Privacy Policy

1) Who we are

PAID–ESA is a Pan-African institution focused on capacity building through professional training, action-oriented research, consultancies, and partnerships across East and Southern Africa. We also run public programs such as Weekend Shifts short courses and the PAID Language Exchange Program (PLEP).

2) What we collect

Depending on your interaction with us:

• Identity & contact: name, email, phone, organization, role/title, country.
• Education & professional info: areas of interest, prior studies/experience, CV/resume details you choose to share.
• Registration & participation: program/course/event selections (incl. Weekend Shifts, PLEP), attendance, certificates issued, feedback forms.
• Transactions & donations: amounts, currency, timestamps, and status (processed via third-party payment providers; we do not store full card details).
• Communications: messages sent via forms or email, support requests, survey responses.
• Marketing preferences: newsletter opt-in/opt-out, topics of interest.
• Technical data: IP address, device/browser, pages viewed, referral sources, coarse location, and cookies/analytics identifiers.
• Media you provide: profile photos or other images/files you upload for applications or events.

We do not intentionally collect special categories of personal data unless you voluntarily provide them for reasonable accommodations (e.g., accessibility) or where required by law.

3) How we use your data (purposes)

• Provide, administer, and improve our trainings, programs, and services.
• Process registrations, enrollments, donations, certificates, and participation records.
• Communicate regarding schedules, logistics, learning materials, updates, and support.
• Send newsletters and announcements where you have opted in (you may unsubscribe at any time).
• Conduct research, monitoring, and evaluation (using aggregated/de-identified data where possible).
• Manage partnerships, resource mobilization, and reporting (using aggregated insights where feasible).
• Maintain site security, prevent fraud/abuse, and comply with legal/financial obligations.

4) Lawful bases

We rely on one or more of: contract (to deliver a program or service), legitimate interests (program administration, improvement, outreach relevant to your role), consent (marketing, cookies, optional data), and legal obligation (financial recordkeeping, compliance).

5) Cookies & analytics

We use cookies/analytics to operate our site, measure usage, and improve content. Where required, you'll see a consent banner. You can adjust your browser settings to reject cookies; some features may not function fully.

6) When we share data

We share personal data only as needed to provide services, comply with law, or with your consent:

• Service providers/"processors": website hosting, email delivery, analytics, payment processing, learning/event platforms (e.g., webinar software), and customer support tools.
• Program partners: for co-delivered trainings, events, certificates, or co-hosted initiatives (e.g., collaborative short courses or exchanges). We share the minimum necessary information.
• Legal/compliance: where required by applicable law, regulation, or to protect rights and safety.

We do not sell your personal data.

7) International transfers

As a Pan-African institution with international partnerships, data may be processed in multiple countries. Where required, we take appropriate safeguards (e.g., standard contractual clauses) to protect your information during transfers.

8) Data retention

We keep personal data only as long as necessary for the purposes stated above, including meeting legal, accounting, and reporting requirements. When no longer needed, we delete or de-identify data.

9) Your rights

Depending on your location's data laws (e.g., GDPR in the EU/UK or applicable East & Southern Africa frameworks), you may have rights to:

• access, correct, or delete your data;
• object to or restrict processing;
• data portability;
• withdraw consent (where processing is based on consent);
• lodge a complaint with your supervisory authority.

To exercise rights, contact programs@paidesa.org.

10) Children's privacy

Our services are intended for adults and working professionals. We do not knowingly collect personal data from children under the age required by applicable law without appropriate consent.

11) Security

We use administrative, technical, and organizational safeguards appropriate to the risk (e.g., encryption in transit, access controls). No system is 100% secure; please contact us immediately if you believe your account or data has been compromised.

12) Third-party links

Our site may link to external websites (e.g., partners, funders, event platforms). We are not responsible for their privacy practices. Review their policies before submitting personal data.

13) Changes to this Policy

We may update this Policy to reflect operational, legal, or regulatory changes. We will post the updated version with a new "Last updated" date. Significant changes may be communicated via email or prominent notice.