Privacy Policy
This policy explains what personal data Prosperminds collects through this website, why we collect it, how long we keep it, and what rights you have over it.
Last updated: 28 August 2026
Who we are
Prosperminds delivers professional training in public financial management, IPSAS and IFRS reporting, data analytics, automation and sustainability disclosure for the public sector. We are the data controller for the information described in this policy.
Our office is at Twiga Towers, Moi Avenue, Nairobi, Kenya. You can reach us at info@prosper-minds.com, or on +254 740 582302 or +254 741 174909, Monday to Friday, 8am to 5pm East Africa Time.
The law we work under
We handle personal data in line with the Kenya Data Protection Act 2019. Where a delegate or an enquirer is in the European Union or the United Kingdom, we also handle their data in line with the General Data Protection Regulation. Where the two differ, we apply the stricter standard.
What we collect, and why
When you register for a course
To reserve a place, raise an invoice and run the course, we collect the billing contact name, phone number, email address, organisation, country and billing address. For each delegate being registered we collect their name, email address and job title where you give it.
We also collect optional details that help us run the event properly: gender, meal preference, and any future topics you tell us you are interested in. You can leave these blank and still register.
Our lawful basis is the performance of a contract, because we cannot deliver a paid course or issue a valid invoice without this information. We ask for your explicit consent at the point of registration before we use your details for anything beyond running the course you booked.
When you enquire about sponsorship
We collect your name, organisation, email address, phone number, country, which events interest you, the sponsorship tier you are considering and whatever you write in the message field. We use it only to respond to your enquiry and to discuss a possible partnership. Our lawful basis is our legitimate interest in replying to a business enquiry you initiated.
When you subscribe to the newsletter
We store your email address and the date you subscribed. Nothing else. We use it to send course dates and early bird deadlines when they are confirmed. Our lawful basis is your consent, which you give by subscribing and can withdraw at any time using the unsubscribe link in any newsletter, or by emailing us.
When you contact us
If you use a contact form or email us, we keep your message and contact details so we can answer you and follow up if needed.
Cookies and analytics
We use one first party cookie of our own, named
pm_funnel_sid. It holds a randomly generated identifier, it
lasts 24 hours, and its only job is to let us count how many people who
open a registration page go on to complete it. We deliberately do not
store your IP address or your browser user agent alongside it, and it
carries no meaning outside our own conversion counts. It cannot be used to
identify you.
We also use Google Analytics and Google Ads to understand how people find and use the site and to measure the results of our advertising. These set their own cookies and send data to Google, which acts as a separate data controller for that information. You can read how Google handles it in the Google Privacy Policy.
Most browsers let you block or delete cookies in their settings. Blocking the analytics cookies does not stop you registering for a course or using any part of this site.
Who we share data with
We do not sell personal data, and we do not share it for anyone else's marketing. We share it only with service providers who help us run the business, and only to the extent they need it. These are our web hosting provider, our email delivery provider, our newsletter provider, and Google for the analytics and advertising described above. Each of them is bound to protect the data and to use it only on our instructions.
The map on our contact page is served by OpenFreeMap, an open map provider we chose specifically because it needs no account and does not track visitors. Loading the map sends your IP address to that provider, as any map does. If you would rather not load it, the full address is written out as text on the same page and the map is not needed to read it.
We may also disclose information where the law requires it, for example in response to a valid legal order.
Where data is stored
Our website and database are hosted on servers operated by our hosting provider. Some of our service providers, including Google, process data outside Kenya and outside the European Economic Area. Where that happens we rely on the safeguards those providers put in place for international transfers, such as standard contractual clauses.
How long we keep it
Registration and invoice records are kept for seven years, because tax and accounting rules require us to retain financial records for that period.
Sponsorship and general enquiries are kept for two years from our last contact with you, then deleted.
Newsletter subscriptions are kept until you unsubscribe. Once you unsubscribe we remove your address from the mailing list.
The analytics cookie described above expires after 24 hours. The conversion counts it produces are aggregate figures that do not identify anyone.
Your rights
You have the right to:
- ask what personal data we hold about you, and get a copy of it
- have inaccurate data corrected
- ask us to delete your data, where we are not required to keep it
- object to or ask us to restrict how we use it
- withdraw consent at any time, where we relied on consent
- ask us to transfer your data to another provider in a portable format
- complain to the Office of the Data Protection Commissioner in Kenya, or to your local supervisory authority if you are in the EU or UK
To use any of these rights, email info@prosper-minds.com. We will respond within the time the law allows, and we will not charge you for a reasonable request.
Keeping data secure
Access to registration records is limited to staff who need it, and is protected by individual accounts and passwords. The site is served over an encrypted HTTPS connection, and database credentials are held outside the published code. No system is perfectly secure, but we take these measures seriously and review them as the site changes.
Children
Our courses are for working professionals. This site is not directed at children, and we do not knowingly collect data about anyone under 18. If you believe we have, please contact us and we will delete it.
Changes to this policy
If we change how we handle personal data, we will update this page and change the date at the top. Where a change is significant, we will say so clearly rather than rely on you noticing.