Privacy notice

Bushiangala Technical Training Institute ("the institute") is the data controller for this Portfolio of Evidence (PoE) portal. It is used to record your training, the evidence you submit, assessments, verification and certification under the TVET CDACC competency-based framework.

What we collect

Your name, registration number, email address and phone number; your programme, cohort and enrolment; the evidence you upload (documents, photos, audio, video, links) with the time, IP address and a fingerprint (SHA-256) of each file; assessment results, feedback and verification records; sign-in history. If you sign in with your institute Google account, Google confirms your identity to the portal and the portal keeps the Google account's ID. Location data in photos is removed when you upload them.

Why we use it, and the legal basis

To deliver and assess your training and to certify your competence (performance of the institute's public education function and of your training contract); to meet the requirements of TVET CDACC and other regulators (legal obligation); to keep the system secure and to investigate misuse (legitimate interest).

Who can see it

You see your own portfolio. Trainers, assessors, internal verifiers and heads of department see learners in the programmes and cohorts they are assigned to. TVET CDACC external verifiers get time-limited, read-only access to samples. Notifications are sent through an email provider and an SMS provider that act on the institute's instructions. We do not sell your data or use it for marketing.

How long we keep it

Evidence files are kept for 3 years after your enrolment ends, then deleted; assessment and certification records are kept as the institute's academic records. Security logs are kept for 2190 days.

Your rights

Under the Data Protection Act, 2019 you have the right to be informed, to access your data (you can download a copy from "My account"), to have wrong data corrected, to object, and to ask for your data to be deleted where the law allows. Contact: the Principal's office. If you are not satisfied, you may complain to the Office of the Data Protection Commissioner (www.odpc.go.ke).