keep it

• Your account and learning records: while your account is open. When it is deleted, they are deleted too.
• Issued certificates: kept after an account is deleted so they can still be verified, unless you ask us to withdraw them.
• Payment records: kept for at least five years, as Kenyan tax law requires.
• Security records such as IP addresses used to stop abuse: a few days.

07Your rights

Under the Data Protection Act, 2019 you have the right to:

• be told how your data is used (this page);
• get a copy of your data;
• have wrong data corrected. You can change most details yourself in Your details;
• have your data deleted, including your whole account;
• object to, or ask us to limit, how we use your data;
• take your data to another provider;
• withdraw any consent you gave.

To use any of these rights, email info@aspiresafetyhygienesolutions.co.ke or call / WhatsApp +254 725 009 705. We may need to confirm it's you first. We will respond as quickly as we can, and within the time the law allows.

If you aren't happy with how we handled your data, you can complain to the Office of the Data Protection Commissioner (odpc.go.ke).

08How we protect it

All connections to the site are encrypted. Passwords are stored only in hashed form. Each person can see only their own records, and only administrators can see learner records. Payments are checked with Paystack before any certificate is issued.

09Children

Our courses are for people in or preparing for work. If you are under 18, you need permission from a parent or guardian to create an account.

10Changes to this policy

We may update this policy. The date at the top shows the latest version. If a change is significant we will tell signed-in users. See also our Terms and Conditions.