Privacy Policy — Skillset Development

This policy explains what personal data Skillset Development ("we", "us") collects, why we collect it, how long we keep it and what rights you have. It applies to this website, to course bookings and enquiries, and to the training we deliver.

We process personal data in line with the Kenya Data Protection Act, 2019. Where we handle data of people in the European Economic Area or the United Kingdom, we also apply the standards of the General Data Protection Regulation (GDPR).

1. Who we are

Skillset Development is a professional training provider delivering instructor-led courses in person and online. For any question about this policy or your data, contact us at info@skillsetdevelopment.com, or write to us at Muthaiga Square, 4th Floor, Nairobi, Kenya.

2. What we collect

When you book a course

• Name and title, work email address and telephone number
• Employer, department and job title
• Country, and where relevant travel and accommodation preferences
• The name and contact details of the person approving or funding your attendance, where you give them to us
• Payment method preference, invoice details and booking reference
• What you tell us about your learning objectives or requirements

When you sign in to My bookings

We email a one-time sign-in link to the address you give, and record the address, the time and your IP address to limit misuse. We keep these records for twelve months. We never ask for a password.

When you start a booking but do not send it

The booking form saves what you type as you go, once it holds an email address or phone number. If you stop before sending it, we may contact you once to ask whether something got in the way, and to help you finish. We do not add you to any mailing list because of it.

When you contact us or subscribe

• Your name, email address and the content of your message

When you browse this website

• Standard server log data: IP address, browser type, pages requested and time of request. This is generated automatically by our hosting provider and used for security and troubleshooting.

We do not knowingly collect data from children, and our services are intended for working professionals.

3. Why we use it, and our lawful basis

Purpose	Lawful basis
Confirming and administering your booking, issuing invoices and certificates	Performance of a contract
Contacting you about the course you booked, including joining instructions and changes	Performance of a contract
Answering enquiries you send us	Legitimate interest in responding to you
Following up a booking form you started but did not send	Legitimate interest in helping you complete a booking you began
Keeping financial and tax records	Legal obligation
Sending you information about other courses	Your consent, which you may withdraw at any time
Protecting the website against abuse	Legitimate interest in security

Where the person funding your attendance asked us to enrol you, we rely on your employer's instruction and this policy still governs how we treat your data.

4. Who we share it with

We do not sell personal data, and we do not share it for advertising. We share it only where necessary:

• The person approving your booking, where you gave us their details — they receive booking confirmation and invoicing correspondence.
• Facilitators delivering your course, who receive a participant list and any requirements you told us about.
• Our hosting and email providers, who process data on our instructions.
• Venues, where a venue requires an attendance list for access or catering.
• Authorities, where we are legally required to disclose.

5. International transfers

We deliver training in several countries and use service providers that may store data outside Kenya. Where personal data is transferred across borders we take reasonable steps to ensure it remains protected to the standard described in this policy.

6. How long we keep it

• Booking and attendance records — seven years, to support certificate re-issue and meet accounting and tax record requirements.
• Enquiries that do not become bookings — two years.
• Booking forms started but not sent — twelve months.
• Newsletter subscriptions — until you unsubscribe.
• Server logs — as retained by our hosting provider, typically a short rolling period.

7. Your rights

You may ask us to: give you a copy of the data we hold about you; correct data that is wrong; delete data we no longer need; restrict or object to how we use it; or send it to another provider. You may withdraw consent to marketing at any time. To exercise any of these, email info@skillsetdevelopment.com. We respond within the timeframes set by the Kenya Data Protection Act.

If you believe we have mishandled your data you may complain to the Office of the Data Protection Commissioner in Kenya, or to your local supervisory authority.

8. Cookies

This website does not use advertising or third-party tracking cookies, and its public pages set no cookies at all: our forms are protected with a signed token in the page rather than a cookie. The booking form keeps what you have typed in your own browser's local storage, so a reload or a later visit does not lose it; it is cleared once you send the booking. Signing in to My bookings, and our staff console, set a session cookie that keeps you signed in; it is deleted when you sign out or after eight hours without use. Fonts are loaded from Google Fonts, which may record the request in its own logs. If we introduce analytics in future we will update this policy and seek consent where required.

9. Security

The site is served over HTTPS. Access to booking data is restricted to authorised staff through password-protected administrator accounts. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data and to detect and address problems.

10. Changes to this policy

We update this policy when our practices change. The date at the top shows the current version. Material changes affecting how we use your data will be communicated to affected participants by email.