Privacy Policy
Last updated: January 15, 2025
At Orbit ("we", "our", or "us"), we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services at orbitke.com.
Information We Collect
Academic Information: KCSE grades, subject combinations, KCSE year, and educational preferences you provide when using our course recommendation service.
Contact Information: Phone number (for M-Pesa payments), email address (if provided), and name (optional).
Payment Information: M-Pesa transaction details including phone number, transaction IDs, and payment status. We do not store M-Pesa PINs or full payment credentials.
Usage Data: Information about how you interact with our website, including pages visited, features used, and time spent on the platform.
Device Information: IP address, browser type, device type, and operating system for security and analytics purposes.
How We Use Your Information
- Generate personalized course recommendations based on your KCSE grades
- Process payments through M-Pesa for our services
- Provide customer support and respond to inquiries
- Improve our services and develop new features
- Prevent fraud and ensure platform security
- Comply with legal obligations
Data Security
We implement industry-standard security measures to protect your personal information:
- • SSL/TLS encryption for all data transmission
- • Secure database storage with access controls
- • Regular security audits and vulnerability assessments
- • Employee training on data protection practices
- • Grade data is hashed for duplicate detection, not stored in plain text
While we strive to protect your information, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.
Data Sharing
We do not sell your personal information. We may share data with:
- • Payment Processors: Safaricom M-Pesa for payment processing
- • Service Providers: Cloud hosting (Vercel), database services (Neon), and analytics tools that help us operate our platform
- • Legal Requirements: When required by law or to protect our rights
All third-party service providers are contractually obligated to protect your information and use it only for the services they provide to us.
Your Rights
You have the right to:
- • Access: Request a copy of the personal information we hold about you
- • Correction: Request correction of inaccurate information
- • Deletion: Request deletion of your personal information
- • Portability: Receive your data in a portable format
- • Objection: Object to certain processing of your information
To exercise these rights, contact us at hello@orbitke.com.
Data Retention
We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Student profiles are retained for 2 years to allow for re-access of results. Payment records are retained for 7 years for accounting purposes. You may request deletion at any time by contacting us.
Children's Privacy
Our services are intended for KCSE students, who are typically 17-19 years old. We do not knowingly collect information from children under 13. If you are under 18, please use our services with parental or guardian consent.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on our website. Your continued use of our services after changes indicates acceptance of the updated policy.
Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us:
Email: hello@orbitke.com
WhatsApp: +254 700 000 000