Privacy Policy

Oviq — Privacy Policy

Effective Date: [Insert Date]
Last Updated: [Insert Date]

1. Introduction

Welcome to Oviq ("Oviq", "we", "us", or "our").

Oviq is a cloud-based Learning Management System ("LMS") that enables organizations, institutions, educators, trainers, and learners to create, deliver, manage, and participate in online learning and training programs.

This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you use our website, LMS platform, applications, services, and related products (collectively, the "Services").

By accessing or using Oviq, you acknowledge that you have read and understood this Privacy Policy.


2. Information We Collect

Depending on how you use Oviq, we may collect the following categories of information.

2.1 Account Information

When you create an account, we may collect:

  • Full name
  • Email address
  • Telephone/mobile number
  • Username
  • Password or authentication credentials
  • Organization or institution name
  • Job title or role
  • Profile photograph, where provided
  • Account preferences

2.2 Learner Information

Where Oviq is used to provide training or education, we may process information such as:

  • Courses enrolled in
  • Course completion status
  • Assessment and examination results
  • Quiz responses
  • Assignment submissions
  • Certificates earned
  • Learning progress
  • Attendance records
  • Training history
  • Time spent on learning activities
  • Instructor feedback
  • Other information submitted as part of a learning program

2.3 Payment and Billing Information

If you purchase a paid Oviq subscription or other service, we may collect information necessary to process and manage payments, including:

  • Billing name
  • Billing address
  • Subscription information
  • Transaction details
  • Invoice information

Payment card information may be processed directly by our third-party payment providers. We may not directly store complete payment card numbers.

2.4 Information You Provide

You may voluntarily provide information when you:

  • Contact customer support
  • Submit forms
  • Request demonstrations
  • Subscribe to communications
  • Participate in surveys
  • Upload learning materials
  • Submit assignments
  • Communicate with instructors or administrators
  • Report problems or provide feedback

2.5 Automatically Collected Information

When you access Oviq, certain technical information may automatically be collected, including:

  • IP address
  • Browser type
  • Device type
  • Operating system
  • Language preferences
  • Approximate location derived from IP address
  • Login information
  • Pages and features accessed
  • Date and time of access
  • Referring website
  • Usage and interaction information
  • Error and diagnostic information

We may use cookies and similar technologies to collect some of this information.


3. How We Use Your Information

We may use personal information to:

  1. Create and manage user accounts.
  2. Provide and operate the Oviq LMS.
  3. Deliver courses, assessments, certificates, and other learning services.
  4. Track learning progress and completion.
  5. Process subscriptions and payments.
  6. Provide customer support.
  7. Communicate with users about their accounts and services.
  8. Send service-related notifications.
  9. Improve the functionality, security, and performance of Oviq.
  10. Detect and prevent fraud, abuse, unauthorized access, and security incidents.
  11. Maintain system records and backups.
  12. Comply with applicable legal and regulatory requirements.
  13. Conduct analytics and generate aggregated or anonymized reports.
  14. Develop and improve our products and services.
  15. Send marketing communications where permitted by law and, where required, with your consent.

We will not use personal information for purposes that are incompatible with the purposes for which it was collected unless permitted or required by applicable law.


4. Legal Basis for Processing

Where applicable, we process personal information on one or more of the following legal bases:

  • Performance of a contract — where processing is necessary to provide the Services you have requested.
  • Consent — where you have provided consent to a particular processing activity.
  • Legal obligation — where processing is necessary to comply with applicable laws.
  • Legitimate interests — where processing is necessary for legitimate business interests and those interests are not overridden by applicable privacy rights.
  • Protection of rights and safety — where processing is necessary to protect users, our systems, or other persons.

Where processing is based on consent, you may withdraw your consent subject to applicable legal or contractual limitations.


5. Oviq as a Data Processor

Oviq may provide LMS services to organizations, companies, schools, universities, training institutions, and other entities.

In such circumstances, the organization using Oviq may determine:

  • What personal information is collected;
  • Why the information is collected;
  • How the information is used; and
  • How long the information should be retained.

That organization may act as the data controller, while Oviq may act as a data processor or service provider processing information on the organization's behalf.

For example, an employer may use Oviq to train its employees. The employer may determine what employee information should be uploaded and what training reports should be generated.

If you are using Oviq through an organization, your privacy requests may need to be directed to that organization.


6. Information Sharing and Disclosure

We do not sell personal information to third parties.

We may share personal information with trusted third parties where necessary to provide and operate the Services, including:

Service Providers

We may use third-party providers for services such as:

  • Cloud hosting
  • Database infrastructure
  • Email delivery
  • Payment processing
  • Analytics
  • Customer support
  • Security monitoring
  • Authentication
  • Communications
  • Backup and disaster recovery

These providers may only process information as necessary to provide their services to us or as otherwise permitted by law.

Organizations Using Oviq

If you access Oviq through an organization, your organization may have access to information associated with your account and learning activities, depending on the organization's configuration and contractual arrangements with Oviq.

Legal Requirements

We may disclose information where reasonably necessary to:

  • Comply with applicable laws or legal processes;
  • Respond to lawful requests from authorities;
  • Protect our rights or property;
  • Investigate fraud or security incidents;
  • Protect the safety of users or the public; or
  • Enforce our Terms of Service.

7. International Data Transfers

Oviq may use service providers or infrastructure located outside Kenya.

Where personal information is transferred or processed outside Kenya, we will take reasonable steps to ensure that such transfers are conducted in accordance with applicable data protection laws and that appropriate safeguards are implemented.


8. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including:

  • Providing the Services;
  • Maintaining business and financial records;
  • Meeting contractual obligations;
  • Resolving disputes;
  • Preventing fraud and abuse;
  • Maintaining security and backups; and
  • Complying with legal obligations.

When personal information is no longer required, we may delete, anonymize, or securely dispose of it in accordance with our retention procedures.

Where Oviq processes information on behalf of an organization, the applicable organization may determine the appropriate retention period.


9. Cookies and Similar Technologies

Oviq may use cookies and similar technologies to:

  • Keep users signed in;
  • Remember preferences;
  • Maintain session security;
  • Understand how users interact with the platform;
  • Improve platform performance;
  • Analyze usage;
  • Support marketing activities where applicable.

You can configure your browser to reject or delete cookies. However, disabling certain cookies may affect the functionality of Oviq.


10. Analytics

We may use analytics technologies to understand how users interact with Oviq.

Analytics information may include:

  • Pages visited;
  • Features used;
  • Session duration;
  • Device information;
  • Browser information;
  • Approximate geographic information;
  • Traffic sources; and
  • Other usage information.

Where practical, we may use aggregated or anonymized information for analytics and product improvement.


11. Data Security

We take reasonable technical and organizational measures to protect personal information against:

  • Unauthorized access;
  • Unauthorized disclosure;
  • Loss;
  • Misuse;
  • Alteration;
  • Destruction; and
  • Other security threats.

Security measures may include:

  • Access controls;
  • Authentication mechanisms;
  • Encryption where appropriate;
  • Secure communications;
  • Monitoring and logging;
  • Backups;
  • Security testing; and
  • Role-based access controls.

However, no internet-based service can guarantee absolute security.

You are responsible for keeping your account credentials confidential and should notify us promptly if you suspect unauthorized access to your account.


12. Your Privacy Rights

Subject to applicable law, you may have rights concerning your personal information, including the right to:

  • Be informed about how your information is processed;
  • Request access to personal information we hold about you;
  • Request correction of inaccurate or incomplete information;
  • Request deletion of personal information where legally permitted;
  • Object to certain processing activities;
  • Request restriction of certain processing;
  • Withdraw consent where processing is based on consent;
  • Request portability of certain information where applicable; and
  • Lodge a complaint with the relevant data protection authority.

In Kenya, individuals may have rights under the Data Protection Act, 2019 and related regulations.


13. How to Exercise Your Rights

To make a privacy request, please contact our privacy team:

Email: [privacy@yourdomain.com]
Data Protection Officer: [Name/Title, if applicable]
Company: [Legal Company Name]
Address: [Physical/Postal Address]
Telephone: [Phone Number]

We may need to verify your identity before processing certain requests.

Where you use Oviq through an organization, you may also need to contact that organization directly.


14. Children's Privacy

Oviq may be used in educational environments where learners may include minors.

Where Oviq is used to provide services to children or minors, the relevant educational institution, organization, parent, guardian, or other responsible entity is responsible for ensuring that the collection and processing of children's personal information is conducted in accordance with applicable law.

We do not knowingly collect children's personal information for unrelated commercial purposes.

If you believe that a child has provided personal information to Oviq inappropriately, please contact us so that we can investigate and take appropriate action.


15. User-Generated Content

Users may upload or submit content to Oviq, including:

  • Documents;
  • Assignments;
  • Images;
  • Videos;
  • Audio;
  • Comments;
  • Quiz responses;
  • Course materials; and
  • Other educational content.

Users and organizations are responsible for ensuring that content they upload does not unlawfully disclose another person's personal information or violate applicable laws or third-party rights.


16. Communications

We may send users communications necessary to provide the Services, including:

  • Account notifications;
  • Password-reset messages;
  • Security alerts;
  • Course notifications;
  • Payment notifications;
  • System announcements; and
  • Service updates.

Where permitted by law, we may also send promotional communications.

You may unsubscribe from marketing communications using the unsubscribe mechanism provided in the communication. You may continue to receive essential service-related communications.


17. Third-Party Websites and Services

Oviq may contain links to third-party websites, applications, or services.

We are not responsible for the privacy practices, security, or content of third-party services.

We encourage you to review the privacy policies of third-party services before providing personal information to them.


18. Data Breaches and Security Incidents

If we become aware of a personal data breach that requires notification under applicable law, we will take appropriate steps to investigate, contain, and address the incident and make notifications to affected parties and/or relevant authorities where legally required.


19. Business Transfers

If Oviq or substantially all of its assets are acquired, merged, reorganized, or transferred to another entity, personal information may be transferred as part of that transaction.

Any such transfer will be handled in accordance with applicable privacy laws.


20. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

When we make material changes, we may provide notice through Oviq, our website, email, or other appropriate means.

The "Last Updated" date at the top of this Privacy Policy indicates when the policy was most recently revised.

We encourage you to review this Privacy Policy periodically.


21. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact us:

Oviq
Legal Entity: [Insert Registered Company Name]
Website: [Insert Oviq Website]
Email: [privacy@yourdomain.com]
Data Protection Contact: [Insert Name/Title]
Address: [Insert Business Address]
Telephone: [Insert Phone Number]