Privacy & Data Use Policy
Last updated: 31 May 2026
This policy applies to users in Uganda, Kenya, Tanzania, Rwanda, and all other jurisdictions in which StudyPath operates.
1. Who we are
StudyPath is a study-abroad guidance platform operated from Kampala, Uganda. We help students in East Africa discover, evaluate, and apply to university programmes overseas. References to "StudyPath", "we", "us", or "our" in this policy mean the StudyPath platform and its operators.
2. What data we collect
Your name, email address, and password (stored as a one-way hash) when you create an account.
Date of birth, gender, nationality, citizenship, and country of residence, as entered in your student profile.
Qualification type, institution name, graduation year, grading system, raw scores, and normalised scores. You may also upload supporting documents such as transcripts and certificates, which are stored securely and never shared publicly.
Test type, overall score, sub-scores, test date, certificate number, and any uploaded certificate document.
Annual study budget, currency, sponsor type, family income, and preferences regarding scholarships, loans, and work rights.
Mobile money transaction references and status records when you use Yo Uganda to pay for a subscription. We do not store full mobile money account numbers.
Pages visited, features used, match results viewed, and timestamps, collected automatically via server logs and session data.
Messages you send us via the contact form, including your name, email address, and the content of your message.
3. How we use your data
-
To create and maintain your student account.
-
To calculate and display programme match scores personalised to your profile.
-
To process subscription payments via Yo Uganda.
-
To send transactional emails (account verification, password reset, payment confirmation).
-
To respond to enquiries and support requests submitted via the contact form.
-
To improve the accuracy of the matching algorithm using aggregated, anonymised usage patterns.
-
To comply with our legal obligations under applicable data protection laws.
4. Legal basis for processing
We process your personal data on the following legal bases: (a) Contract — processing necessary to provide the StudyPath service you have signed up for; (b) Consent — where you have explicitly provided consent, such as for optional communications; (c) Legitimate interests — for platform security, fraud prevention, and service improvement; (d) Legal obligation — where required by applicable law. You may withdraw consent at any time without affecting the lawfulness of prior processing.
5. Who we share your data with
We do not sell your personal data to third parties. We may share data with:
-
Yo Uganda Limited — solely for the purpose of processing mobile money payments.
-
Email delivery providers — to send transactional and notification emails on our behalf.
-
Hosting and infrastructure providers — who store and process data on our behalf under data processing agreements.
-
Law enforcement or regulatory authorities — where required by applicable law or court order.
We do not share your personal data with universities, scholarship bodies, or education agents without your explicit consent.
6. Data storage and security
Your data is stored on servers located in [specify region]. We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure, including encrypted storage of uploaded documents, hashed passwords, and access controls limiting staff access to personal data.
7. International data transfers
Because StudyPath operates across multiple countries and references university data from Australia, Canada, the United Kingdom, Germany, and other jurisdictions, some data processing may involve cross-border transfers. Where such transfers occur, we apply appropriate safeguards consistent with applicable data protection laws.
8. How long we keep your data
-
Account and profile data — retained for as long as your account is active, plus 12 months after account deletion to allow for dispute resolution.
-
Uploaded documents — deleted within 30 days of account deletion upon request.
-
Payment records — retained for 7 years in accordance with financial record-keeping requirements.
-
Contact form messages — retained for 24 months.
-
Server logs — retained for 90 days.
9. Your rights
Depending on your country of residence, you have some or all of the following rights under applicable data protection law:
Right of access
Request a copy of the personal data we hold about you.
Right to rectification
Request correction of inaccurate or incomplete data.
Right to erasure
Request deletion of your personal data, subject to legal retention obligations.
Right to restrict processing
Request that we limit how we use your data in certain circumstances.
Right to data portability
Receive your data in a structured, machine-readable format.
Right to object
Object to processing based on legitimate interests.
Right to withdraw consent
Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, please use our contact form and select "Data Access / Rights Request" as the subject. We will respond within 30 days.
10. Cookies
StudyPath uses cookies to maintain your login session and protect against cross-site request forgery. Please see our Cookie Policy for full details.
11. Children
StudyPath is intended for users aged 16 and above. We do not knowingly collect personal data from children under 16. If you believe a child has provided us with personal data, please contact us immediately.
12. Changes to this policy
We may update this policy from time to time. We will notify registered users of material changes by email. Continued use of StudyPath after notification constitutes acceptance of the updated policy.
13. Contact and complaints
For any privacy-related enquiry or to exercise your data rights, please use our contact form. If you are not satisfied with our response, you have the right to lodge a complaint with the relevant data protection authority in your country of residence.
Questions? Contact us