Effective Date: 14 October 2026
IIEA Courses is the digital learning platform of the Insurance Institute of East Africa (IIEA), providing online courses, professional development programmes, assessments and digital certification services.
IIEA respects the privacy of learners, institutional clients, website visitors and other individuals who interact with its digital learning services.
This Privacy Policy explains how we collect, use, process, store, protect and disclose personal information in accordance with applicable data protection laws, including the Kenya Data Protection Act, 2019.
By using our website and learning services, you acknowledge that your personal information will be processed as described in this Privacy Policy.
The Insurance Institute of East Africa is responsible for determining the purposes and means of processing personal information collected through IIEA Courses.
Organisation: Insurance Institute of East Africa (IIEA)
Platform: IIEA Courses
Website: https://www.iieacourses.com
Privacy Contact: info@iieacourses.com
Questions concerning this Privacy Policy or the processing of personal information may be directed to the email address above.
Depending on how individuals interact with the platform, we may collect the following categories of information:
Personal Identification Information
Full name
Email address
Telephone number
Country of residence
Professional designation or job title
Employer or institutional affiliation
Learner and Academic Information
Course registrations and enrolments
Learning progress and participation records
Examination and assessment results
Assignment and capstone submissions
Course completion records
Certificates and professional credentials issued
Financial and Transaction Information
Payment confirmations
Transaction references
Invoices and receipts
Billing information
Payments may be processed through authorised third-party payment service providers. IIEA does not ordinarily require or retain complete payment card credentials.
Technical Information
IP address
Browser type and device information
System access and login records
Website usage information
Cookies and related technologies
Assessment Monitoring Information
For assessments subject to digital proctoring, additional information may be processed, including identification information, assessment session recordings and monitoring data.
We collect information when individuals:
Register for an account or enrol in a course.
Complete registration or application forms.
Make payments or request invoices.
Participate in online learning and assessments.
Submit assignments or other academic work.
Contact IIEA through email, website forms or other communication channels.
Interact with our website and learning management systems.
Information may also be received from employers, sponsoring institutions, authorised training partners and service providers where appropriate.
IIEA processes personal information for legitimate educational, administrative and operational purposes, including:
Creating and managing learner accounts.
Processing course registrations and enrolments.
Delivering online courses and learning resources.
Administering examinations and assessments.
Monitoring academic progress and performance.
Issuing certificates and professional credentials.
Maintaining academic and certification records.
Authenticating and verifying certificates.
Processing payments and maintaining financial records.
Providing learner support and administrative communication.
Maintaining platform security and operational performance.
Meeting applicable regulatory and legal obligations.
Improving the quality and effectiveness of our learning services.
Where permitted by law, information may also be used to communicate relevant programme updates and professional development opportunities.
IIEA processes personal information where an appropriate lawful basis exists, including:
Contractual Necessity: To provide courses, assessments, certification and related services requested by learners or institutional clients.
Legal Obligations: To comply with applicable laws, financial recordkeeping requirements and other legal obligations.
Legitimate Interests: To maintain academic records, verify professional credentials, protect the integrity of assessments, secure our systems and administer institutional operations, where those interests are not overridden by applicable individual rights.
Consent: Where consent is required, including for certain optional communications, cookies or other processing activities.
IIEA will apply the appropriate legal basis according to the nature and purpose of the processing activity.
IIEA uses digital proctoring technology for applicable online examinations and assessments to support examination integrity and identify potential irregularities.
The digital proctoring service is provided through Constructor, an external technology service provider.
Depending on the assessment configuration, proctoring may involve processing information such as:
Candidate identification details.
Webcam and microphone recordings.
Assessment session activity.
Monitoring information and potential irregularity indicators.
Proctoring information is used for examination administration, academic integrity monitoring and the review of potential assessment irregularities.
Automated monitoring indicators may be reviewed by authorised personnel before decisions concerning assessment irregularities are made.
Proctoring recordings and associated monitoring records are retained for six months in accordance with Constructor's retention policy.
Learners will be informed of applicable proctoring requirements before undertaking a proctored assessment.
IIEA does not sell personal information to third parties.
Personal information may be shared with authorised parties where necessary for legitimate educational, administrative or legal purposes.
These may include:
Learning management system and hosting providers.
Digital proctoring and assessment technology providers.
Payment processing and financial service providers.
Certificate verification service providers.
Authorised institutional training partners.
Professional awarding or certification organisations, where applicable.
Regulatory, judicial or law enforcement authorities where legally required.
Information shared with service providers is limited to what is reasonably necessary for the relevant service.
IIEA seeks to ensure that appropriate confidentiality, security and data protection arrangements apply to third-party processing.
IIEA may use technology providers, hosting services, assessment platforms and professional certification partners operating outside Kenya.
Where personal information is transferred or accessed internationally, IIEA will seek to ensure that appropriate safeguards are implemented in accordance with applicable data protection requirements.
These may include contractual protections, appropriate technical and organisational safeguards, and other lawful transfer mechanisms.
IIEA implements reasonable technical and organisational measures designed to protect personal information against unauthorised access, disclosure, alteration, loss or misuse.
These measures may include:
Controlled access to learner and administrative accounts.
Password-protected authentication.
Role-based access permissions.
Secure hosting and system administration.
Access monitoring and security controls.
Restricted access to academic and financial records.
Appropriate safeguards for information processed by external service providers.
Although reasonable precautions are taken, no internet-based system can guarantee absolute security.
Users are responsible for maintaining the confidentiality of their login credentials and reporting suspected unauthorised account access.
IIEA maintains learner, academic, certification and financial records to support educational administration, professional credential verification, institutional accountability and applicable legal obligations.
Learner Registration and Enrolment Records
Learner registration, enrolment, course participation and completion records are retained on a long-term basis to maintain accurate institutional records and support future learner enquiries and academic verification.
Examination and Assessment Records
Examination results, assessment outcomes, assignment records and related academic information are retained on a long-term basis to support institutional academic records, learner progression and verification requirements.
Certification and Verification Records
Records of certificates and professional credentials issued, including certificate numbers, programme details, assessment outcomes and award dates, are retained on a long-term basis to facilitate authentication and verification of professional achievements.
Financial and Payment Records
Payment confirmations, invoices, receipts and related financial records are retained in accordance with applicable statutory requirements and legitimate institutional recordkeeping needs.
Digital Proctoring Records
Digital proctoring recordings and associated monitoring records are retained for six months through Constructor, the applicable third-party proctoring service provider, in accordance with its retention policy.
Technical and Security Logs
Technical, system access and security logs are retained for periods appropriate to operational security, system administration and applicable legal requirements. Specific retention arrangements may vary according to the systems and service providers involved.
Data Review and Disposal
IIEA periodically reviews retained information to ensure continued retention remains necessary, proportionate and lawful.
Records that are no longer required will be securely deleted or anonymised, subject to applicable legal, academic, certification and institutional obligations.
Access to retained information is restricted to authorised personnel and service providers.
IIEA Courses may use cookies and similar technologies to support website functionality, maintain user sessions, improve platform performance and understand website usage.
Cookies may include:
Essential Cookies: Necessary for website functionality, account authentication, security and learner sessions.
Analytics Cookies: Used to understand website traffic, visitor interactions and platform performance.
Preference Cookies: Used to remember selected website settings and preferences.
Marketing Cookies: Where implemented, these may support relevant programme communications and marketing activities.
Where required by applicable law, non-essential cookies will be used only after obtaining appropriate consent.
Users may manage cookies through their browser settings and any cookie preference controls made available on the website.
IIEA may communicate with learners, institutional clients and interested individuals regarding courses, professional development opportunities, programme updates and related educational services.
Marketing communications will be undertaken in accordance with applicable legal requirements.
Recipients may request to stop receiving promotional communications by using the unsubscribe mechanism, where provided, or contacting info@iieacourses.com.
Essential administrative, academic and transactional communications may continue where necessary for the provision of services.
Subject to applicable law, individuals may have rights concerning their personal information, including the right to:
Be informed about the collection and use of personal information.
Access personal information held about them.
Request correction of inaccurate or misleading information.
Object to certain processing activities.
Request deletion of information where legally applicable.
Withdraw consent where processing is based on consent.
Exercise applicable data portability rights.
Requests may be submitted to info@iieacourses.com.
IIEA will consider and respond to requests in accordance with applicable legal requirements.
Certain information may need to be retained notwithstanding a deletion request where continued retention is supported by a lawful basis, including applicable legal obligations or necessary academic and certification verification purposes.
IIEA Courses primarily provides professional education and development programmes intended for adult learners.
Where a programme is made available to individuals below the applicable age of consent, appropriate consent and safeguards will be applied as required by law.
IIEA does not knowingly collect personal information from children in circumstances that would violate applicable data protection requirements.
The IIEA Courses platform may contain links to external websites, educational resources, certification bodies and other third-party services.
These external services may operate under their own privacy policies and data protection practices.
IIEA is not responsible for the privacy practices of independently operated third-party websites.
Users are encouraged to review the privacy policies of external services before providing personal information.
IIEA maintains procedures for identifying, assessing and responding to suspected personal data breaches.
Where a breach occurs, IIEA will take appropriate steps to investigate, contain and address the incident.
Notifications to affected individuals and relevant authorities will be made where required under applicable data protection laws.
IIEA may update this Privacy Policy periodically to reflect changes in legal requirements, institutional practices, technology providers or digital learning services.
Updated versions will be published on the IIEA Courses website, together with the applicable effective date.
Material changes may be communicated through appropriate channels where required.
Individuals with concerns about how their personal information is handled are encouraged to contact IIEA at info@iieacourses.com.
Individuals also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC), Kenya, in accordance with applicable data protection laws.
Website: https://www.odpc.go.ke
For questions, enquiries or requests relating to this Privacy Policy or the processing of personal information, please contact:
Insurance Institute of East Africa (IIEA)
IIEA Courses – Digital Learning Platform
Email: info@iieacourses.com
Website: https://www.iieacourses.com