This Privacy Policy explains how KMG Vital Links (Pvt) Ltd ("KMG", "we", "us", "our") collects and processes personal data when you use Beyond Motivation at edu.kmgvitallinks.co.uk. We are committed to protecting your privacy and handling your data responsibly.
1. Data Controller
The data controller for Beyond Motivation is:
- KMG Vital Links (Pvt) Ltd
- Harare, Zimbabwe
- Email: legal@kmgvitallinks.co.uk
- Website: www.kmgvitallinks.co.uk
2. Information We Collect
2.1 Information you provide
- Registration data: Full name, email address, password (stored as a secure hash), phone number, country, and role (participant or coach).
- Profile information: Avatar, coaching goals, focus areas, and preferred currency.
- Coach credentials: Qualifications, ID document, professional experience, and bank/mobile money details for payment purposes.
- Payment data: Billing details entered during checkout. We do not store full card numbers โ these are handled directly by our payment processors.
- Communications: Messages sent through in-platform chat, support enquiries, or AI coaching conversations.
- Content: Session notes, reflections, discussion posts, and files you upload.
2.2 Information collected automatically
- Usage data: Pages viewed, sessions attended, time spent, and feature interactions.
- Device & browser data: IP address, browser type, operating system, screen resolution, and referring URL.
- Session data: Login timestamps, session duration, and activity logs.
- Cookies and local storage: See our Cookie Policy for full details.
3. How We Use Your Information
We use your data to:
- Create and manage your account.
- Deliver and personalise your coaching experience.
- Process enrolments and payments.
- Send transactional communications (receipts, enrolment confirmations, password resets).
- Send service announcements, policy updates, and promotional offers (you may opt out of marketing emails at any time).
- Provide and improve the Chiedza AI coaching companion.
- Detect and prevent fraud, abuse, and security incidents.
- Comply with our legal obligations under Zimbabwean law.
- Analyse platform usage to improve product features and coaching outcomes.
4. Legal Basis for Processing
We rely on the following legal bases:
- Contract performance: Processing necessary to fulfil your enrolment and deliver the service you purchased.
- Legitimate interests: Security monitoring, fraud prevention, analytics, and product improvement.
- Consent: For optional communications, analytics cookies, and AI coaching personalisation.
- Legal obligation: Where we are required to retain or disclose data under Zimbabwean law.
5. Sharing Your Information
We do not sell your personal data to third parties. We share data only in the following circumstances:
5.1 Payment processors
When you make a payment, your billing information is shared with the relevant payment provider. Each provider operates under its own privacy policy:
- Stripe (USD card payments) โ stripe.com/privacy
- PayFast (USD/ZAR) โ payfast.co.za
- Paynow Zimbabwe (ZWG) โ subject to Paynow's terms
- EcoCash (ZWG) โ subject to EcoCash's terms
- InnBucks (USD) โ subject to InnBucks' terms
5.2 Service providers
We use trusted third-party services to operate Beyond Motivation, including cloud hosting, email delivery (transactional), and analytics. These providers access only the data necessary to perform their function and are contractually bound to keep it confidential.
5.3 AI services
The Chiedza AI coaching companion is powered by Anthropic's Claude API. Your prompts and AI conversation content may be processed by Anthropic subject to Anthropic's Privacy Policy. We do not share your name or email with Anthropic.
5.4 Legal requirements
We may disclose your data to law enforcement, regulatory authorities, or courts in Zimbabwe where required by law or to protect the rights and safety of our users.
6. International Transfers
Beyond Motivation operates globally and some of our service providers (such as Stripe and Anthropic) are based outside Zimbabwe. Where data is transferred internationally, we take steps to ensure an adequate level of data protection is in place, including contractual safeguards.
7. Data Retention
We retain your personal data for as long as your account is active and for a reasonable period thereafter for legal, audit, and backup purposes. Specifically:
- Account data: retained until you request deletion, plus 12 months.
- Payment records: retained for 7 years to comply with financial record-keeping requirements.
- AI conversation logs: anonymised and retained for up to 90 days for quality improvement.
- Server logs: retained for 30 days.
8. Your Rights
Subject to Zimbabwean data protection law, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Delete your data ("right to be forgotten") โ note that some data must be retained for legal reasons.
- Restrict or object to certain processing activities.
- Portability โ receive your data in a common machine-readable format.
- Withdraw consent at any time where processing is based on consent.
To exercise these rights, contact legal@kmgvitallinks.co.uk. We will respond within 30 days.
9. Children's Privacy
Beyond Motivation is intended for users aged 13 and over. Users under the age of 18 must obtain parental or guardian consent before registering. If we become aware that we have inadvertently collected personal data from a child under 13 without parental consent, we will delete that data promptly. Parents or guardians may contact us at info@kmgvitallinks.co.uk with concerns.
10. Security
We implement industry-standard security measures including HTTPS/TLS encryption, password hashing (bcrypt), server-side access controls, and regular security reviews. No system is entirely risk-free; if you believe your account has been compromised, contact us immediately.
11. Cookies
We use cookies and similar technologies to operate the platform and, with your consent, to collect analytics data. For full details, see our Cookie Policy.
12. Third-Party Links
Beyond Motivation may contain links to external websites, including the KMG Vital Links corporate site (www.kmgvitallinks.co.uk) and payment providers. We are not responsible for the privacy practices of those websites and encourage you to read their privacy policies.
13. Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be notified by email or in-platform notification. The "Last updated" date at the top of this page will always reflect the most recent revision.
14. Contact Us
For all privacy-related enquiries, data subject requests, or complaints:
- KMG Vital Links (Pvt) Ltd โ Data Privacy Team
- Email: legal@kmgvitallinks.co.uk
- Website: www.kmgvitallinks.co.uk