Last updated: 12 October 2026

Your right to information. You have the right to know what personal data we collect, why we collect it, who can see it, how long we keep it, and how to ask for a copy, a correction or deletion. This page explains each of these in plain language. If anything is unclear, write to admin@itls.ne.ke and we will explain it.

1. Who we are

Interactive Testing and Learning Solutions (ITLS) is an independent online learning and testing platform for learners in Kenya and East Africa. For the purposes of the Data Protection Act, 2019 of Kenya, ITLS is the data controller of the personal data described on this page. You can contact us at admin@itls.ne.ke.

2. What we collect and why

  • Account details: name, email address, phone number, username and password. Your password is stored in a protected form and we cannot read it. We use these details to create and manage your account.
  • Membership and payment records: the plan you chose, order and subscription dates, amount and payment reference. We do not see or store your card details or M-Pesa PIN, because payments are handled by our payment providers. We use these records to give you access, send renewal reminders, issue receipts and keep accounts.
  • Learning activity: courses and lessons opened, quizzes and exams taken, scores and progress. We use this to show your progress and results.
  • Messages you send us: what you write in the contact form or in an email. We use it to reply to you.
  • Technical data: IP address, browser and device type, pages visited and cookies needed to log in and check out. We use it to keep the site secure and working.

3. Why we are allowed to use your data

We use your data to carry out our agreement with you (providing your membership), because you gave consent (for example when you send us a message), to meet legal duties (such as accounting records), and for our legitimate interests in keeping the platform secure and working well.

4. Who we share it with

We share data only with people who help us run the service: payment providers (such as Pesapal and PayPal), email delivery services, and website hosting, security and backup providers. We may also share data where the law requires it. We do not sell your personal data and we do not use it for third-party advertising. Some providers may process data outside Kenya. We only use providers that protect personal data as the law requires.

5. Learners under 18

Many ITLS learners are children. An account for a learner under 18 should be created or approved by a parent or guardian. We collect only the information we need, we do not send marketing to children, and we process children’s data with the consent of a parent or guardian as the law requires. Parents and guardians can ask to see, correct or delete their child’s data at any time.

6. How long we keep your data

We keep account and learning data while your account is active and for a reasonable time afterwards so we can answer questions. We keep payment and order records for as long as accounting and tax rules in Kenya require. After that we delete the data or remove anything that identifies you.

7. Your rights

Under the Data Protection Act, 2019 you have the right to:

  • be told how your personal data is being used (the right to be informed);
  • ask for a copy of the personal data we hold about you (access);
  • ask us to correct data that is wrong or incomplete (correction);
  • ask us to delete data we no longer need or should not hold (erasure);
  • object to the use of your data, including for direct marketing;
  • ask for your data in a common format you can take elsewhere (portability) where it applies; and
  • withdraw your consent at any time, without affecting what we did before you withdrew it.

To use any of these rights, email admin@itls.ne.ke. We may ask you to confirm who you are before we share or change data. We will respond without undue delay and within the time set by Kenyan law, and we will not charge you unless the law allows it. If you are not happy with our answer, you can complain to the Office of the Data Protection Commissioner of Kenya (www.odpc.go.ke).

8. What we promise to tell you

  • Before you pay, we will show you the price, how long your access lasts, and how renewal works.
  • If we change this policy in a way that matters, we will update the date at the top and tell members where we can.
  • If a data breach is likely to harm you, we will tell you and the Data Protection Commissioner as the law requires.
  • If you ask how your data is used, we will answer in plain language.

9. Security

We use secure connections (HTTPS), access controls and regular backups. No system is completely secure, so please choose a strong password, keep it private and log out on shared devices.

10. Cookies

We use cookies that are needed to log you in, remember your cart and complete checkout. If we add analytics or other optional cookies, we will update this page and ask for your consent where the law requires it.

11. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.

12. Contact us

Questions or requests about your data: admin@itls.ne.ke. See also our Terms and Conditions.