Last Updated: 1 October 2026
Introduction
ISIH GLOBAL LEARNING (“ISIH Global Learning”, “we”, “us” or “our”) is an online learning platform operated by IRINGA STRATEGIC INVESTMENT HOLDINGS LIMITED, Tanzania.
We respect your privacy and are committed to protecting personal data entrusted to us. This Privacy Policy explains how we collect, use, store, disclose and protect personal data when you visit isihgloballearning.com, create an account, purchase or enrol in a course, participate in learning activities, obtain certificates, communicate with us or otherwise use our services.
We process personal data in accordance with applicable data protection laws and regulations in the United Republic of Tanzania, including the Personal Data Protection Act, Cap. 44, and other applicable legal requirements.
1. Personal Data We May Collect
Depending on how you interact with ISIH GLOBAL LEARNING, we may collect and process the following categories of personal data:
a. Identity and Account Information
This may include your name, username, account details and other information required to create and maintain your learner account.
b. Contact Information
This may include your email address, telephone number, postal address, billing address and other contact details you provide.
c. Course and Learning Information
This may include courses purchased or assigned to you, enrolment information, course participation, learning progress, assessment results, completion status, certificates and related training records.
d. Transaction and Payment Information
When you purchase a course or service, we may process information relating to your order, transaction, payment status, billing details, currency and payment method. Payment card, mobile-money or banking information may be processed directly by authorised third-party payment service providers where applicable.
e. Communications
We may collect information contained in enquiries, support requests, emails, contact forms, feedback and other communications between you and ISIH GLOBAL LEARNING.
f. Technical and Usage Information
We may collect technical information such as your IP address, browser type, device information, operating system, website activity, access times, system logs and similar information necessary for security, functionality and improvement of the Platform.
g. Cookies and Similar Technologies
Our Website may use cookies and similar technologies to enable essential website functions, maintain user sessions, improve user experience, understand website usage and support security. Where required, we will obtain consent before using non-essential cookies.
2. How We Collect Personal Data
We may collect personal data:
- Directly from you when you create an account, purchase or enrol in a course, complete forms or contact us;
- Automatically when you access or use the Website;
- Through learning and course-management systems as you participate in courses;
- From authorised payment service providers in relation to transaction status;
- From organisations that lawfully purchase, assign or administer training on behalf of their learners or employees; and
- From authorised service providers and business partners where permitted by law.
3. Purposes for Processing Personal Data
We may use personal data to:
- Create, administer and secure learner accounts;
- Process course purchases, enrolments and payments;
- Provide access to courses and learning materials;
- Monitor course participation, progress and completion;
- Administer assessments and issue or verify certificates;
- Provide learner support and respond to enquiries;
- Communicate important information about accounts, courses, transactions or services;
- Maintain financial, administrative and training records;
- Prevent fraud, misuse, security incidents and unauthorised access;
- Maintain, analyse and improve our Website, LMS and Services;
- Comply with legal, regulatory, accounting and contractual obligations; and
- Establish, exercise or defend legal rights where necessary.
4. Legal Basis for Processing
We process personal data only where there is an appropriate lawful basis. Depending on the circumstances, processing may be necessary:
- To perform a contract with you or take steps requested before entering into a contract;
- To comply with a legal or regulatory obligation;
- For legitimate and lawful business purposes that do not improperly override your privacy rights;
- To protect legitimate interests or legal rights; or
- Where required, on the basis of your consent.
Where processing is based on consent, you may withdraw that consent subject to applicable law.
5. Course Providers and Third-Party Content
Some courses, learning materials, accreditation services or related educational content available through ISIH GLOBAL LEARNING may be supplied or licensed by authorised third-party training or content providers.
Where necessary to deliver a course or related service, limited personal data may be processed by or shared with authorised service providers under appropriate contractual, confidentiality and data-protection arrangements.
6. Payment Processing
Payments for courses and services may be processed through authorised third-party payment gateways, banks, mobile-money providers or other payment service providers available on the Platform.
Such providers may collect and process payment information in accordance with their own privacy policies and applicable laws.
ISIH GLOBAL LEARNING does not require users to provide payment information through unofficial channels.
7. Sharing and Disclosure of Personal Data
We do not sell personal data. We may share personal data only where reasonably necessary and lawful, including with:
- Authorised LMS, hosting and technology service providers;
- Course and educational-content providers where necessary to deliver services;
- Payment gateways, banks and payment service providers;
- Professional advisers, auditors and other authorised service providers;
- Organisations administering training for their authorised learners or employees, where applicable;
- Regulatory, judicial, law-enforcement or governmental authorities where disclosure is legally required; and
- Another organisation in connection with a lawful corporate restructuring, merger, acquisition or transfer of business, subject to appropriate safeguards.
Recipients are expected to process personal data only for authorised purposes and subject to applicable confidentiality and data-protection requirements.
8. International and Cross-Border Data Transfers
Our Website, LMS and supporting technology may involve authorised service providers, course providers, hosting services or technology infrastructure located outside Tanzania.
Where the provision of our services requires personal data to be transferred, accessed, stored or otherwise processed outside Tanzania, ISIH GLOBAL LEARNING will take appropriate measures to ensure that such processing and transfer are carried out in accordance with applicable Tanzanian data-protection laws and regulatory requirements.
Where regulatory approval, authorisation or a cross-border data transfer permit is required, the necessary approval, authorisation or permit will be obtained before the relevant transfer is undertaken.
We will also take reasonable steps to ensure that appropriate contractual, organisational and technical safeguards are implemented to protect personal data transferred or processed outside Tanzania.
Where appropriate and required by applicable law, data subjects will be informed about relevant international transfers and the safeguards applied to protect their personal data.
9. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and to satisfy applicable legal, regulatory, contractual, accounting, dispute-resolution and record-keeping requirements.
Different categories of information may therefore be retained for different periods.
When personal data is no longer required, we will take reasonable steps to securely delete, anonymise or otherwise dispose of it in accordance with applicable requirements.
10. Data Security
We implement reasonable technical and organisational safeguards designed to protect personal data against accidental or unlawful loss, misuse, alteration, unauthorised access, disclosure or destruction.
These safeguards may include access controls, authentication measures, secure hosting, system monitoring, restricted administrative access and other appropriate security practices.
However, no internet-based system can guarantee absolute security, and users are responsible for maintaining the confidentiality of their account credentials.
11. Your Data Protection Rights
Subject to applicable law and any lawful limitations, you may have rights concerning your personal data, including the right to:
• Be informed about the collection and processing of your personal data;
• Request access to personal data held about you;
• Request correction of inaccurate or incomplete personal data;
• Request erasure or destruction of personal data where legally applicable;
• Request restriction of certain processing;
• Object to certain processing of your personal data;
• Request data portability where applicable;
• Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before the withdrawal;
• Raise concerns regarding decisions based solely on automated processing where applicable;
• Seek compensation where provided for under applicable law;
• Request transmission of personal data where such a right is provided under applicable law;
• Lodge a complaint concerning the collection, use, disclosure or other processing of your personal data; and
• Exercise any other rights available to you under applicable Tanzanian data-protection laws and regulations.
To exercise any applicable data-protection right, please contact ISIH GLOBAL LEARNING using the contact details provided in Section 17 of this Privacy Policy.
We may request reasonable information to verify your identity before processing a request. This is intended to help ensure that personal data is not disclosed, altered or deleted at the request of an unauthorised person.
We will consider and respond to valid requests in accordance with applicable legal and regulatory requirements. Certain rights may be subject to lawful exemptions or limitations, including where retention or processing of particular information is required by law, necessary for the performance of a contract, or necessary for the establishment, exercise or defence of legal claims.
If you are dissatisfied with how we handle your personal data or respond to your request, you may contact the Personal Data Protection Commission of Tanzania or another competent authority as provided under applicable law.
12. Automated Decision-Making
ISIH GLOBAL LEARNING does not intend to make decisions that produce significant legal or similarly significant effects on learners solely through automated processing, unless such processing is lawful, necessary for the relevant service and appropriate safeguards are provided.
Automated functionality may nevertheless be used for routine platform operations, including course access, learner enrolment, progress tracking, assessments, certificate generation, account administration and transaction-status updates.
Where automated decision-making that significantly affects a user is introduced, we will provide appropriate information and safeguards as required by applicable law.
13. Children’s Privacy
Our services are intended for persons who have the legal capacity to use them or who use them with appropriate parent, guardian or organisational authorisation where required.
Where we process personal data relating to a child or minor, we will take reasonable steps to ensure that appropriate consent, authorisation and safeguards are applied in accordance with applicable law.
If you are a parent or guardian and believe that a child has provided personal data to ISIH GLOBAL LEARNING without appropriate authorisation, please contact us using the contact details provided in this Privacy Policy.
14. Third-Party Websites and Services
Our Website may contain links to websites, platforms or services operated by third parties.
When you access an independent third-party website or service, its own privacy policy and terms may apply. ISIH GLOBAL LEARNING does not control and is not responsible for the privacy practices, content or security practices of independent third-party websites or services.
We encourage users to review the applicable privacy policies before providing personal data to third parties.
15. Cookies and Similar Technologies
ISIH GLOBAL LEARNING may use cookies and similar technologies to operate and secure the Website, maintain user sessions, support learner accounts and shopping-cart functionality, remember necessary preferences and provide other essential platform functions.
Where analytics, advertising, marketing or other non-essential cookies or similar technologies are introduced, we will manage their use in accordance with applicable consent and data-protection requirements.
Where appropriate, further information about the cookies used on our Website may be provided through a Cookie Policy or cookie-management notice.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology, business practices, legal obligations or regulatory requirements.
When this Privacy Policy is updated, we will revise the “Last Updated” date displayed at the beginning of the Policy.
Where changes materially affect how we process personal data, we may provide additional notice through the Website, learner account, email or other appropriate means where required.
17. Contact Us
If you have any questions, concerns or requests regarding this Privacy Policy or the way we collect, use, store, disclose or otherwise process your personal data, please contact us:
ISIH GLOBAL LEARNING
Operated by IRINGA STRATEGIC INVESTMENT HOLDINGS LIMITED
Sabasaba Street, Gangilonga
Plot No. 88, Block II, 001
Iringa, Tanzania
Email: info@isihgloballearning.com
Telephone: +255 747 397 111
We may request appropriate information to verify your identity before responding to a request relating to personal data.
18. Regulatory Complaints
If you believe that your personal data has been collected, used, disclosed or otherwise processed in a manner that does not comply with applicable data-protection requirements, you may contact ISIH GLOBAL LEARNING using the details provided above so that we can investigate and address your concern.
You may also have the right, subject to applicable law, to lodge a complaint with the Personal Data Protection Commission of Tanzania or another competent regulatory authority.
Exercising your right to raise a complaint will not affect any other rights or remedies available to you under applicable law.