3. Information We Collect
3.1 Information You Provide Directly
We collect information that you voluntarily provide when registering for or using the Platform, including:
a) Identity data: full name, professional title, designation, and profile photograph;
b) Contact data: email address, phone number, and professional contact details;
c) Account credentials: username, password (stored in encrypted form), and authentication tokens;
d) Professional data: qualifications, work experience, areas of expertise, certifications, and credentials;
e) Program data: mentor program content, learning materials, assignments, quiz submissions, rubric evaluations, and associated program metadata;
f) Communication data: messages, announcements, feedback, and correspondence submitted through the Platform;
g) Registration data: organisation name, role, and any information submitted during the registration process.
3.2 Information Collected Automatically
When you access the Platform, we may automatically collect:
a) Usage data: pages visited, features accessed, session duration, click patterns, and navigation paths;
b) Device and technical data: IP address, browser type and version, operating system, device identifiers, and screen resolution;
c) Log data: server logs, error reports, and diagnostic information;
d) Cookie and tracking data: as described in our Cookie Policy.
3.3 Mentor Program Data
The Platform is specifically designed to facilitate structured mentoring programs. In this context, we collect and process:
a) Mentor profile data: biographical information, expertise areas, program offerings, and availability;
b) Mentee data: learning progress, assignment submissions, quiz results, performance evaluations, and program participation records;
c) Program content data: curriculum materials, lesson content, learning resources, and program frameworks created by mentors;
d) Interaction data: session records, feedback exchanges, and mentoring activity logs;
e) Assessment data: rubric evaluations, graded submissions, and performance analytics.
3.4 Third-Party Data
We may receive information about you from third-party sources, including:
a) Identity verification services;
b) Professional networking platforms (where you choose to connect);
c) Client organisations that register their employees on the Platform.
9. Maintenance of Data Privacy
9.1 Privacy by Design
Skill Vault is committed to embedding privacy considerations into the design and operation of the Platform. We aim to:
a) Collect only the minimum data necessary for the stated purposes;
b) Implement appropriate technical and organisational safeguards;
c) Provide users with meaningful control over their personal data;
d) Maintain transparency about our data practices.
9.2 Data Minimisation
We collect and process only the personal data that is necessary for the purposes described in this Policy. We periodically review our data collection practices to ensure we are not collecting excessive or unnecessary data.
9.3 Access Controls
Access to personal data within Skill Vault is restricted to authorised personnel who require access to perform their job functions. We maintain internal policies and procedures governing data access, handling, and disposal.
9.4 Vendor Management
Third-party service providers who process personal data on our behalf are subject to contractual data processing agreements that require them to implement appropriate security measures and process data only in accordance with our instructions.
9.5 Incident Response
In the event of a data security incident that affects your personal data, Skill Vault will:
a) Take prompt steps to contain and remediate the incident;
b) Notify affected users as required by applicable data protection laws;
c) Cooperate with relevant regulatory authorities as required.
9.6 Ongoing Review
We periodically review and update our privacy practices to reflect changes in applicable law, technology, and our business operations. We encourage you to review this Policy periodically for updates.