Privacy Policy

Last updated: March 15, 2026

1. Who We Are

The Data Academy (TDA) is a professional training and consultancy firm based in Lilongwe, Malawi. We provide data science, GIS, and M&E training to professionals across Africa.

Contact: info@thedataacademy.mw · +265 888 267 810 · Lilongwe, Malawi

2. What Data We Collect

We collect the following personal data:

  • Account data: Full name, email address, password (encrypted)
  • Profile data: Phone number, occupation, country
  • Enrollment data: Course interest, messages, enrollment status
  • Certificate data: Name, course completed, issue date
  • Usage data: Course progress, quiz scores, lesson completion
  • Contact form data: Name, email, phone, message

3. How We Use Your Data

  • To create and manage your student account
  • To process your course enrollment
  • To issue and verify certificates
  • To track your learning progress
  • To send you important account and course communications
  • To respond to your contact form enquiries
  • To improve our platform and services

4. Legal Basis for Processing

We process your data based on:

  • Contract performance: To deliver the training services you enrolled for
  • Legitimate interests: To operate and improve our platform
  • Consent: Where you have opted in to communications

5. Data Sharing

We do not sell your personal data. We share data only with:

  • Supabase — our database and authentication provider (EU-based servers)
  • Vercel — our hosting provider
  • Google — if you use Google Sign-In (optional)

All third-party providers are bound by data processing agreements.

6. Certificate Verification

Certificate IDs are publicly verifiable. When a certificate is verified, the verifier can see the student name, course title, and issue date. This is necessary for the certification to have value.

7. Data Retention

  • Account data: Retained while your account is active
  • Certificate data: Retained permanently for verification purposes
  • Contact form data: Retained for 2 years
  • Course progress: Retained while your account is active

8. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data (via your profile settings)
  • Delete your account and associated data
  • Export your data
  • Object to certain processing

To exercise these rights, email us at info@thedataacademy.mw

9. Security

We implement industry-standard security measures including encrypted connections (HTTPS), hashed passwords, secure session management, and access controls. However, no system is 100% secure.

10. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.

11. Children's Privacy

Our services are intended for professionals aged 18 and over. We do not knowingly collect data from children.

12. Changes to This Policy

We may update this policy from time to time. We will notify registered users of significant changes by email.

13. Contact

For privacy-related enquiries: info@thedataacademy.mw