Privacy Policy

1. Introduction

CodeImpact ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our educational services, website, and WhatsApp messaging services.

By using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.

2. Information We Collect

2.1 Personal Information

When you register for our programs, we collect:

• Contact Information: Parent/guardian name, email address, phone number
• Child Information: Child's name, age
• Program Details: Selected sessions, session dates and times, special requirements
• Payment Information: Payment transaction details (processed securely through Flutterwave)
• Communication Preferences: Newsletter subscription status, WhatsApp messaging opt-in

2.2 Automatically Collected Information

• Usage Data: Pages visited, time spent on site, browser type, device information
• IP Address: For security and analytics purposes
• Cookies: Session cookies to improve user experience
• WhatsApp Metadata: Message delivery status, timestamps (message content is end-to-end encrypted)

2.3 WhatsApp Communication Data

When you opt in to receive WhatsApp messages from us, we collect:

• Your phone number
• Consent timestamp and method
• Message interaction history
• Opt-out requests

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: Process registrations, schedule sessions, send session reminders and confirmations
• WhatsApp Communications: Send registration confirmations, payment confirmations, session details, and important updates (only if you opt in)
• Payment Processing: Process payments securely through our payment provider (Flutterwave)
• Customer Support: Respond to inquiries, provide technical assistance, resolve issues
• Marketing: Send newsletters and program updates (only with your consent)
• Analytics: Improve our services, understand user behavior, optimize user experience
• Legal Compliance: Comply with legal obligations and protect our rights

4. WhatsApp Messaging - Important Information

4.1 Explicit Consent Required

We will only send you WhatsApp messages if you have explicitly opted in to receive them during registration. You can opt in by checking the WhatsApp consent checkbox when registering for our programs.

4.2 Types of WhatsApp Messages

If you opt in, you will receive:

• Registration Confirmation: Immediate confirmation after successful registration
• Payment Confirmation: Notification when payment is successfully processed
• Session Confirmation: Details of your booked coding session(s) with date, time, and meeting link
• Session Reminders: 24-hour and 1-hour reminders before scheduled sessions

4.3 How to Opt Out

You can opt out of WhatsApp messages at any time by:

• Replying "STOP" to any WhatsApp message from us
• Contacting us at alex.nkusi@codeimpact.co
• Calling us at +256 772 521 038

We will process your opt-out request immediately and send you a confirmation message.

4.4 WhatsApp Data Security

• End-to-End Encryption: All WhatsApp message content is end-to-end encrypted by WhatsApp
• No Message Storage: We do not store WhatsApp message content on our servers
• Metadata Only: We only store delivery status, timestamps, and opt-in/opt-out records

5. Data Sharing and Third Parties

We share your information with the following third parties:

5.1 Service Providers

• Meta/WhatsApp: For WhatsApp Business messaging services (if you opt in)
• Flutterwave: For secure payment processing
• Google Workspace: For email communications and calendar management
• Replit: For application hosting and infrastructure

5.2 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or to protect our rights and safety.

5.3 No Data Sales

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

6. Data Storage and Security

6.1 Data Storage Location

Your data is stored on secure servers provided by Neon Database (PostgreSQL) and Replit, with data centers in the United States and Europe. WhatsApp message metadata is stored by Meta in accordance with their data retention policies.

6.2 Security Measures

• TLS/SSL encryption for data transmission
• Secure database with access controls and authentication
• Regular security updates and monitoring
• Environment variable protection for sensitive credentials
• Payment data handled exclusively by PCI-compliant payment processor (Flutterwave)

6.3 Data Retention

• Registration Data: Retained for the duration of your participation in our programs plus 2 years for record-keeping
• WhatsApp Consent Records: Retained indefinitely for compliance purposes
• Payment Records: Retained for 7 years for accounting and tax purposes
• Marketing Communications: Retained until you unsubscribe

7. Your Rights (GDPR & Data Protection)

You have the following rights regarding your personal data:

• Right to Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (subject to legal retention requirements)
• Right to Restrict Processing: Request limitation on how we use your data
• Right to Data Portability: Request transfer of your data to another service
• Right to Object: Object to processing of your data for marketing purposes
• Right to Withdraw Consent: Withdraw consent for WhatsApp messaging or newsletters at any time

To exercise any of these rights, please contact us at alex.nkusi@codeimpact.co or call +256 772 521 038.

8. Children's Privacy

Our services are designed for children under 18, but registration and consent must be provided by a parent or legal guardian. We only collect children's information (name and age) with parental consent. We do not knowingly collect personal information directly from children without parental consent.

All communication (email, WhatsApp) is sent to the parent/guardian contact information provided during registration.

9. Cookies and Tracking

We use essential cookies to maintain your session and improve user experience. These cookies do not track you across other websites. You can disable cookies in your browser settings, but this may affect website functionality.

10. International Data Transfers

Your information may be transferred to and processed in countries outside Uganda, including the United States and European Union, where our service providers operate. We ensure appropriate safeguards are in place for such transfers.

11. Updates to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Significant changes will be communicated via email or WhatsApp (if you've opted in).

Continued use of our services after policy changes constitutes acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

13. WhatsApp Business Compliance

Our WhatsApp messaging services comply with Meta's WhatsApp Business Platform policies. We:

• Obtain explicit opt-in consent before sending WhatsApp messages
• Provide easy opt-out mechanisms in every message
• Use only approved message templates
• Respect end-to-end encryption for message content
• Maintain records of consent and opt-out requests
• Process opt-out requests immediately

For more information about WhatsApp's privacy practices, please visit: WhatsApp Privacy Policy