We respect your privacy and handle your personal data in line with the Data Protection Act, 2019 of Kenya. This policy explains what we collect, why, who we share it with, how long we keep it, and the rights you have.
1. Who is responsible for your data
We are the data controller for the personal data you provide to us. Our contact details, including how to reach us about privacy, are at the end of this page.
2. What we collect
- Identity & contact data — name, email, phone number, physical/residential address.
- Student data — the learner's name and age (often a minor), instrument, level, lesson schedule, lesson plans, progress notes and practice records.
- Billing & payment data — invoices, the mobile number used for M-Pesa, and payment confirmations. We do not store your M-Pesa PIN or full card details.
- Account data — portal login details and activity.
- Technical data — IP address, device/browser information and cookies (see our Cookie Policy).
- Communications — emails, SMS and messages you exchange with us.
3. How we use it (and our lawful basis)
- To provide lessons, schedule sessions and manage your enrolment — to perform our contract with you.
- To invoice and take payment (including M-Pesa) — contract and our legitimate interest in being paid.
- To contact you about lessons, scheduling, invoices and lesson plans by email, SMS and phone — contract and legitimate interest.
- To send you marketing about our services — with your consent, which you can withdraw at any time.
- To improve and secure the website and portal — legitimate interest.
- To meet legal, tax and accounting obligations — legal obligation.
4. Children's data
Many of our students are children. We only collect a child's data with the consent and involvement of a parent or guardian, and use it solely to deliver and support their lessons. Please also see our Child Protection & Safeguarding Policy and Photo & Media Consent.
5. Who we share it with
We share data only as needed to run our service, with providers acting on our instructions:
- Safaricom (M-Pesa / Daraja) — to process mobile-money payments.
- Our email provider — to send transactional and portal email.
- Our SMS provider — to send lesson, invoice and payment notifications.
- Hosting and analytics providers — to run and understand the website.
- Your assigned tutor — to deliver and plan your lessons.
We may also disclose data where required by law. We do not sell your personal data.
6. How long we keep it
We keep personal data only as long as necessary for the purposes above — for the duration of your enrolment and afterwards as needed for our legitimate business, tax and legal requirements — then delete or anonymise it.
7. How we protect it
We use appropriate technical and organisational measures to protect your data, including access controls and encryption in transit. No system is completely secure, so we cannot guarantee absolute security.
8. Your rights
Under the Data Protection Act, 2019 you have the right to be informed, and to access, correct, delete, restrict or object to our processing of your data, and to data portability. You can also withdraw consent for marketing at any time. To exercise any right, contact us using the details below. You have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya.
9. Changes to this policy
We may update this policy from time to time. The current version is always published on this page with the date it was last updated.
Contact us
Questions about this policy? Contact MuSKe Musicians Portal LTD:
Email: info@muske.co.ke
Phone: 0736600033
Nairobi, Nairobi, Kenya