Privacy Policy
Last updated: October 7, 2025
TABLE OF CONTENTS
1. Information We Collect
Personal Information You Provide
When you register for our services, make a purchase, or contact us, we collect:
- Contact Information: Name, email address, phone number
- Account Information: Username, password (encrypted), profile preferences
- Payment Information: Billing details processed through IntaSend (we do not store payment card details)
- Communication Data: Messages, support requests, feedback
Automatically Collected Information
- Usage Data: Pages visited, time spent, features used
- Device Information: IP address, browser type, operating system
- Session Data: Login times, session duration, activity logs
2. How We Use Your Information
We use your personal information for the following purposes:
Service Delivery
- Provide training programs
- Process payments
- Deliver digital materials
- Schedule Google Meet sessions
Communication
- Send welcome emails
- Payment confirmations
- Session reminders
- Support responses
Improvement
- Analyze usage patterns
- Improve user experience
- Develop new features
- Quality assurance
Legal Compliance
- Comply with Kenyan laws
- Prevent fraud
- Maintain security
- Resolve disputes
3. Information Sharing and Disclosure
We may share your information only in the following circumstances:
Service Providers
- IntaSend: Payment processing (PCI-DSS compliant)
- Google Workspace: Email services and Google Meet sessions
- Web Hosting: Secure data storage and website hosting
Legal Requirements
We may disclose information when required by:
- Kenyan law or legal process
- Government authorities
- Court orders or subpoenas
- Protection of our rights and safety
4. Data Security
We implement comprehensive security measures to protect your personal information:
Encryption
SSL/TLS encryption for data transmission and bcrypt for password hashing
Secure Storage
Protected servers with regular security updates and monitoring
Access Control
Limited access to authorized personnel only
Monitoring
Continuous monitoring for security threats and vulnerabilities
6. Third-Party Services
Our platform integrates with trusted third-party services:
IntaSend
Secure payment processing with PCI-DSS compliance
Google Services
Google Meet for training sessions and Gmail for communications
Email Services
SMTP services for transactional emails
Each service has its own privacy policy. We recommend reviewing their policies for complete information.
7. Data Retention
We retain your personal information for different periods based on the type of data:
- Account Information: Until account deletion or 3 years of inactivity
- Payment Records: 7 years (as required by Kenyan tax law)
- Communication Records: 2 years for support purposes
- Usage Analytics: 2 years in aggregated, anonymized form
8. Your Rights
Under Kenyan data protection laws, you have the following rights:
Access & Portability
Request a copy of your personal data in a portable format
Correction
Update or correct inaccurate personal information
Deletion
Request deletion of your personal data (subject to legal requirements)
Restriction
Limit how we process your personal information
9. International Data Transfers
Your data is primarily stored and processed in Kenya. When we use international services (like Google), we ensure:
- Adequate protection measures are in place
- Compliance with international data protection standards
- Contractual safeguards with service providers
10. Children's Privacy
If you believe we have collected information from a child, please contact us immediately for removal.
11. Changes to This Privacy Policy
We may update this Privacy Policy periodically. When we make significant changes:
- We will notify you via email
- Post a notice on our website
- Update the "Last Updated" date
- Provide 30 days notice for material changes
12. Contact Information
Fortune Writings
Nairobi, Kenya
Registration No: BN-L3SDVM92
support@fortunewrites.pro
+254 700 295 487
For privacy-related inquiries, please use the email address above. We will respond within 30 days as required by Kenyan data protection regulations.