Epic Academy Kenya collects, uses, discloses and protects personal information in compliance with the Kenya Data Protection Act, 2019 and the Office of the Data Protection Commissioner (ODPC). We do not sell personal data. Data subject rights, including access, rectification, erasure, objection and portability, can be exercised by emailing info@epicacademy.ke. Effective June 2026.
Nairobi,KenyaHow we collect, use, and protect your personal information in compliance with the Kenya Data Protection Act, 2019.
At Epic Academy, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and purchase or access our courses. This policy complies with the Constitution of Kenya and the Kenya Data Protection Act, 2019.
We collect personal data that you voluntarily provide to us when you register on our platform, express an interest in obtaining information about us or our products, or otherwise contact us.
Identity Data:
First name, last name, and account username.
Contact Data:
Email address, billing address, and phone number(s).
Financial Data:
Payment details necessary to process your purchases. Note: We do not store full credit card numbers; these are handled securely by our payment processors.
Technical & Usage Data:
IP address, browser type, device information, and data about how you interact with our courses (e.g., video progression, quiz scores).
Under the Data Protection Act, 2019, we must have a lawful basis to process your personal data. We process your data under the following bases:
Performance of a Contract:
To create your account, process payments, and deliver the educational content you purchased.
Consent:
When you opt-in to receive our marketing newsletters or promotional offers. You can withdraw this consent at any time.
Legitimate Interests:
To analyze website usage, improve our course offerings, and ensure the security of our platform against fraud or piracy.
Legal Obligation:
To comply with Kenyan tax laws, accounting standards, or lawful requests from regulatory authorities.
We do not sell, rent, or trade your personal data. We may share your information only in the following specific situations:
Service Providers (Data Processors):
We share data with trusted third-party vendors that assist us in operating our platform, including payment gateways, email delivery services, and cloud hosting providers. These processors are contractually bound to keep your data secure.
Legal Compliance:
If required by law, subpoena, or other legal processes, we may disclose your information to law enforcement or regulatory bodies in Kenya.
We implement appropriate technical and organizational security measures designed to protect the security of any personal information we process. This includes encryption, secure socket layer (SSL) technology, and restricted access to data by our staff.
Please remember: No electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure.
We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by Kenyan law (such as tax or accounting requirements). Once your data is no longer necessary, we will securely delete or anonymize it.
As a resident of Kenya, the Data Protection Act, 2019 grants you specific rights regarding your personal data. You have the right to:
To exercise any of these rights, please contact us via info@epicacademy.ke. We will respond to your request within the statutory timeframe mandated by the ODPC.
Our servers or third-party service providers may be located outside of Kenya. In such cases, we ensure that your personal data receives an adequate level of protection, and we comply with the ODPC's regulations regarding the transfer of personal data outside Kenya.
We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. The updated version will be indicated by an updated "Effective Date." We encourage you to review this policy frequently.
If you have questions or comments about this policy, or wish to exercise your data rights, you may contact us at info@epicacademy.ke.
If you believe we are unlawfully processing your personal data, you also have the right to complain directly to the Office of the Data Protection Commissioner (ODPC) in Kenya.
Effective Date: June 2026
Explore our courses and take the first step toward building valuable technology skills.
Epic Academy Kenya collects Identity Data (first name, last name, username), Contact Data (email, billing address, phone), Financial Data (payment details processed by secure third-party gateways, we do not store full card numbers) and Technical & Usage Data (IP address, browser, device info, course interaction data).
Yes. Epic Academy Kenya's Privacy Policy is written to comply with the Constitution of Kenya and the Kenya Data Protection Act, 2019, and follows the guidance of the Office of the Data Protection Commissioner (ODPC).
No. Epic Academy Kenya does not sell, rent or trade your personal data. Data is shared only with trusted service providers (payment gateways, email delivery, cloud hosting) who are contractually bound to keep it secure, or when legally required by Kenyan law.
Epic Academy Kenya implements technical and organizational security measures including encryption, SSL/TLS, and restricted internal access to personal data. While no system is 100% secure, we follow industry best practices.
Under the Kenya Data Protection Act, 2019, you have the right to be informed, access your data, request rectification, request erasure (right to be forgotten), object to processing, and request data portability. To exercise these rights, email info@epicacademy.ke.
Epic Academy Kenya retains personal data only as long as necessary for the purposes described in the Privacy Policy, or as required by Kenyan law (including tax and accounting requirements). Data is then securely deleted or anonymized.
Some servers or third-party service providers may be located outside Kenya. In such cases, Epic Academy Kenya ensures an adequate level of protection and complies with ODPC regulations governing cross-border transfers of personal data.
Email info@epicacademy.ke to ask questions, exercise your data rights, or file a complaint. You may also complain directly to the Office of the Data Protection Commissioner (ODPC) in Kenya if you believe your data is being unlawfully processed.
Epic Academy Kenya processes personal data under four lawful bases defined by the Kenya Data Protection Act, 2019: (1) performance of a contract: to create your account, process payments and deliver content; (2) consent: for marketing newsletters, which you can withdraw at any time; (3) legitimate interests: analytics, improving course offerings and preventing fraud; and (4) legal obligation: complying with Kenyan tax, accounting and regulatory requirements.
You can withdraw marketing consent from Epic Academy Kenya at any time by clicking the unsubscribe link in any marketing email, or by emailing info@epicacademy.ke and requesting removal from marketing communications. Transactional emails (like receipts and course updates) will still be sent as part of the service.
If you believe Epic Academy Kenya has unlawfully processed your personal data, you can first email info@epicacademy.ke so we can investigate and respond. If unresolved, you have the right to lodge a complaint directly with the Office of the Data Protection Commissioner (ODPC) in Kenya.