Privacy Policy

Data controller

Shada Academy is a product of Shada Health, the digital arm of Azora Health (the “Controller”). For privacy questions, contact privacy@shada.health.

Data we collect

• Identification: name, phone number, email address
• Affiliation: school, county, organisation
• Learning data: module progress, lesson completion, certification status
• Technical: device type, language preference, session timestamps

Purpose of processing

We process this data to deliver training, issue certifications, track learner progress, send safeguarding-related communications, and operate the platform.

Legal basis

Consent under Section 32 of the Kenya Data Protection Act, 2019 (KDPA). You may withdraw consent at any time by contacting the address above; withdrawal does not affect the lawfulness of prior processing.

Retention

Active accounts: data retained for the duration of the account. Closed accounts: retained for one (1) year after closure, then deleted or anonymised.

Your rights

Under the KDPA you have the right to access, correct, delete, port, and object to the processing of your personal data. To exercise these rights, email the address above. You may also lodge a complaint with the Office of the Data Protection Commissioner (ODPC) at odpc.go.ke.

ODPC registration

ODPC registration: pending — to be completed before first paying tenant launches.