Privacy Policy

1. Introduction

Edutrack Computer Training College ("Edutrack", "we", "us") is committed to protecting the privacy of our students, instructors, and website visitors. This policy explains how we collect, use, store, and protect your personal information in compliance with the Data Protection Act No. 3 of 2021 of Zambia.

2. Information We Collect

We collect the following categories of personal data:

• Identity data: Full name, National Registration Card (NRC) number, date of birth, profile photo.
• Contact data: Email address, phone number, postal address.
• Account data: Username, password (stored encrypted), role, login history.
• Education data: Enrolment records, course progress, quiz scores, assignments, certificates issued.
• Financial data: Payment records, transaction references, mobile money phone numbers. We do not store full card numbers.
• Technical data: IP address, browser type, device information, session cookies.

3. How We Use Your Information

• To create and manage your student or instructor account.
• To process course enrolments and payments.
• To track your learning progress and issue certificates.
• To communicate important updates, announcements, and support responses.
• To improve our courses, platform, and services.
• To comply with TEVETA reporting requirements.

4. Third-Party Services

We share limited data with the following third parties:

• Lenco: Payment processing (transaction details only).
• Google: OAuth login (email and name only, if you choose Google sign-in).
• TEVETA: Student records for accreditation compliance, as required by law.

We do not sell your personal information to any third party.

5. Data Retention

We retain your personal data for as long as your account is active, plus 5 years after your last course completion for certification verification purposes. Financial records are retained for 7 years as required by Zambian tax regulations. You may request deletion of your account at any time.

6. Your Rights

Under the Data Protection Act 2021, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data (subject to legal retention requirements).
• Object to processing of your data for marketing purposes.
• Receive your data in a portable format.

7. Security

We implement industry-standard security measures including encrypted passwords (bcrypt), CSRF protection, session management, and HTTPS encryption to protect your data. Access to personal data is restricted to authorised staff on a need-to-know basis.

8. Cookies

We use essential session cookies to keep you logged in and manage your preferences. We do not use third-party advertising cookies. Analytics cookies (if enabled) are used only to understand how visitors use our site so we can improve it.

9. Contact Us

For privacy-related enquiries or to exercise your data rights, contact us: