Privacy Policy

Effective Date: October 15, 2020 Last Updated: March 20, 2026

At JFT Academy, we are committed to protecting your privacy while sharing knowledge and resources on groundwater science, water security, climate resilience, science communication, mentorship (particularly empowering girls and emerging professionals in STEM/geoscience), and bridging science to policy and practice.

This Privacy Policy explains how Dr. Florence Tanui (operating as JFT Academy, the “Data Controller,” “we,” “us,” or “our”) collects, uses, shares, and safeguards your personal information when you visit our website https://jftacademy.com (the “Website”), subscribe to our newsletter, download resources, enrol in courses or mentorship, register for workshops or public talks, listen to our podcast, contact us, or engage with our other services.

We process your data in accordance with the Kenya Data Protection Act, 2019, the Data Protection (General) Regulations, 2021, and other applicable laws. By using the Website or our services, you agree to the practices described here. If you do not agree, please do not provide personal information or use our services.

Who we are

JFT Academy is my personal professional portfolio and online platform, managed by Dr. Florence Tanui. It serves as a dedicated space to share knowledge, insights, and resources on groundwater science, water security, climate resilience, science communication, mentorship (particularly empowering girls and emerging professionals in STEM/geoscience), and bridging science to policy and practice.

This platform reflects my individual expertise and passion as a groundwater specialist and educator. It is separate from and unrelated to my professional employment with my current employer or any other organisation. All content, activities, and interactions here are conducted in my personal capacity.

Data Controller Contact: Email: [info@jftacademy.com] Location: Nairobi, Kenya

Site Logo

This logo is intended for exclusive use across the JFT Academy website (jftacademy.com), social media profiles, podcast artwork, newsletter headers, course certificates, premium policy briefs, workshop materials, email signatures, and any other related communications or branded assets. It may not be reproduced, modified, or used for any purpose without prior written permission from Dr. Florence Tanui.

What Personal Information We Collect

We collect only the information necessary to provide our services:

Contact and Identity Information — Name, email address, phone number (optional), country or location, profession or organisation (from newsletter sign-ups, contact forms, mentorship applications, course enrolments, workshop registrations).
Professional or Educational Details — Career background, academic interests, goals, or experience in geoscience/STEM (mainly for mentorship or training requests).
Technical and Usage Data — IP address, browser type, device details, pages visited, time of access (collected automatically for site improvement and security).
Communication Data — Messages, questions, feedback, or files you send us.
Payment Information (if you purchase premium policy briefs, courses, or training) — Billing details processed securely by third-party providers (we do not store full card numbers).

We do not intentionally collect sensitive personal data (e.g., health, ethnicity, biometric information) unless you voluntarily provide it in a mentorship or course context and give explicit consent.

How We Collect Your Information

Directly from you (e.g., when you fill out a form, subscribe, apply for mentorship, enrol in a course, or register for an event).
Automatically (e.g., through cookies, server logs, or analytics tools).
From third parties (e.g., payment processors or email service providers, only as needed and with appropriate safeguards).

Why We Use Your Information (Purposes and Lawful Basis)

We use your data only for specific, lawful purposes:

To deliver the Website, blog posts, podcast episodes, and free educational resources (legitimate interests).
To send newsletters, updates, or educational content (consent — you can unsubscribe or withdraw consent at any time).
To manage mentorship applications, course enrollments, workshop registrations, training, or certificate issuance (contract or consent).
To respond to your inquiries, feedback, or requests (legitimate interests or contract).
To process payments for premium content or services (contract).
To analyze site usage, improve services, and ensure security (legitimate interests).
To comply with legal obligations (e.g., record-keeping or responding to authorities).

Who We Share Your Information With

We do not sell your personal data. We share it only when necessary and with safeguards:

With trusted service providers (data processors), such as email platforms (e.g., Mailchimp or Substack), course hosting tools (e.g., Teachable or Thinkific), payment gateways, or analytics providers — all bound by contracts ensuring compliance with the DPA.
With event partners or collaborators (e.g., for joint workshops) — only with your consent.
If required by law, court order, or to protect rights and safety.

We do not transfer data outside Kenya unless adequate protections are in place (e.g., contractual safeguards) or you explicitly consent.

Cookies and Similar Technologies

We use cookies and similar technologies for essential functions (e.g., site performance), analytics, and user preferences. Essential cookies do not require consent; others do. You can manage or disable them via your browser settings or our cookie banner (if enabled).

How Long We Keep Your Information

We retain your data only as long as necessary for the purposes outlined:

Newsletter subscribers: Until you unsubscribe or withdraw consent.
Course, mentorship, workshop, or training records: For the duration of the engagement plus up to 5 years (for verification, certificates, or follow-up support).
Inquiries or contact records: 1–2 years or as required for legitimate purposes.
Technical/usage data: Typically 12–26 months (often aggregated or anonymized).

After the retention period, we securely delete or anonymise the data.

Your Rights

Under the Data Protection Act, you have important rights, including:

Access to the personal data we hold about you.
Correction of inaccurate or incomplete data.
Erasure of your data (right to be forgotten, subject to legal exceptions).
Restriction of or objection to processing (e.g., stopping marketing communications).
Withdrawal of consent at any time (without affecting prior processing).
Data portability (where technically feasible).
Lodging a complaint with the Office of the Data Protection Commissioner (odpc.go.ke).

To exercise these rights, contact us at [info@jftacademy.com] with proof of identity. We will respond within 14 days (or longer if the request is complex).

Security of Your Information and Privacy

We implement reasonable technical and organisational measures (e.g., encryption, secure hosting, access controls) to protect your data from unauthorised access, loss, alteration, or misuse. While we strive for high security, no system is entirely risk-free. If a personal data breach occurs, we will notify you and the ODPC as required by law.

Children’s Privacy

Our services are not directed at children under 18. We do not knowingly collect personal data from minors without verifiable parental or guardian consent.

Changes to This Privacy Policy

We may update this Privacy Policy as our practices evolve or laws change. Updates will be posted here with a revised effective date. Your continued use of the Website or services after changes constitutes acceptance.

Contact Us

For questions, rights requests, concerns, or to exercise your data protection rights: Email: [info@jftacademy.com] Subject line: Privacy Query

Thank you for trusting me with your information. JFT Academy is dedicated to handling your data responsibly while supporting education, mentorship, and the safeguarding of groundwater and water resources.

………………………………………………..End of Privacy Policy………………………………………………………………