LEGAL
Privacy Policy
How the Resilience Academy learning platform collects, uses, and protects your personal data — and the rights you have over it.
Contact us about your dataOn this page
This policy explains what we collect, why, who we share it with, and the rights you have. It applies to everyone who uses the Resilience Academy learning platform.
1. Who we are
The Resilience Academy is a partnership of Tanzanian universities (Ardhi University, University of Dar es Salaam, Sokoine University of Agriculture, State University of Zanzibar and the Institute of Rural Development Planning) and the University of Turku, Finland. This learning platform is operated by the University of Turku on behalf of the consortium, which acts as the data controller for the personal data processed here. Contact: resilienceacademyorg@gmail.com.
2. What we collect and why
We collect only what we need to run a learning platform: to create and secure your account, deliver courses and events, record your learning progress, issue verifiable certificates, keep the platform safe, and — with your consent — understand how the site is used.
- n
- Account and profile — name, e-mail address, username, password (stored hashed), and the optional details you add: phone/WhatsApp number, organisation, biography, photo, date of birth and ORCID iD. Legal basis: performance of a contract (providing your account). n
- Learning records — course enrolments, lesson completions, time spent on lessons, quiz and practical results, media you play, searches you run inside your account, event registrations and attendance, programme membership, and the certificates issued to you. Legal basis: performance of a contract; legitimate interest in reporting aggregate training outcomes to the consortium and its funders (always in aggregate, never your identifiable record). n
- Administrative records — audit log entries of administrative actions, and correspondence you send us. Legal basis: legitimate interest in running the platform securely and accountably. n
- Analytics — Google Analytics runs only after you accept analytics cookies in the consent banner. Declining changes nothing about how the platform works. Legal basis: consent, which you may withdraw at any time by clearing this site's cookies. n
3. Who we share data with
- n
- Google Analytics (Google Ireland Ltd) — usage statistics, only after consent. n
- Cloudflare Turnstile — bot protection on forms; processes technical browser signals. n
- YouTube (Google) — embedded lesson and event videos load from YouTube when you play them. n
- OpenAlex and ORCID — if you connect an ORCID iD, we look up your public publication records. n
- Anthropic — some submitted coursework may be checked with an AI review service; submissions are sent for the review only and are not used to train models. n
- E-mail delivery (SMTP) provider — sends the platform's notification e-mails to your address. n
We never sell personal data. Public pages never list user e-mail addresses. A certificate page names its holder, is reachable only by its direct verification link and is excluded from search-engine indexing.
4. How long we keep data
When an account is deleted, its personal data is removed from the platform; aggregate statistics that no longer identify you may be retained.
5. Your rights
Under the EU General Data Protection Regulation you may request access to, correction of, or deletion of your personal data; restriction of or objection to processing; and a portable copy of the data you provided. Where processing rests on consent you may withdraw it at any time. Write to resilienceacademyorg@gmail.com. You also have the right to lodge a complaint with a supervisory authority — in Finland, the Office of the Data Protection Ombudsman (tietosuoja.fi).
6. Cookies
The platform sets cookies that are strictly necessary for signing in, plus one cookie that remembers your consent choice. Google Analytics cookies are set only after you accept analytics in the banner — you can change your mind at any time from the “Cookie preferences” link at the bottom of any page.
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
wordpress_logged_in_*Authentication | Keeps you signed in | For your session | Essential |
wordpress_sec_*Authentication | Keeps your sign-in secure | For your session | Essential |
ra_consentPreference | Remembers your cookie choice | 12 months if accepted, 6 months if declined | Essential |
_ga, _ga_*Google Analytics | Distinguishes returning visitors, in aggregate only | Up to 2 years | Analytics — set only after you accept |
7. Changes
We will update this policy when the platform's processing changes, and note the date of the latest revision here. Last updated: 1 September 2026.
Questions about your data?
Email resilienceacademyorg@gmail.com