Privacy Policy

Who we are

Engaging Industrial Learning Activities (EILA) is a practical training programme operated at Avon Business and Industrial Park, Along Enterprise Road, Industrial Area, Nairobi, Kenya. We are the data controller for the information described here, within the meaning of the Kenya Data Protection Act, 2019.

What we collect

When someone registers for a programme we collect:

• The learner: surname, first name, other names, age or date of birth, gender, area of residence, and where relevant the school and class.
• The parent or guardian: name, relationship, phone numbers and email address. Required for any learner under 18.
• Emergency contact details.
• Health information: medical conditions, allergies, disabilities, special needs and current medication.
• Consents you give or withhold, with the date and time.
• Payment information: the M-Pesa phone number used and the transaction reference. We never see or store your M-Pesa PIN, and we do not store card numbers.

Health data, and why we ask

Health information is sensitive personal data and we treat it that way. We ask for it because learners in our workshops handle tools, heat, dust and machinery, and an instructor who does not know about an allergy or a condition cannot keep that learner safe.

It is encrypted at rest, visible only to staff whose role requires it — the instructor teaching that learner, and administrators — and every access is logged. It never appears on any public page, in any gallery, or on a certificate.

Photographs and video

We ask separately for permission to photograph or record a learner. You may say no, and it changes nothing about the training they receive.

A photograph is only published if every learner identifiable in it has media consent on record. This is enforced by the system itself, not by someone remembering. You can withdraw media consent at any time and we will remove the images.

What we use it for

• Registering learners and allocating them to classes
• Contacting parents and guardians about sessions, safety and attendance
• Issuing invoices, receipts and admission numbers
• Keeping attendance, assessment and certification records
• Responding to an accident or a medical emergency
• Internal monitoring and reporting

We do not sell personal data, and we do not use it for advertising.

Who we share it with

Only where necessary: Safaricom for M-Pesa payment processing, our email and SMS providers to deliver messages you expect, and medical personnel in an emergency. Where a school or a sponsor has enrolled a learner, we share attendance and progress with that school or sponsor, and nothing more.

How long we keep it

Training and certification records are kept for seven years, so a former learner can have a certificate verified or replaced. Health information is deleted twelve months after a learner last attended. Enquiries that do not become registrations are deleted after twelve months.

Your rights

Under the Data Protection Act, 2019 you may ask us to:

• Tell you what personal data we hold about you or your child
• Give you a copy of it
• Correct anything that is wrong
• Delete it, where we are not required to keep it
• Withdraw a consent you previously gave
• Object to a particular use of it

Write to skillsateila@gmail.com and we will respond within thirty days. If you are not satisfied, you may complain to the Office of the Data Protection Commissioner.

Children

Most of our learners are under 18. We collect their data on the basis of consent given by a parent or guardian, which we record with a timestamp. A parent or guardian can review, correct or withdraw that consent at any time.

Contact

Questions about this policy: skillsateila@gmail.com or 0140 600 0000.