Privacy Policy

1. Introduction

Wait For It Internet Limited (“we,” “our,” or “us”) operates a digital platform designed to support the application, processing, and administration of educational bursaries (the Platform).

We are committed to protecting personal data in accordance with applicable laws, including the Kenya Data Protection Act, 2019, as well as internationally recognized data protection principles. This Privacy Policy explains how personal data is collected, used, and safeguarded when individuals interact with the Platform.

This Policy applies to all individuals whose data is processed through the Platform. This includes applicants, their parents or guardians, institutional users such as government offices, non-governmental organizations, and schools, as well as any other persons whose information is submitted in connection with bursary administration.

In most cases, the institutions using the Platform act as Data Controllers, determining the purpose and means of processing personal data. Wait For It Internet Limited acts as a Data Processor, handling data on their behalf and in accordance with their instructions.

In limited circumstances, such as ensuring system security, maintaining service performance, or meeting legal obligations, we may process certain data in our own capacity where permitted by law.

We process personal data necessary for the effective administration of bursary programs. This generally includes identification details, contact information, educational background, and financial or socio-economic information relevant to eligibility assessment. Supporting documentation submitted as part of an application may also be processed.

In addition, the Platform generates operational data during use, such as application status information, system logs, and records required for accountability and audit purposes. We may also collect limited technical information, such as device and usage data, to support system functionality, performance, and security.

Personal data is processed strictly for purposes connected to bursary administration. This includes receiving and managing applications, supporting evaluation processes, facilitating allocation workflows, enabling communication with applicants, and ensuring accountability in the use of funds.

We may also process data to maintain the security and reliability of the Platform, prevent misuse, and improve overall service delivery. Personal data is not used for unrelated commercial purposes.

The Platform incorporates automated tools to support efficiency and consistency in handling applications. These tools may assist in organizing, analyzing, or prioritizing information provided during the application process.

Such processing is designed to support institutional decision-making rather than replace it. Final decisions regarding bursary allocation remain under the authority of the relevant institution. Where applicable, users are informed of this processing and are required to acknowledge it before submitting their information.

We process personal data on lawful grounds, including where consent has been provided, where processing is necessary for the performance of a public or institutional mandate, where it serves legitimate operational interests such as security and fraud prevention, or where required by law.

Personal data is shared only where necessary and appropriate. This includes sharing with the institution administering the bursary program, authorized personnel responsible for processing applications, and service providers supporting the operation of the Platform under strict confidentiality and data protection obligations.

We may also disclose information where required to comply with legal or regulatory obligations. We do not sell or trade personal data.

Personal data is retained for as long as necessary to fulfill the purposes for which it was collected, including compliance with legal, regulatory, and reporting requirements.

Once data is no longer required, it is securely deleted or irreversibly anonymized in accordance with applicable standards.

We implement appropriate technical and organizational measures to safeguard personal data against unauthorized access, loss, or misuse. These measures are continuously reviewed and updated to reflect evolving risks and operational needs.

While we take reasonable steps to protect data, no system can be guaranteed to be completely secure.

Individuals have rights in relation to their personal data, including the right to access, correct, or request deletion of their information, as well as the right to object to certain types of processing where permitted by law.

Requests relating to personal data can be submitted through the contact details provided below. Individuals also have the right to lodge complaints with the Office of the Data Protection Commissioner where they believe their rights have been infringed.

Where personal data is processed or stored outside Kenya, we ensure that appropriate safeguards are in place and that such transfers comply with applicable legal requirements.

The Platform may use cookies or similar technologies where necessary to support functionality, enhance user experience, and maintain system security. Users may manage certain preferences through their browser settings.

Given the nature of bursary programs, personal data relating to minors may be processed. Such data is typically provided by parents, guardians, or authorized institutions, and is handled with additional care and appropriate safeguards.

We may update this Privacy Policy from time to time to reflect changes in legal requirements or operational practices. Where changes are material, users will be notified through appropriate channels.

For any questions or concerns regarding this Privacy Policy or the handling of personal data, please contact:

Data Protection Officer (DPO)