Privacy Notice

This Privacy Notice is issued by Edify Eswatini ("Edify", "we", "us", "our"), the operator of this digital learning platform. We act as the data controller for the personal data described below.

• Account data: name, email address, login credentials (hashed).
• Profile and usage data: resources accessed, downloads, in-app activity, preferences.
• Support data: messages, attachments, and metadata you send us.
• Device and technical data: IP address, browser type, device identifiers, log data.
• Order data: products purchased, order references. Payment card details are collected and processed directly by our payment provider — we do not see or store them.

• Provide the service (account creation, granting access to purchased toolkits) — performance of a contract.
• Customer support — performance of a contract / legitimate interests.
• Security and fraud prevention — legitimate interests and legal obligation.
• Improving the platform (aggregate analytics) — legitimate interests.
• Marketing communications, where applicable — consent (you can withdraw it at any time).
• Compliance with tax, accounting, and other legal obligations — legal obligation.

• Paddle.com Market Ltd ("Paddle") — our Merchant of Record. Paddle handles payments, billing, invoicing, sales tax, refunds, and chargebacks on our behalf, and receives the personal data necessary to do so (including name, email, billing address, IP address, and order details). See Paddle's privacy policy at paddle.com/legal/privacy.
• Infrastructure and hosting providers (cloud hosting, database, file storage, email delivery) acting as processors under contract.
• Analytics and product tooling used to operate and improve the service.
• Professional advisers (legal, accounting) where necessary.
• Authorities or third parties where required by law or to protect our rights.

Some recipients (including Paddle and certain hosting providers) are located outside Eswatini. Where data is transferred internationally we rely on appropriate safeguards such as standard contractual clauses or recipients in jurisdictions recognised as providing adequate protection.

We keep personal data only as long as needed for the purposes set out above — typically for the life of your account plus a reasonable period afterwards to meet legal, tax, accounting, and dispute-resolution obligations. We then delete or anonymise it.

Subject to applicable law, you can request to access, correct, delete, restrict, or port your personal data, object to certain processing, or withdraw consent at any time. You may also lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us via the Contact page.

We use appropriate technical and organisational measures — including encryption in transit, access controls, and secure infrastructure — to protect your personal data. No system is fully secure, but we work to reduce risk and respond to incidents.

We use cookies and similar technologies that are strictly necessary to run the platform (authentication, security, preferences) and, where applicable, limited analytics to understand usage. You can manage cookies through your browser settings.

We may update this Privacy Notice from time to time. Material changes will be communicated through the platform or by email.

Questions about this Privacy Notice or your personal data? Reach us via the Contact page.