Back to Home
Compliance • Data Protection & Privacy

Privacy Policy

Your trust and privacy are paramount. This document provides clear, transparent information on how Ozak Technologies Limited safeguards your data under the Data Protection and Privacy Act 2019 of Uganda.

Statutory Compliance

Uganda Data Protection and Privacy Act 2019

Zero Tracker Policy

No third-party ad pixels or tracking brokers

Last Updated

25 October 2026

1

Who We Are & Data Controller

Summary: CodeClimb is operated by Ozak Technologies Limited in Kampala, Uganda, which acts as the official Data Controller of your information.

CodeClimb is an educational platform operated by Ozak Technologies Limited, a company duly registered in the Republic of Uganda. When this policy refers to “we”, “us”, or “our”, it refers to Ozak Technologies Limited as the responsible Data Controller for personal information collected through our website, APIs, and student portals.

2

Information We Collect

We adhere strictly to data minimization principles, collecting only information necessary to deliver educational cohorts and account access:

Account Data

Your legal name, email address, password hash (argon2/bcrypt encrypted), and GitHub username (if submitted for PR reviews).

Billing Data

Mobile phone number used for MTN MoMo or Airtel Money checkout, transaction reference codes, and billing receipts.

Academic Data

Enrolled cohort tracks, Google Meet attendance logs, submitted assignment repositories, and tutor rubric evaluations.

3

How We Use Your Information

  • To authenticate you and grant access to your enrolled live cohort workspaces.
  • To process tuition transactions and automatically issue digital tax receipts.
  • To deliver schedule alerts, live Google Meet links, and tutor PR review notifications.
  • To assess assignments, calculate rubric scores, and compile proof-of-work repositories.
  • To fulfill regulatory obligations under the laws of the Republic of Uganda.
4

Payment Security & Financial Data

Zero Financial Storage: CodeClimb never captures, stores, or transmits your Mobile Money secret PINs, bank card CVVs, or full credit card numbers.

All monetary transactions are routed through licensed, PCI-DSS Level 1 certified payment gateways (Flutterwave, MTN MoMo, Airtel Money, Visa, Mastercard). Financial authentication occurs through encrypted telecom channels on your personal handset or bank 3D-secure portal.

5

Cookies & Tracking Policy (Strictly Essential)

We maintain a transparent, privacy-first cookie policy:

Essential Session Cookies: We use strictly essential, encrypted HTTP-only session cookies to keep you safely signed into your student workspace across page loads. These expire automatically after 7 days.

Zero Ad Tracking: We do not deploy cross-site tracking pixels, marketing cookies, or behavioral advertising cookies.

6

Analytics & Performance Metrics

We use aggregated, pseudonymized traffic measurement to understand system load, page response times, and video playback reliability. No personally identifiable engineering code, assignment text, or student names are transmitted to analytics engines.

7

Technical Data Protection & Encryption

We employ rigorous defense-in-depth infrastructure standards:

  • In-Transit Encryption: All platform traffic is strictly enforced over TLS 1.3 cryptographic protocols with modern cipher suites.
  • Password Protection: Passwords undergo salted, computational-heavy hashing algorithms; plain text credentials never touch our disks.
  • Isolated Databases: Student production repositories and student records are maintained in secured cloud datacenters with automated security auditing.
8

Your Statutory Rights (Uganda 2019 Act)

Under the Data Protection and Privacy Act 2019 of Uganda, you enjoy statutory entitlements as a data subject:

Right of Access

Request a complete copy of personal records held by CodeClimb.

Right to Rectification

Correct any inaccurate or incomplete academic and profile details.

Right to Erasure

Request the complete deletion of your account and personal history.

Right to Withdraw Consent

Withdraw consent for non-essential communications at any time.

9

Student & Minor Privacy

CodeClimb is open to promising developers of all age groups. Students under 18 years of age must register with verifiable consent from a parent or legal guardian. We do not deliberately solicit or commercialize data from minors.

10

Data Retention & Account Erasure

We retain student account data as long as your account remains active to provide ongoing access to recorded course masterclasses and project reviews. Should you choose to close your account, you can request full erasure by submitting a request to support@codeclimb.space. Records required for statutory accounting under Ugandan tax law will be archived securely for the mandated statutory period.

11

Changes & Policy Updates

We may revise this Privacy Policy periodically to reflect technological advancements or regulatory revisions. Whenever changes are enacted, the revised timestamp at the top of this document will be updated, and active students will receive notification via their registered email address.

12

Data Protection Officer Contact

To exercise your statutory rights or submit questions regarding our data protection safeguards, please reach out to our privacy officer:

Ozak Technologies Limited

Attn: Data Protection Officer (DPO)

Kampala, Uganda

Have a question about your privacy rights?

Our compliance desk in Kampala is available to answer any questions regarding data rights, retention, or account erasure.

Contact Privacy Desk
CodeClimb Mobile Money & Card Payments
MTN MoMo
MTN MoMo
Airtel Money
Airtel Money
VISA / CARDS

Enroll seamlessly with Mobile Money & Cards.

Instant automated cohort activation via MTN MoMo, Airtel Money, or Cards with zero extra processing fees.