Privacy Policy

Lucati Ventures Limited is committed to protecting the personal data of all users, in compliance with the Kenya Data Protection Act, 2019. This Privacy Policy explains how we collect, use, store, and protect your personal information.

We may collect and process the following personal data:

For Mentees:

• Full name
• Contact details (email, phone number)
• Educational background
• CVs, cover letters, academic transcripts
• Location data
• Profile photos (if uploaded)
• Account login information

For Employers:

• Organization name
• Contact details
• Organization description and year founded
• Organization departments and size
• Organization logo
• Organization remote work policy
• Social media and website links
• Account login information

For All Users:

• IP address
• Browser/device information
• Application/Posting history

We process your data based on:

• Consent – when you create an account or submit information
• Performance of a contract – to deliver quality mentorship services
• Legal obligation – to comply with regulations
• Legitimate interests – to improve service quality and security

Your personal data is used to:

• Provide appropriate and personalized guidance to Mentees
• Enable BridgeHub Solutions to review applications
• Improve our platform and services
• Send important notifications and updates
• Respond to queries and feedback
• Ensure legal and regulatory compliance

We only share data:

• With registered employers, seeking to recruit the programme graduates
• With mentees, when interested employers send vacancies.
• With trusted third-party service providers (e.g., email services) to send automatic emails
• When required by law or regulatory authority

We do not sell your personal data to any third parties.

We only share data:

• With registered employers, seeking to recruit the programme graduates
• With mentees, when interested employers send vacancies.
• With trusted third-party service providers (e.g., email services) to send automatic emails
• When required by law or regulatory authority

We do not sell your personal data to any third parties.

At Lucati Ventures Limited, we take data protection seriously and have implemented technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction.

Our platform follows modern security practices. Specific measures we use include:

Technical Safeguards

• Secure Sockets Layer (SSL) - All data exchanged between your browser and our servers is encrypted using HTTPS.
• Hashed Passwords - User passwords are stored using industry-standard hashing algorithms.
• Database Security - Data is stored in a secure database with restricted access and routine backups.
• Access Controls - Role-based permissions are enforced to prevent unauthorized data access.
• Protection Against Common Attacks: Our Django setup includes built-in protection against:
  • Cross-Site Scripting (XSS)
  • Cross-Site Request Forgery (CSRF)
  • SQL Injection
  • Clickjacking

Organizational & Administrative Safeguards

• Staff Access Restriction - Only authorized staff members with a need-to-know basis can access user data.
• Regular Updates - Our systems are routinely updated with the latest security patches.

Despite these efforts, no online service can guarantee 100% security. Users are encouraged to:

• Use strong, unique passwords
• Log out of their accounts after use
• Avoid sharing login credentials with others

If you suspect any security breach or unauthorized access to your account, please contact us immediately at privacy@bridgehubsolutions.com

Under the Kenya Data Protection Act, you have the right to:

• Access your personal data
• Correct inaccurate or outdated information
• Request deletion of your data
• Object to certain forms of processing
• Withdraw your consent at any time
• Lodge a complaint with the Office of the Data Protection Commissioner (ODPC)

To exercise any of these rights, contact us at the details below.

privacy@bridgehubsolutions.com

This Policy is prepared in accordance with the Data Protection Act, 2019 (Kenya), which govern the collection, processing, storage, and sharing of personal data.

Lucati Ventures Limited commits to processing personal data lawfully, fairly, and transparently in line with the Kenya Data Protection Act, 2019.