Privacy Policy

Introduction

The contents of this privacy policy hae multiple sections, which include:

• What this Privacy Policy covers
• Our data and commitments
• What Personal Data we collect
• How we use your Personal Data
• How we protect your Personal Data
• What are your rights
• Amendments to this policy

‍

WHAT THIS PRIVACY POLICY COVERS

This privacy policy provides an overview of our privacy practices and tells you:

• What Personal Data we collect when you use our services, either via website (https://exambanq.vercel.app/) or via any related software or mobile application;
• How we may use and protect your Personal Data.

Please, note that “Personal Data” means any information relating to an identified or identifiable natural person; an “identifiable natural person” is one who can be identified, either directly or indirectly, in particular by means of a name, an identification number, a location data, etc.

‍

OUR DATA AND COMMITMENTS

We are ExamBanQ and we are the “DataController” of your Personal Data. “Data Controller” means that we are the organisation that directs the reason why your Personal Data is processed in the first place and that first receives your Personal Data and is responsible for it.

As Data Controller, we are strongly committed to fully comply with the data protection regulations and,therefore:

• We have configured our services so that the processing of your Personal Data is kept to the minimum necessary;
• We have adopted safeguards and technical measures in order to protect your privacy rights;
• We ensure that, by default, only Personal Data which is necessary for each specific purpose will be processed.

‍

WHAT PERSONAL DATA WE COLLECT

When you access or use our ExamBanQ platform (either via our website https://exambanq.vercel.app/ or via any related software or mobile application), we may collect the following Personal Data.

- Information that you voluntarily provide us.

You may, through various means (e.g., e-mail, website contact form, sign-on through our services, etc.), voluntarily provide us your Personal Data. In particular, the said Personal Data may include:

• Contact Data that you provide us in case you send us a contact request (such as, name, e-mail, etc.);
• Account Data that you provide us when you register an account for the use of our services (such as: email address);

- We may also collect the following Personal Data:

• Technical Data that we automatically collect when you use our services {Google Analytics}, such as: (i) information on how you use our services (e.g., your visits and use of the ExamBanQ platform, your interaction with content thereof, your user status, etc.) (ii) information about Your IP address, proxy server, operating system, web browser and add-ons, device identifier and features, number of sessions, language and location.
• Cookies and similar technologies: We may collect Personal Data using cookies and similar technologies to allow us to recognize you and to provide you with a better user experience.

‍

HOW WE USE YOUR PERSONAL DATA

Your Personal Data Above will be processed by us for at least one of the following purposes:

• to carry out our obligations arising from a contract entered into between you and us
• to provide you with the services that you requested from us (e.g., create and manage your account, provide access to our ExamBanQ platform, provide custom, personalized content and information, etc.)
• to communicate with you for informational and operational purposes (e.g., mentor allocation, program planning, account verification, account management, customer service, system maintenance, etc.), including by periodically emailing you services-related announcements
• to give you access to our support and customer care services and to enable you to communicate with our team
• to carry on analysis, as well as to report, measure and evaluate our services’ operation, usability, effectiveness, features and performance (e.g., monitor metrics such as total number of visitors, traffic, usage, diagnose or fix technology problems, etc.)
• to ensure compliance with any applicable law of the state, our terms and conditions, and our Privacy Policy

WHAT ARE THE LEGAL BASIS OF OUR PROCESSING

Our processing of your Personal Data has the following legal basis:

• the processing is necessary for the performance of a contract (such as, when you provide access to our services)
• the processing is carried out with your consent (such as, when you subscribe our newsletter)
• the processing is based on a legitimate interest pursued by us (such as, when we use the Personal Data To evaluate and report our services’ operation)
• the processing is necessary for the establishment, exercise or defence of legal claims (such as, when we are asked by an authority to disclose your Personal Data).

VOLUNTARY NATURE OF THE PROCESSING

The provision of your Personal Data for the above-mentioned purposes is voluntary and not mandatory. However, any refusal to provide any of such data may not allow us to provide our services or to fulfill your requests.

YOUR RIGHTS REGARDING YOUR PERSONAL DATA

General Data Protection Regulation (GDPR) grants you several rights, whose exercise can be requested by sending us an e-mail to our Contact Details or by post. Any access request is always replied within one (1) month.

Here you are your rights:

• Right of access. You Are entitled to receive confirmation as to whether your Personal Data is being processed or not and, where that is the case, access and receive a full copy of such Personal Data in an intelligible form, as well as any related information (such as, the purposes of the processing, the recipients of the Personal Data, the source of Personal Data, etc.).
• Right to withdraw consent. You are entitled to withdraw, at any time, your consent to the processing of your Personal Data.
• Right to rectification, erasure and restriction. You are entitled to obtain from us the rectification of your Personal Data that is inaccurate or incomplete, as well as the erasure thereof and the restriction of processing in case the latter is not lawful.
• Right to data portability. You have the right to receive your Personal Data in a structured, commonly used and machine-readable format, as well as the right to transmit those data to another controller, where technically possible.
• Right not to be subject to an automated decision. We may use automated decision-making only if it is authorized by the applicable law and if you have provided us with an explicit consent or if it is necessary for the performance of a contract. In any case, you can always request us a manual decision-making process instead.
• Right to lodge a complaint. You have the right to lodge a complaint before the Supervisory Authority, if you believe that the processing of your Personal Data is against the GDPR. Such relevant Supervisory Authority is the Office of Data Protection Commission (ODPC) Kenya, email info@odpc.go.ke

AMENDMENTS TO THIS POLICY

This Privacy Policy came into force on the “Effective Date” specified.

We may amend or to update its content following changes in the legal and regulatory obligations regarding data protection. In this case, we will inform you about such amendments and updates through their publication on our website as soon as they are adopted, and they will be binding from the moment of their publication.

Therefore, we invite you to visit this page of our website regularly, in order to be aware of the most recent and updated version thereof, so that you are always updated on the processing activities that we carry out.