What we collect
Inclusive Education Hub for Africa respects your privacy. We collect only the information needed to run the website, the members' forum, the E-Learning Academy and our newsletter.
- Membership application and account: your name, email address, password (stored only in scrambled, hashed form), country, organization, sector, whether you join as an individual or an organization, and your short statement of why you want to join. Name, email, country, sector and the statement are required to review your application; the rest is optional.
- Profile and settings: anything you add to your profile (bio, photo, preferred language), whether you appear in the member directory, and your notification choices.
- Forum activity: discussions, replies, files, messages to other members, community memberships and reports you make, so the forum can work and be moderated.
- E-Learning Academy account: forum members use their existing account. If you sign up at the Academy only, we collect your name, email address, password (stored only in hashed form), country, organization or school (optional), whether you want to take or teach courses, and your short reason for joining, so an Academy administrator can review your application.
- Learning activity: the courses you enrol in, the lessons you complete, your answers, scores and number of attempts in knowledge checks, completion dates, the code of any certificate you earn, the cohort (group) you study with if any, and any course rating or review you write.
- Sign-in and security: one-time sign-in codes, password-reset links, "keep me signed in" tokens, and the date you last signed in. Codes and links are stored in scrambled form and expire automatically.
- Newsletter: your email address, the page you signed up on, the date and the internet (IP) address used, as a record of your consent.
- Contact form: your name, email address, message, your consent and the IP address used, so we can reply and prevent abuse.
- Accessibility and language settings: your display preferences are stored only in your own browser and are never sent to us or used for profiling or advertising.
- Resource downloads: we count how often each resource is downloaded. These counts do not identify you.
Who is responsible for your data
The Inclusive Education Hub for Africa, coordinated by the Regional Hub Africa secretariat in Nairobi, Kenya, is the data controller for the information described on this page, and processes it in line with the Kenya Data Protection Act, 2019. You can reach us at info@iehubforafrica.org for any privacy question or request.
Our legal basis for processing
- Membership and the forum: processing is necessary to provide the membership service you applied for, and you agree to it when you register.
- E-Learning Academy: processing is necessary to provide the courses you signed up or enrolled for, track your progress and issue your certificates.
- Security, moderation and safeguarding: our legitimate interest in keeping the platform safe, free of spam and abuse, and well moderated.
- Newsletter and contact form: your consent, which you can withdraw at any time (every newsletter has an unsubscribe link).
- Sensitive information you choose to share: your explicit consent, given when you choose to publish it (see below).
Sensitive personal data, including disability
We never ask you to tell us about your health, disability, ethnicity, religion or other sensitive personal data, and you do not have to share it to join. Because this is a disability-inclusion community, some members choose to mention their own disability or experience in their profile, posts or messages. If you do, you are choosing to make that information visible to other members, and we process it only to show it where you posted it. You can edit or delete it at any time. Please do not share sensitive information about other people, especially children, without their consent; our safeguarding policy applies to stories and images.
How we use it
We use the information we collect to review membership and E-Learning Academy applications, provide the forum and its notifications, run courses, record your progress and issue certificates, secure accounts, moderate content, reply to enquiries, and send the newsletter to people who asked for it. Applications are read and decided by a person, a moderator; we do not make automated decisions or build profiles about you. We do not sell or rent personal data to anyone.
Who can see your learning activity
- The instructor of a course can see who is enrolled, each learner's progress and knowledge check scores in that course, so they can support learners.
- A cohort manager can see the progress of learners in the cohort (group) they manage, for example a class of teachers enrolled by their organization.
- Academy administrators can see all learner accounts and progress, to approve applications, manage courses and help with problems.
- Course reviews are public: your name, country, profile photo (if you added one), rating and comment are shown on the course page. You can delete your review at any time.
- Certificates show your name, the course and the completion date. If someone (for example an employer) asks us to confirm a certificate code, we will confirm whether it is genuine and the details on it.
We may use summary figures, such as how many people enrolled in or completed a course, in reports to partners and funders. These figures do not identify you.
Third parties we work with
A small number of specialist providers process data on our behalf so the platform can work: our web hosting provider (which also sends our emails), Cloudflare Turnstile for spam and bot protection, GTranslate for the optional on-page language switcher, and CookieYes for cookie consent. We only share what each provider needs to do its job, and we do not permit them to use your data for their own purposes. Some of these providers operate outside Kenya; where your data is processed abroad, we rely on safeguards required by the Kenya Data Protection Act, 2019, such as the provider's contractual data protection commitments.
Cookies
We use a session cookie to keep you signed in while you browse, an optional "keep me signed in" cookie that lasts 30 days, and a cookie that remembers your cookie choices. We do not use advertising cookies. See our cookie policy for the full list.
Children's data
This platform, including the E-Learning Academy, is intended for adult practitioners, policymakers and advocates, and is not designed for children. Where members share stories or images that include children, our safeguarding policy sets out the consent and protection standards that apply.
How long we keep it
- Member accounts and profiles: for as long as your account is open. Ask us to close it and we will delete your personal details.
- Forum posts: while your account is open, or until you or a moderator delete them.
- Learning records: your enrolments, progress, scores and reviews are kept for as long as your account is open, so you can return to your courses and certificates. Ask us to close your account and we will delete them. After that we can no longer confirm your certificates, so keep a copy of any you need.
- Applications that are not approved: kept as a closed record so we can answer questions about the decision. Ask us and we will delete it.
- Sign-in codes and links: sign-in codes expire after 10 minutes and password-reset links after 1 hour; "keep me signed in" lasts 30 days; signed-in sessions end after 2 hours of inactivity or 12 hours at most.
- Newsletter: until you unsubscribe. We keep a record of the unsubscription so we don't email you again.
- Contact form enquiries: for as long as needed to deal with your enquiry. Ask us and we will delete it.
Your rights
Under the Kenya Data Protection Act, 2019, and similar laws elsewhere, you have the right to be told how your data is used, to access the personal data we hold about you, to have it corrected or deleted, to object to or restrict certain processing, to receive a copy of it, and to withdraw consent you gave earlier. You can update most of your details yourself from your profile. To exercise any right, email info@iehubforafrica.org or use the contact form. If you are unhappy with our response, you can complain to the Office of the Data Protection Commissioner in Kenya (odpc.go.ke) or the data protection authority where you live.
Changes to this policy
We will update this page if what we collect or how we use it changes, and note the date below. This policy was last reviewed on 16 October 2026, when we added the E-Learning Academy.