Privacy Policy

Last revised: September 2026

KuduGuide (“we”, “us”, “the Operator”) collects personal data from its users. This policy explains what we collect, why we collect it, who processes it, and what rights you have. We apply it in line with the data protection laws that apply in your country of residence.

1. Types of Data Collected

The categories of personal data we collect include, among others:

Trackers (cookies and similar technologies)
Usage data
Number of users and session statistics
City and approximate geographic coordinates (latitude and longitude)
Device details and browser information
Unique advertising identifiers
Email address (when you contact us or subscribe)

Detailed information about each category is provided in the relevant sections of this policy, or through specific explanatory text shown before the data is collected.

Personal data may be provided voluntarily by you, or collected automatically in the case of usage data (including when you use our benefit eligibility tools and course search features). Refusing to provide mandatory data may prevent us from delivering the service. Where data is not mandatory, you may choose not to share it without affecting the availability of the service.

Cookies and other tracking tools are used to provide the service you request and for the additional purposes described in this document and in our cookie notice.

You are responsible for any third-party personal data you obtain, publish or share through KuduGuide, and you confirm that you have that third party’s consent to provide their data to us.

2. How and Where Data Is Processed

Methods of processing

We process your data appropriately and apply security measures designed to prevent unauthorised access, disclosure, alteration or destruction. Processing is carried out using computers and IT tools, following procedures tied to the purposes stated in this policy.

In addition to the Operator, data may be accessible to certain authorised people involved in running the website (administration, sales, marketing, legal and systems) or to external processors (technical service providers, hosting providers, IT providers, communications agencies). An up-to-date list of these parties may be requested from us at any time.

Lawful basis for processing

We may process your personal data where at least one of the following applies:

You have given consent for one or more specific purposes.
Processing is necessary to perform a contract with you, or to take steps at your request before entering into a contract.
Processing is necessary to comply with a legal obligation we are subject to.
Processing is necessary for a task carried out in the public interest.
Processing is necessary for the legitimate interests pursued by us or by a third party, provided those interests are not overridden by your rights and freedoms.

Place of processing and international transfers

Data is processed at our offices and at any other place where the parties involved in the processing are located. Because we use international service providers (analytics, hosting, advertising), your data may be transferred to, and stored in, countries other than your own.

Where data is transferred across borders, we take steps to ensure it receives an adequate level of protection — for example through contractual safeguards with the recipient, or by relying on the recipient being subject to laws or binding rules that provide comparable protection. You have the right to ask us about the basis for any such transfer and the safeguards applied.

Retention period

Personal data is processed and stored for as long as necessary for the purpose it was collected for, or for as long as required by an applicable legal or regulatory obligation. Once the retention period ends, the data is deleted or anonymised.

3. Purposes of Processing

We collect your data in order to provide our service (information about government benefit programmes and free vocational and professional courses), to meet our legal obligations, to respond to enquiries, to protect our rights and interests, to detect fraudulent or malicious activity, and for the following purposes: analytics, advertising, tag management, remarketing, displaying external content, performance testing, hosting, and session recording.

4. Detailed Information on Processing

Personal data is collected for the following purposes, using the following services.

Analytics and statistics

These services allow us to monitor and analyse web traffic and to understand how users behave on the site.

Google Analytics 4 (Google LLC) — Web analytics service. Google uses the data to track use of KuduGuide, prepare reports, and provide context for advertising. IP addresses are anonymised. Data processed: usage data, trackers, device information, city, latitude/longitude.
Google Analytics demographic reports — Provides age and gender data for advertising reporting.
TikTok conversion tracking (TikTok Inc.) — Connects data from the TikTok advertising network with actions taken on the site.
Meta Pixel (Meta Platforms, Inc.) — Tracks conversions attributable to advertising on Facebook and Instagram.
Google Ads and Pinterest conversion tracking — Services that link advertising networks to actions taken on our site.
Hotjar Form Analysis and Conversion Funnels (Hotjar Ltd.) — Analyses interaction with our eligibility and search forms. Honours browser “Do Not Track” requests.

Tag management

Helps us manage the tags and scripts the site needs from a single place.

Google Tag Manager (Google LLC) — Data processed: usage data, trackers.

Heat mapping and session recording

These services show which areas of the site users interact with most, so we can improve usability.

Hotjar Heat Maps and Recordings (Hotjar Ltd.) — Allows us to visualise the user journey. Honours the browser “Do Not Track” setting.

Advertising

Allows data to be used for advertising communications, displayed as banners on KuduGuide.

Google AdSense and Google Ad Manager (Google LLC) — Use advertising cookies to track behaviour in relation to ads. You can turn these cookies off through Google’s ad settings.
Google Funding Choices — Consent management platform used to collect and manage consent for advertising cookies.

Remarketing and behavioural targeting

These services let us deliver and optimise advertising based on your past use of KuduGuide.

Google Ads Remarketing, Meta Custom Audiences, and TikTok Remarketing — Use trackers to reach users who have already visited the site. You can opt out through the settings of each platform.

Performance testing (A/B testing)

We may run tests on changes to the site’s structure or wording to see which version works better. Data processed: usage data and trackers.

5. Children

KuduGuide is not directed at children, and we do not knowingly collect personal data from children below the age at which consent can be given independently under the law that applies to them. Where a child’s data is collected, we require the consent of a parent or legal guardian. If you believe a child has provided us with personal data, contact us and we will delete it.

6. Your Rights

Subject to the data protection law that applies to you, you have the right to:

Withdraw consent at any time, where processing is based on consent.
Object to processing, particularly where processing is carried out for direct marketing purposes.
Access your data and obtain a copy of the data being processed.
Correct inaccurate or incomplete data.
Restrict processing — we would store your data without further processing it.
Delete your data, where there is no overriding legal reason for us to keep it.
Request portability of your data to another controller, where technically feasible.
Object to automated decision-making, including profiling, that produces legal or similarly significant effects for you.
Lodge a complaint with the data protection authority responsible for your country of residence.

How to exercise these rights

Any request can be sent to the contact email address at the end of this document. Requests are handled free of charge and answered within the timeframe required by the law that applies to you, and in any case within one month of receipt. We may ask you to verify your identity before acting on a request.

7. Additional Information

Legal defence. Your data may be used to defend our legal rights in the event of misuse of the site or of related services.

System logs and maintenance. For operational and maintenance purposes, KuduGuide may collect log files recording information such as your IP address.

Changes to this policy. We may update this policy at any time, and we recommend checking this page regularly. Where changes affect processing that is based on your consent, we will ask for consent again.

8. Definitions

Personal Data — Any information that identifies, directly or indirectly, a natural person.

Usage Data — Information collected automatically by the site (IP addresses, pages visited, time spent, and similar).

User — The person using KuduGuide, corresponding to the Data Subject.

Data Subject — The natural person to whom the Personal Data refers.

Processor / Operator — The person or entity that processes data on behalf of the Controller.

Controller — The person or entity that determines the purposes and means of processing personal data.

Cookie / Tracker — Small files or technologies that allow a user to be tracked by storing or accessing information on their device.

9. Contact

For any question about this policy or to exercise your rights, contact us at:

[contact@yoursite.com]