Privacy Policy

Last Updated: 15 September 2026

1. Introduction

Welcome to Profesa Hub ("we," "our," or "us"). Profesa Hub is the trading name of Proficient Learning Hub (Business Registration No. BN-EOSBJLJZ), a business duly registered in the Republic of Kenya.

We are committed to protecting your privacy and ensuring the security of your personal information in accordance with the Kenya Data Protection Act, 2019 (No. 24 of 2019) and its regulations. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

By using Profesa Hub, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Personal Information

We collect information that you provide directly to us, including:

  • Name and email address (when you create an account)
  • Phone number (for M-Pesa payment processing and account verification)
  • Payment information (processed securely through M-Pesa — we do not store your M-Pesa PIN or full payment credentials)
  • Communication preferences
  • Any information you provide when contacting us

2.2 Automatically Collected Information

When you access our website, we automatically collect:

  • IP address and browser type
  • Device information
  • Pages visited and time spent on our site
  • Download history and usage patterns
  • Cookies and similar tracking technologies

3. How We Use Your Information

We use the collected information for the following purposes:

  • To provide, maintain, and improve our services
  • To process your transactions and send you related information
  • To send you technical notices, updates, and support messages
  • To respond to your comments and questions
  • To send you newsletters and marketing communications (with your consent)
  • To monitor and analyze trends, usage, and activities
  • To detect, prevent, and address technical issues and fraudulent activities
  • To comply with legal obligations under Kenyan law

4. Information Sharing and Disclosure

4.1 We Do Not Sell Your Information

We do not sell, trade, or rent your personal information to third parties.

4.2 Service Providers

We may share your information with third-party service providers who perform services on our behalf, including:

  • Payment processing (M-Pesa Till Number 1724792)
  • Email delivery services
  • Website hosting and maintenance
  • Analytics providers

All service providers are contractually required to protect your data and use it only for the purposes we specify.

4.3 Legal Requirements

We may disclose your information if required by law or in response to valid requests by public authorities, including the Office of the Data Protection Commissioner (ODPC), the Kenya Revenue Authority (KRA), or a court of law.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

  • Encrypted data transmission (SSL/TLS)
  • Secure payment processing through M-Pesa
  • Regular security assessments
  • Access controls and authentication

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

6. Your Rights Under the Kenya Data Protection Act

Under the Kenya Data Protection Act, 2019, you have the following rights regarding your personal information:

  • Access: Request access to your personal information and obtain a copy
  • Correction: Request correction of inaccurate, incomplete, or misleading information
  • Deletion: Request deletion of your personal information where we no longer have a lawful basis to hold it
  • Objection: Object to processing of your personal information
  • Restriction: Request restriction of processing your personal information
  • Data Portability: Request a copy of your data in a structured, commonly used, portable format
  • Withdraw Consent: Withdraw consent at any time where processing is based on consent
  • Opt-out: Unsubscribe from marketing communications at any time
  • Complain: Lodge a complaint with the Office of the Data Protection Commissioner (ODPC)

To exercise any of these rights, please contact us at admin@profesahub.co.ke. We will respond to your request within the statutory timeframe of 30 days.

7. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our website and store certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our service.

We use the following categories of cookies: essential (required for the site to function), functional (remember your preferences), and analytics (help us understand how the site is used).

8. Children's Privacy

Our services are not intended for children under the age of 18 without parental or guardian supervision. We do not knowingly collect personal information from children under 18 without appropriate consent. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

9. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.

For tax and legal compliance reasons under Kenyan law, we may retain transaction records for up to 7 years. When we no longer need your information, we will securely delete or anonymize it.

10. International Data Transfers

Your information may be transferred to and maintained on servers located outside of Kenya where our service providers operate (such as cloud hosting and analytics providers). We ensure that any such transfer is done only in accordance with the Kenya Data Protection Act and with appropriate safeguards in place.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

13. Supervisory Authority

If you are not satisfied with our response to a data protection concern, you have the right to lodge a complaint with:

Return to Home