PRIVACY POLICY - REFINED SKILLS INSTITUTE (RSI)

Refined Skills Institute (RSI) (“we,” “us,” or “our”) is a professional educational institution based in Mauritius. We are committed to protecting your privacy and securing your data in accordance with the Data Protection Act 2017 (Mauritius) when you use our website, www.refinedskillsinstitute.com, its subdomains, mobile applications (collectively, the “Site”), and our services, including professional courses, short courses, and skill-based certifications.

This Privacy Policy explains how we collect, use, store, share, and protect your information, and your rights regarding your data. By using the Site or services, you agree to this Privacy Policy and our Terms and Conditions. If you do not agree, please do not use the Site or services.

SUMMARY OF OUR PRIVACY PRACTICES

We value your privacy. Here is a quick overview:

• What We Collect: Names, emails, identification, payment details, usage data, and professional educational records.

• How We Use It: To provide courses, process payments, improve our Site, and send academic updates (you can opt out of marketing).

• Who We Share With: Trusted vendors (e.g., Stripe, AWS), educational partners, or authorities if legally required. We do not sell your data.

• Your Rights: Access, delete, correct, or limit your data under Mauritian law. Use our privacy dashboard or email info@refinedskillsinstitute.com.

• Security: We use encryption and secure servers, but no system is 100% safe.

• Contact Us: Email info@refinedskillsinstitute.com or visit www.refinedskillsinstitute.com/privacy-preferences.

1. INFORMATION WE COLLECT

We collect only the data necessary to provide services, meet legal obligations, or improve the Site and programs, avoiding excessive or irrelevant data (Data Minimization).

1.1 Personal Information Collected when you voluntarily provide it:

• Registration and Enrollment: Name, national identity number/passport details, email, phone number, mailing address, and billing details provided during account creation.

• Forms and Interactions: Data submitted via inquiries, surveys, or customer support requests.

• Purchases and Subscriptions: Payment history and billing details for courses or premium services.

• Educational Content: User-generated content such as assignments, assessment results, and feedback.

1.2 Sensitive Personal Information We may collect sensitive data required for specific professional certifications. This data is:

• Used solely for program administration and safety.

• Stored securely with encryption.

• Not shared with third parties except as required by accrediting bodies (with consent) or as mandated by Mauritian law.

• Revocation: You can revoke consent at any time by emailing info@refinedskillsinstitute.com. We will delete the data unless legally required to retain it.

1.3 Non-Personal Information Collected automatically via cookies and tracking technologies:

• Device and Browser Data: Browser type, operating system, device type, IP address, and connection details.

• Usage Data: Pages visited, time spent, links clicked, and analytics data.

1.4 Mobile App Data Our apps may collect device identifiers, push notification preferences, or location data (with consent). You can manage these via device settings.

1.5 Information from Minors RSI is intended for adult learners. For any users under 18:

• Consent: Parents/guardians must email info@refinedskillsinstitute.com to provide verifiable consent within 3 business days.

• Data Deletion: Parents/guardians may request removal of posted content or data provided by minors via email.

2. HOW WE USE YOUR INFORMATION

We process your data based on Consent, Contract Performance, Legitimate Interests, or Legal Obligation.

• Deliver Services: Process registrations, deliver course modules, and manage student accounts.

• Payments & Billing: Process secure payments and manage recurring subscription billing.

• Analytics: Use tools like Google Analytics to improve functionality. Opt out via browser add-ons or our dashboard.

• Advertising & Profiling: Deliver tailored course suggestions based on browsing patterns. Profiling is used with your consent and does not produce legal effects.

• Automated Decision-Making: We do not use automated decision-making that produces significant legal effects without human review.

3. HOW WE SHARE YOUR INFORMATION

We do not sell, trade, or rent your personal information. We share it with:

• Service Providers: Trusted vendors bound by confidentiality:

  • Payment Processors: e.g., Stripe (billing information only).

  • Hosting Providers: e.g., AWS (secure data storage).

  • Analytics Tools: e.g., Google Analytics (anonymized usage data).

  • Support Platforms: e.g., Zendesk (contact details for inquiries).

• Educational Partners: Local and international accrediting bodies to verify certifications.

• Legal Obligations: Law enforcement or government agencies in Mauritius to comply with legal mandates.

• Business Transfers: In mergers or acquisitions, with notice where required.

4. USER-GENERATED CONTENT & OBLIGATIONS

• Content Usage: When you submit content (assignments, feedback), you grant RSI an irrevocable license to use it for educational or marketing purposes.

• Risk Warning: Do not share sensitive data in public areas or third-party social media, as such disclosures are at your own risk.

• Data Duties: You must comply with data protection laws. Do not record, screenshot, or share course materials or others’ data without written permission.

5. YOUR CHOICES AND RIGHTS (MAURITIUS DPA 2017)

Visit our privacy dashboard or email info@refinedskillsinstitute.com (Subject: PRIVACY REQUEST). We verify identity and respond within:

• 28 days for Mauritian/Seychellois users.

• 30 days for Indian/African users.

• 45 days for International/EU users.

Your Rights Include:

• Access/Rectification: View or correct inaccurate personal data.

• Erasure: Request data deletion ("Right to be Forgotten").

• Restriction/Objection: Limit processing for specific purposes (e.g., marketing).

• Portability: Receive data in a structured, machine-readable format.

6. PROVISIONS FOR INTERNATIONAL STUDENTS

For students outside Mauritius, we respect data protection laws in your home jurisdictions:

• International Transfers: Data is processed in Mauritius using Standard Contractual Clauses (SCCs) or equivalent safeguards.

• GDPR (EU/UK): Full compliance with access, rectification, and erasure rights.

• POPIA (South Africa): Rights to object and correct; transfers comply with Information Regulator requirements.

• DPDPA (India): Rights include access, correction, erasure, and grievance redressal.

• Kenya (DPA 2019) & Nigeria (NDPA 2023): Rights to rectification, erasure, and consent withdrawal.

7. PROTECTION, BREACHES, AND RETENTION

• Security: We use encryption and access controls compliant with international security frameworks (e.g., PCI DSS for billing).

• Breach Notification: If a breach occurs, we notify affected users and the Data Protection Office of Mauritius within 72 hours of a confirmed breach.

• Retention Schedule:

  • Account Data: Up to 7 years after account closure for compliance.

  • Payment Data: 7 years for tax and legal purposes.

  • Sensitive Data: Duration of program plus 5 years, then deleted or anonymized.

  • Educational Records: Retained indefinitely for lifelong certification verification.

8. COOKIES, TRACKING, AND THIRD PARTIES

• Cookies: We use Essential (login), Analytics (usage), and Advertising (suggestions) cookies. Duration lasts up to 1 year.

• Do Not Track: We do not currently respond to DNT signals due to a lack of universal standards.

• Third Parties: The Site may link to third-party sites or social media accounts. These are subject to their own policies. RSI is not responsible for third-party privacy practices.

9. SUBSCRIPTIONS AND BILLING

Premium services involve recurring billing. Resolve disputes with payment providers directly. Cancel subscriptions at least 7 days before renewal via support@refinedskillsinstitute.com; no refunds are provided for partial periods.

10. ACCESSIBILITY AND COMPLAINTS

• Accessibility: We strive to meet WCAG 2.1 standards. Request alternative formats or translated summaries in French, Creole, Hindi, or Swahili via info@refinedskillsinstitute.com.

• Complaints: If unresolved by RSI, you have the right to lodge a complaint with the Data Protection Office of Mauritius (www.dataprotection.govmu.org).

11. CHANGES TO THIS POLICY

We may update this policy periodically. Material changes will be notified via email or Site notice at least 30 days before taking effect. Continued use of the Site constitutes acceptance.

12. CONTACT US

For privacy-related inquiries or to reach our Data Protection Officer:

• Email: info@refinedskillsinstitute.com

• Address: Refined Skills Institute (RSI), Mauritius.

© Refined Skills Institute (RSI). All Rights Reserved 2024-2026.