Privacy Policy
Last updated: June 14, 2026
At Advent Skool, we take your privacy seriously. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our learning management platform, in line with the GDPR, CCPA/CPRA, the Kenya Data Protection Act, and the Google API Services User Data Policy. By using Advent Skool, you acknowledge the practices described in this policy.
1. Introduction
Advent Skool ('Advent Skool', 'we', 'us', or 'our') is committed to protecting your privacy and handling your personal data responsibly and transparently. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use our website, applications, and learning management services (the 'Platform'). It applies to all users worldwide and reflects our commitment to international data protection standards, including the EU and UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), and the Kenya Data Protection Act, 2019.
2. Data Controller
Advent Skool is the data controller responsible for your personal data processed through the Platform. If you have any questions or wish to exercise your rights, you can reach our Data Protection team at adventnurutech@gmail.com.
3. Information We Collect
We collect: (a) Information you provide — your name, email address, phone number, profile details, and content you submit such as comments and assignments; (b) Account and authentication data — including information from third-party sign-in providers like Google (such as your name, email address, and profile picture) when you choose to sign in with them; (c) Payment information — processed by our payment provider; we do not store full card details; (d) Usage and device data — IP address, browser type, device identifiers, operating system, pages viewed, and interactions with the Platform; (e) Cookies and similar technologies — as described in our Cookies Policy.
4. How We Use Your Information
We use your personal data to: create and manage your account; deliver, maintain, and improve our educational services; process payments and prevent fraud; personalise your learning experience; provide customer support; send service-related and, where permitted, marketing communications; schedule and host live classes; ensure security and integrity of the Platform; and comply with legal obligations. We also use aggregated and de-identified data for analytics and to improve the Platform.
5. Legal Bases for Processing
Where the GDPR or similar laws apply, we process your personal data on the following legal bases: (a) performance of a contract — to provide the services you request; (b) consent — for example, for certain marketing communications and non-essential cookies, which you may withdraw at any time; (c) legitimate interests — to operate, secure, and improve the Platform, provided these are not overridden by your rights; and (d) legal obligation — to comply with applicable laws and regulatory requirements.
6. Google User Data & Limited Use
When you connect your Google account or sign in with Google, we access only the Google user data necessary to provide the requested features, such as your basic profile information and, for teachers and administrators who enable live classes, Google Calendar and Google Meet data used to create and manage class events. Advent Skool's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, we do not sell it, and we do not transfer it to third parties except as necessary to provide or improve the requested features, to comply with applicable law, or as part of a merger or acquisition. You can revoke our access at any time via your Google Account security settings.
7. Payment Processing
Payments are securely processed by our third-party payment processor in compliance with the Payment Card Industry Data Security Standard (PCI-DSS). We do not store your full card or banking details on our servers. The payment processor acts as an independent controller or processor in respect of your payment data and handles it under its own privacy policy.
8. How We Share Your Information
We do not sell your personal data. We share information only with: (a) trusted service providers and sub-processors who help us operate the Platform — such as hosting, database, authentication, payment processing, communications, and analytics providers — under contractual confidentiality and data protection obligations; (b) third-party integrations you choose to enable, such as Google; (c) authorities or other parties where required by law, legal process, or to protect our rights, users, or the public; and (d) successors in connection with a merger, acquisition, or sale of assets, subject to this Policy.
9. International Data Transfers
We operate globally, and your personal data may be processed in countries other than your own, including countries that may not provide the same level of data protection as your jurisdiction. Where we transfer personal data internationally, we implement appropriate safeguards required by law, such as the European Commission's Standard Contractual Clauses or equivalent mechanisms, to ensure your data remains protected.
10. Data Retention
We retain your personal data for as long as your account is active or as needed to provide the services, and thereafter only as necessary to comply with our legal obligations, resolve disputes, prevent fraud, and enforce our agreements. When data is no longer required, we securely delete or anonymise it. You may request deletion of your account and associated data at any time, subject to retention required by law.
11. Your Privacy Rights
Depending on your jurisdiction, you may have the right to: access the personal data we hold about you; correct inaccurate data; request deletion ('right to be forgotten'); restrict or object to processing; data portability; and withdraw consent at any time. If you are in California, you have the right to know what personal information we collect, to request deletion, to correct it, and to opt out of any 'sale' or 'sharing' of personal information — we do not sell your data. We will not discriminate against you for exercising your rights. To exercise any right, update your information in your account settings or contact us at adventnurutech@gmail.com. You also have the right to lodge a complaint with your local supervisory authority, including the Office of the Data Protection Commissioner in Kenya.
12. Security
We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS), access controls, role-based permissions, and regular security reviews. While we strive to protect your information, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. In the event of a data breach affecting your rights, we will notify you and the relevant authorities as required by law.
13. Cookies & Tracking Technologies
We use cookies and similar technologies to operate the Platform, remember your preferences, and analyse usage. You can manage your preferences through our cookie consent tools and your browser settings. For full details, please see our Cookies Policy.
14. Third-Party Links
The Platform may contain links to third-party websites or services that we do not control. We are not responsible for the privacy practices or content of those third parties. We encourage you to review their privacy policies before providing any personal data.
15. Children's Privacy
The Platform is not directed to children under 13, and we do not knowingly collect personal data from children under 13 without verifiable parental consent. Users between 13 and 17 may use the Platform only with the consent and supervision of a parent or guardian. If you believe a child has provided us with personal data without appropriate consent, please contact us and we will take steps to delete it.
16. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will post the updated Policy on this page and revise the 'Last updated' date. For material changes, we will provide notice by email or through a Platform notice. Your continued use of the Platform after the changes take effect constitutes acceptance of the updated Policy.
17. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact our Data Protection team at adventnurutech@gmail.com.