1. Who We Are
SITRAC Training Institute ("SITRAC", "we", "us", or "our") is a training and management consultancy registered in Kenya. Our registered office is located in Nairobi, Kenya. We operate the website www.sitractraininginstitute.co.ke (the "Site") and provide professional training programmes, capacity-building services, and institutional consultancy across East Africa and beyond.
This Privacy Policy explains what personal data we collect, how we use it, and what rights you have regarding your personal information, in compliance with the Kenya Data Protection Act, 2019 (and its subsequent regulations) as well as applicable international best practices.
2. Information We Collect
We collect personal information in the following ways:
- Contact form submissions: When you fill in our contact form, we collect your name, email address, organisation (if provided), and the content of your message.
- Event registrations: When you register for a training programme or event via an external registration link, the data collected is governed by the privacy policy of that registration platform. SITRAC may receive your name, email, and organisation for the purpose of event administration.
- Enquiry emails: If you email us directly, we retain the content of that correspondence and your contact details for the purpose of responding to your enquiry.
- Cookies and analytics: Our Site may use essential cookies required for it to function correctly and, where you consent, analytics cookies to help us understand how visitors use the Site (see Section 5 below).
- Automatically collected data: When you visit our Site, our hosting infrastructure may automatically log your IP address, browser type, referring URL, and pages visited. This information is used solely for security and diagnostic purposes.
We do not collect sensitive personal data (e.g. financial account details, health information) through this website.
3. How We Use Your Information
We use the personal data we collect for the following purposes:
- To respond to enquiries and provide information about our programmes and services.
- To administer training enrolments, issue certificates, and communicate logistical details.
- To improve the content and usability of our website.
- To comply with legal and regulatory obligations applicable to our operations in Kenya.
- To send you information about upcoming programmes, events, or publications — only where you have expressly opted in or where a legitimate interest exists under applicable law.
We will not use your personal data for automated decision-making or profiling that significantly affects you.
4. Lawful Basis for Processing
Under the Kenya Data Protection Act 2019, we process your personal data on the following lawful bases:
- Consent: Where you have given explicit consent (e.g. opting in to our mailing list).
- Legitimate interests: Where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights (e.g. responding to a direct enquiry you initiated).
- Contractual necessity: Where processing is necessary to fulfil a training contract or service agreement with you or your organisation.
- Legal obligation: Where processing is required to comply with applicable law.
5. Cookies
Our Site uses cookies — small text files stored on your device. We use the following categories:
- Strictly necessary cookies: Required for the Site to function (e.g. session management, security tokens). These cannot be disabled.
- Analytics cookies: Help us understand how visitors interact with the Site (e.g. pages most visited, referral sources). We only enable these where you have provided consent via our cookie notice. No personally identifiable information is shared with analytics providers.
You can control cookie settings through your browser. Disabling analytics cookies will not affect your ability to use the Site.
6. Data Sharing and Third Parties
We do not sell or rent your personal data to third parties. We may share your data with:
- Service providers: Trusted technology partners who help us operate our website and deliver our services (e.g. cloud hosting providers, email service providers). These providers are contractually bound to process data only on our instructions and in compliance with applicable data protection law.
- Regulatory authorities: Where required by law, court order, or regulatory requirement within Kenya or applicable international law.
- Partner organisations: Where you register for a joint programme delivered in partnership with another institution, we may share your details with that institution solely for programme administration purposes, and we will inform you of this at the point of registration.
7. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected:
- Contact form enquiries: up to 2 years from the date of last interaction.
- Training enrolment records: up to 7 years, to comply with financial and audit requirements.
- Certificates issued: retained permanently as records of professional development.
After the applicable retention period, data is securely deleted or anonymised.
8. Your Rights
Under the Kenya Data Protection Act 2019, you have the right to:
- Request access to the personal data we hold about you.
- Request correction of inaccurate or incomplete data.
- Request deletion of your personal data (subject to legal retention obligations).
- Object to or restrict certain processing activities.
- Withdraw consent at any time (where processing is based on consent).
- Lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya.
To exercise any of these rights, please contact us at info@sitractraininginstitute.co.ke. We will respond within 30 days of receiving your request.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, or destruction. These include SSL/TLS encryption on data in transit, access controls limiting who within SITRAC can access personal data, and regular security reviews of our systems. However, no internet transmission is completely secure, and we encourage you to use secure connections when communicating with us.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page will always reflect the most recent revision. We encourage you to review this policy periodically.
11. Contact Us
If you have any questions about this Privacy Policy or our data handling practices, please contact:
SITRAC Training Institute
Nairobi, Kenya
Email: info@sitractraininginstitute.co.ke