Privacy Policy
Last updated: August 2026
Overview
Brandfletch Business Academy ("we", "us", "our") operates edu.brandfletch.com, a platform providing practical business education courses. This policy explains how we collect, use, store, and protect your personal information when you use our platform.
We are a Brandfletch Media company, registered and operating in Malawi. By creating an account or purchasing a course, you agree to the practices described below.
Information We Collect
Account data: Your name, email address, password (hashed), and profile details when you register.
Payment data: We do not store card numbers or mobile money PINs. Payments are processed by Paychangu. We retain transaction records for accounting purposes.
Learning data: Course progress, quiz results, certificates earned, and engagement metrics.
Usage data: IP address, browser type, device info, pages visited, and referral source.
Communications: Messages you send via support forms, email, or community forums.
How We Use Your Data
- To create and manage your account and deliver course content.
- To process payments and issue certificates.
- To send transactional emails (receipts, course updates, certificate notifications).
- To send marketing emails — you can opt out anytime.
- To track affiliate referrals and calculate commissions.
- To improve course content, platform features, and user experience.
- To detect and prevent fraud, abuse, and unauthorized access.
Data Sharing
We do not sell your personal data. We share data only with:
- Paychangu — for processing payments securely.
- Email service providers — for sending transactional and marketing emails.
- Analytics providers — for understanding platform usage (anonymized where possible).
- Instructors — your name and progress data is shared with course instructors.
- Legal authorities — if required by law.
Cookies
We use cookies for authentication, preferences, and analytics. You can disable cookies in your browser, but some features may not work properly.
Data Retention
We retain your account data for as long as your account is active. If you request account deletion, we remove your personal data within 30 days, except where legally required to keep records.
Your Rights
You have the right to:
- Access — request a copy of your personal data.
- Correct — fix inaccurate or incomplete data.
- Delete — request deletion of your account and data.
- Export — receive your data in a portable format.
- Opt out — unsubscribe from marketing emails at any time.
To exercise any of these rights, email privacy@brandfletch.com.
Security
We use industry-standard security measures including encrypted passwords (bcrypt), HTTPS for all connections, and secure payment processing via Paychangu.
Children's Privacy
Our platform is designed for adults. We do not knowingly collect data from anyone under 16. If you believe a minor has registered, please contact us.
Changes to This Policy
We may update this policy as our platform evolves. Material changes will be communicated via email or a notice on the homepage.
Contact
Questions about this policy? Email privacy@brandfletch.com or write to Brandfletch Media, Blantyre, Malawi.