Privacy Policy

Livecode Technologies Limited ("we", "us", or "our") is committed to protecting the privacy and security of your personal data. We operate as a Data Controller and Data Processor under the provisions of the Kenya Data Protection Act, 2019 (DPA), and we implement best practices aligning with the General Data Protection Regulation (GDPR) and other global frameworks.

This Privacy Policy explains how we collect, store, share, and protect your information when you visit our website, enroll in our training programs, purchase software solutions, or request technical support. By using our website and services, you consent to the practices described in this policy.

We collect personal data that you voluntarily provide to us when registering for training, requesting services, or corresponding with our teams. This includes:

• Contact Details: First name, last name, business or personal email address, primary and secondary phone numbers, physical mailing address, and country of residence.
• Academic & Career Information: Job title, organizational affiliation, department, training goals, and documents submitted during trainer applications.
• Transactional Information: Payment details (bank transfers, transaction codes, and billing information). Note: Card numbers, PINs, and M-Pesa credentials are processed securely via encrypted, authorized gateways (Paystack, Safaricom M-Pesa API) and are never stored on our servers.
• Technical and Usage Data: IP address, browser type and version, operating system, pages visited, time spent, and referral paths collected via automated web diagnostics.

We process your personal data under the following legal bases and purposes:

• Contractual Obligation: To manage training bookings, deliver course material, coordinate with instructors, process payments, and issue completion certificates.
• Consent: To send newsletter updates, marketing communications, and promotional opportunities (which you can withdraw at any time via standard opt-out links).
• Legitimate Interests: To monitor platform performance, mitigate security threats, prevent unauthorized access to administrative features, and troubleshoot technical failures.
• Legal Compliance: To comply with financial bookkeeping rules, tax obligations, and statutory requirements enforced by regulatory bodies in Kenya.

Your security is of paramount importance to us. We implement standard network security controls including:

• Encryption of all sensitive data in transit via Transport Layer Security (TLS/HTTPS).
• Enforcement of strict size limits, magic-byte checks, and malware validation on all user file uploads to prevent payload injection.
• Centralized role-based access controls (RBAC) preventing unauthorized backend requests or cross-tenant data exposure.

Cross-Border Data Transfers: Since we serve clients across Africa (Uganda, Tanzania, Malawi, Rwanda), personal data may be stored on secure cloud databases located outside Kenya. In such cases, we ensure that the destination country provides equivalent data protection safeguards as required under Section 48 of the Kenya Data Protection Act.

Under Section 26 of the Kenya Data Protection Act, 2019, you hold the following rights:

• Right to Object: The right to object to the processing of your personal data for direct marketing or profiling.
• Right of Access: The right to request copies of your personal data held by us.
• Right to Rectification: The right to request correction of inaccurate, misleading, or incomplete data.
• Right to Erasure ("Right to be Forgotten"): The right to request deletion of your personal data where there is no legal basis to continue holding it.
• Right to Portability: The right to receive your personal data in a structured, commonly used machine-readable format.

If you have questions about this Privacy Policy, wish to exercise any of your data rights, or want to raise a concern regarding how your information is handled, please contact our Data Protection Officer: