Privacy Policy for Tusua Academy

Effective Date: June 17, 2026
Governing Law: United Republic of Tanzania (PDPA, 2022)

At Tusua Academy, we are dedicated to safeguarding your privacy in compliance with the Tanzania Personal Data Protection Act, 2022 (Act No. 11 of 2022). This Privacy Policy outlines how we collect, process, store, and protect the personal data of our students and platform users.

1. Information We Collect

We collect and process personal data lawfully, fairly, and transparently.

  • Account Data: Full name, email address, phone number, and physical/postal address.
  • Financial Data: Mobile money transaction details (e.g., M-Pesa, Tigo Pesa, Airtel Money) or bank card details used to process course fees.
  • Academic Progression: Course enrollment, progress tracking, quiz scores, and certificates issued.

2. Legal Basis and Purpose of Processing

In line with Section 5 of the PDPA, Tusua Academy processes your data solely for explicit and legitimate purposes:

  • To fulfill our contract with you (delivering purchased courses and tracking learning).
  • To communicate administrative changes, updates, or technical alerts.
  • To comply with financial reporting laws under the Tanzania Revenue Authority (TRA).

3. Data Storage and Cross-Border Transfers

Your personal data is securely stored. In accordance with Sections 31 and 32 of the PDPA, Tusua Academy will not transfer your personal data outside the United Republic of Tanzania unless the recipient country guarantees an adequate level of data protection, or you give explicit, informed consent for specific educational tools (such as global cloud hosting servers).

4. Your Rights as a Data Subject

Under Part VI of the PDPA, Tanzanian citizens and residents hold specific statutory rights. You have the right to:

  • Access: Request a copy of the personal data we hold about you.
  • Rectify: Request immediate correction of inaccurate or incomplete personal information.
  • Erasure ("Right to be Forgotten"): Request deletion of your data when it is no longer necessary for the purpose it was collected.
  • Object: Prevent data processing that causes or is likely to cause substantial unwarranted damage or distress.

To exercise these rights or file an inquiry, please contact our designated Data Protection Officer (DPO) at tusuaacademy@gmail.com. If you feel your rights have been violated, you have the statutory right to lodge a complaint directly with the Personal Data Protection Commission (PDPC).