Privacy Policy - BridalVilla Spot Training Institute

Learn · Discover · Become

Privacy Policy — Bridalvilla Spot Training Institute (BVS)

Effective Date: [Insert Date] Last Updated: [Insert Date]

Bridalvilla Spot Training Institute (“BVS,” “we,” “us,” or “our”) is committed to protecting the privacy and personal data of our students, prospective students, website visitors, and other individuals who interact with us. This Privacy Policy explains how we collect, use, store, share, and protect your personal data in accordance with the Kenya Data Protection Act, 2019 (“the Act”) and its accompanying regulations.

By using our website (bvs.co.ke), enrolling in our courses, or otherwise interacting with us, you consent to the practices described in this Privacy Policy.

1. Who We Are

Bridalvilla Spot Training Institute (referred to as BVS in this document) is a training institute offering courses such as cosmetology, based in Westlands Business Park, along Chiromo Lane in Nairobi County, Kenya.

Data Controller contact details:

Name: Bridalvilla Spot Training Institute
Physical Address: Westlands Business Park, Along Chiromo Lane in Nairobi
Email: support@bvs.ac.ke
Phone: 0141 456 537/ 0141 456 538

2. Personal Data We Collect

We collect the following categories of personal data:

Category	Examples	When Collected
Identity & contact information	Full name, email address, phone number	Enrollment forms, contact forms, admissions inquiries
National identification	ID or passport number	Course registration and certification, as required for issuing verifiable certificates
Academic and progress records	Course enrollment, grades, assessment results, completion status	Learning Management System (Masteriyo) during course delivery
Marketing materials	Photos, videos, and testimonials	Only where you have given specific consent, e.g. for use on our website or social media
Technical/usage data	IP address, browser type, pages visited, time on site	Automatically, via Google Analytics (see Section 6)

We do not knowingly collect more personal data than is necessary for the purposes described in this Policy.

3. How We Use Your Data

We process your personal data for the following purposes:

To process course applications and manage enrollment
To deliver course content, track academic progress, and issue certificates via our LMS
To verify your identity for certification purposes using your ID/passport number
To communicate with you regarding admissions, courses, schedules, and institute updates
To showcase student success stories and institute activities in marketing materials — only where you have given explicit, separate consent
To understand website usage and improve our services, using aggregated analytics data
To comply with legal and regulatory obligations applicable to training institutions in Kenya

4. Legal Basis for Processing

Under the Kenya Data Protection Act, 2019, we rely on the following legal bases:

Consent — for marketing use of photos/testimonials, and for non-essential cookies/analytics tracking
Performance of a contract — for processing enrollment, delivering course content, and issuing certificates
Legal obligation — where we are required to retain certain records for regulatory or certification purposes
Legitimate interest — for basic website analytics used to improve our services, balanced against your privacy rights

Where we rely on your consent (e.g., marketing photos, analytics cookies), you may withdraw that consent at any time — see Section 8.

5. How We Share Your Data

We do not sell your personal data. We may share your data with:

Our Learning Management System provider (Masteriyo) — to deliver and track course content and academic records
Our website hosting provider — to operate and maintain bvs.co.ke
Google Analytics — for aggregated, anonymized website usage statistics (see Section 6)
Regulatory or certification bodies, where required for the issuance or verification of qualifications
Law enforcement or regulatory authorities, where required by Kenyan law

Any third party processing personal data on our behalf is required to implement appropriate safeguards and is contractually bound to process data only for the purposes we specify.

6. Cookies and Analytics

Our website uses Google Analytics to understand how visitors use our site (e.g., pages visited, time spent, general location by region). This helps us improve our website and course offerings.

Google Analytics may set cookies on your device and may process data outside Kenya (see Section 7 on international transfers).
You can opt out of Google Analytics tracking using your browser settings, ad-blocking extensions, or the Google Analytics Opt-out Browser Add-on.
We do not currently use social media advertising pixels (e.g., Meta Pixel). However, this may change, and this Policy will be updated accordingly.

7. International Data Transfers

Where data is processed by Google Analytics or other service providers with servers located outside Kenya, such transfers are made in accordance with Section 48 of the Data Protection Act, 2019, which permits transfers where the recipient is subject to a law, binding corporate rules, or contractual clauses that afford an adequate level of data protection substantially similar to that provided under Kenyan law.

8. Your Rights

Under the Data Protection Act, 2019, you have the right to:

Be informed of how your personal data is being used
Access the personal data we hold about you
Request correction of inaccurate or outdated personal data
Request deletion of your personal data, subject to our legal obligation to retain certain academic and certification records
Object to processing, including withdrawing consent for marketing use of your photos/testimonials or for analytics tracking, at any time
Data portability, where technically feasible
Lodge a complaint with the Office of the Data Protection Commissioner (ODPC) if you believe your data has been mishandled

To exercise any of these rights, contact us at [Insert Privacy Email].

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes outlined in this Policy:

Enrollment and academic records: retained for the duration of your studies and for a period thereafter, as required for certificate verification.
ID/passport numbers: retained only as long as needed for certification and verification purposes
Marketing photos/testimonials: retained until you withdraw consent or request removal
Analytics data: retained per Google Analytics’ standard retention settings, in anonymized/aggregated form where possible

10. Data Security

We implement reasonable technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction, including restricting access to student records and securely handling identification documents. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

11. Regulatory Compliance

BVS is committed to complying with the Data Protection Act, 2019, including registration as a data controller/processor with the Office of the Data Protection Commissioner (ODPC), where such registration is required based on our data processing activities.

12. Children’s Data

Our courses are primarily intended for adult learners. If we knowingly collect data from a minor, we will do so only with the verifiable consent of a parent or guardian, in line with the Act’s provisions on processing children’s data.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The “Last Updated” date at the top of this page will indicate when changes were made. We encourage you to review this page periodically.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or how your personal data is handled, please contact us:

Email: support@bvs.ac.ke
Phone: 0141 456 537/ 0141 456 538
Address: Westlands Business Park, Along Chiromo Lane, Behind Kempinski Hotel in Nairobi