PUBLIC PRIVACY POLICY
Privacy Policy
Effective Date: 3 September 2026
Last Updated: 3 September 2026
Bridge College Limited (“Bridge College”, “we”, “us” or “our”) respects your privacy and is committed to protecting personal information entrusted to us.
This Privacy Policy explains how Bridge College Limited collects, uses, stores, protects, shares and otherwise processes personal information when you visit or use our website, submit an application or enquiry, communicate with us electronically, or interact with services operated by or on behalf of Bridge College.
Our website is:
This Privacy Policy applies primarily to our website and the digital services through which Bridge College receives and processes prospective student applications, enquiries and related communications.
This Policy should be read together with our Terms of Service and any specific privacy notice presented to you when we collect information.
1. Who We Are
Bridge College Limited is the organisation responsible for determining how and why personal information collected through the Bridge College website is processed.
For matters relating to privacy and personal data, you may contact us at:
Bridge College Limited
Princely House, Moi Avenue
Nairobi, Kenya
Behind Nation Centre
Email: info@bridgecollege.ac.ke
Telephone: +254 722 825 825 / +254 728 825 000
Where Bridge College engages another organisation to process personal information on our behalf, that organisation acts as a data processor or service provider subject to appropriate contractual, confidentiality and security requirements.
2. What Information We Collect
We collect information that is reasonably necessary to operate our website, respond to enquiries, process applications and provide prospective and current students with relevant services.
The information we collect may include the following.
2.1 Information You Provide Directly
When you submit an application, enquiry, contact form or other online form, we may collect information such as:
First name;
Last name;
Email address;
Telephone or WhatsApp number;
Country of origin;
Course or programme selected;
Preferred intake;
Preferred mode of study;
Information about how you heard about Bridge College;
Messages, comments or other information you voluntarily provide;
Academic or educational information where required for an application;
Documents or supporting information where specifically requested;
Communications between you and Bridge College.
We only request information that is reasonably relevant to the purpose for which it is collected.
2.2 Information Collected Automatically
When you visit our website, certain technical information may be collected automatically by our website infrastructure, hosting environment, security tools, analytics services and similar technologies.
This may include:
IP address;
Browser type and version;
Device type;
Operating system;
Approximate geographic information derived from technical information;
Date and time of access;
Pages visited;
Referring website or campaign;
Website interactions;
General website usage information;
Cookie identifiers and similar technologies;
Advertising and campaign attribution information where applicable.
This information is primarily used to maintain website security, understand website performance, measure marketing activity, improve user experience and diagnose technical problems.
3. Information Submitted Through the Application Form
When you submit an application through the Bridge College website, the information you provide is used to process and respond to your application.
Application information may be used to:
Receive and record your application;
Identify the applicant;
Contact you about your application;
Assess your selected programme and intake;
Communicate admission or application-related information;
Request additional information where necessary;
Support admissions and student administration;
Maintain appropriate application records;
Prevent fraudulent or abusive submissions;
Improve our application and admissions processes.
Submitting an application does not automatically guarantee admission. Admission decisions are subject to Bridge College’s applicable admissions requirements and procedures.
4. How We Use Personal Information
Depending on the circumstances, Bridge College may process personal information for the following purposes:
Application and admissions
To receive, process, manage and respond to applications and admissions enquiries.
Communication
To contact you concerning your application, enquiry, course selection, intake, admission or other legitimate Bridge College service-related matters.
Website operation
To operate, maintain, secure and improve our website and digital services.
Customer and prospective student support
To respond to requests, questions and communications submitted to Bridge College.
Marketing
Where permitted by applicable law and where appropriate consent or another lawful basis exists, we may use contact information to provide information about Bridge College programmes, intakes, events or related services.
You may opt out of direct marketing communications at any time.
Analytics and performance
To understand how visitors use our website, measure website performance, evaluate campaigns and improve our digital services.
Security and fraud prevention
To detect, prevent and investigate spam, fraud, abuse, malicious activity and other security incidents.
Legal and regulatory purposes
To comply with applicable laws, regulations, lawful requests, court orders and regulatory requirements, and to establish, exercise or defend legal rights where necessary.
5. Legal Basis for Processing
Bridge College processes personal information on an appropriate lawful basis depending on the nature and purpose of the processing.
These may include:
Consent, where you have voluntarily provided consent;
Performance of a contract or steps requested before entering into a contract, where processing is necessary to provide a requested service;
Legal obligations, where processing is necessary to comply with applicable law;
Legitimate interests, where processing is necessary for legitimate institutional, operational, security or administrative purposes and those interests do not override your applicable rights;
Other lawful grounds permitted by applicable data-protection law.
Where consent is the applicable legal basis, you may withdraw that consent, although withdrawal does not affect processing lawfully carried out before withdrawal.
6. Application Confirmation and Email Notifications
When an applicant submits the Bridge College online application form, the submitted information may be processed by our website and application infrastructure to:
Receive the application;
Record the application information;
Notify authorised Bridge College personnel that an application has been submitted; and
Send an application confirmation or related notification where applicable.
Email notifications may be sent using authorised Bridge College email infrastructure, including Google Workspace and the Gmail API.
7. Google API Services and Gmail Data
Bridge College uses Google API Services, including the Gmail API, for a limited application-notification function.
The Gmail integration is used to send authorised emails relating to applications submitted through the Bridge College website.
7.1 What Google Data We Access
For this application-notification function, Bridge College uses the Google Gmail API only to the extent necessary to send an email through an authorised Bridge College email account.
Depending on the Google API permissions configured for the application, the information processed may include:
The authorised Bridge College Google account identifier or email address necessary to operate the integration;
Email recipient information;
Email subject;
Email body;
Application information included in the notification;
Technical information required to securely transmit the email.
The Gmail integration does not require access to an applicant’s personal Gmail account.
Bridge College does not use the Gmail API to read applicants’ Gmail inboxes.
Where the application is configured solely for sending application notifications, Bridge College does not request Gmail permissions that allow the application to read, search, modify or delete Gmail messages where such permissions are unnecessary.
7.2 Purpose of Gmail API Access
Information processed through the Gmail API is used solely to:
Send application submission notifications;
Send authorised application-related communications;
Support the operation of the Bridge College application process;
Maintain the reliability and security of the email notification function.
Google user data is not used for unrelated commercial purposes.
7.3 Google Account Credentials
Bridge College does not request or store Google account passwords.
OAuth authentication and authorisation are handled through Google’s authentication infrastructure.
Bridge College does not sell Google account information or Google user data.
7.4 Storage of Google User Data
Bridge College does not intentionally retain Google account passwords or OAuth credentials.
Information processed through the Gmail API is retained only to the extent reasonably necessary to provide the authorised functionality, maintain security and operational records, troubleshoot technical problems, comply with applicable legal obligations, or otherwise meet legitimate institutional requirements.
Bridge College does not retain Google user data indefinitely where retention is no longer necessary.
7.5 Sharing of Google User Data
Bridge College does not sell Google user data.
Google user data obtained through Google APIs is not shared with third parties for advertising, behavioural profiling, retargeting, data brokerage or unrelated commercial purposes.
Where authorised service providers are required to operate or maintain the relevant technical infrastructure, information may be processed by those providers only as necessary to provide the service and subject to appropriate contractual, confidentiality and security safeguards.
7.6 Human Access
Access to information associated with Bridge College’s Google API integration is restricted to authorised personnel and service providers who require access for legitimate institutional, technical, security or administrative purposes.
7.7 Advertising
Bridge College does not use Google user data obtained through Google APIs for advertising.
Google user data obtained through Google APIs is not used for:
Personalised advertising;
Behavioural advertising;
Retargeting;
Interest-based advertising;
Advertising audience creation;
Data brokerage.
7.8 Artificial Intelligence and Machine Learning
Bridge College does not use information obtained through Google APIs to develop, improve or train generalised or non-personalised artificial intelligence or machine-learning models.
Google API data is used only for the specific functionality described in this Policy.
7.9 Google API Limited Use Requirement
Bridge College Limited’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
8. Third-Party Service Providers
Bridge College may use carefully selected third-party technology and service providers to operate, secure, analyse and improve our website and digital services.
Depending on the services currently enabled on the website, these providers may process information such as IP addresses, browser information, device information, form submissions, website interactions and technical logs.
Examples of service categories may include:
Website hosting and infrastructure;
Website security and spam prevention;
Form processing;
Email delivery;
Website analytics;
Advertising measurement;
Performance and caching services;
Technical support and maintenance.
Third-party providers are permitted to process personal information only for legitimate services provided to Bridge College and should not use such information for unrelated purposes where contractual or other safeguards restrict such use.
Where a third-party service processes personal information outside Kenya, Bridge College will take appropriate measures required by applicable data-protection law concerning international data transfers.
9. Website Analytics
Bridge College may use analytics technologies to understand how visitors interact with our website.
Analytics information may include:
Pages viewed;
Traffic sources;
General device information;
Browser information;
Approximate geographic information;
Website interactions;
Campaign information;
Session information;
General performance metrics.
Analytics information is used to understand website performance, improve content and user experience, measure marketing effectiveness and support legitimate business decisions.
Where analytics technologies use cookies or similar identifiers, the relevant information is handled in accordance with the provisions of this Privacy Policy and applicable law.
10. Advertising and Marketing Technologies
Bridge College may use digital advertising and measurement platforms to promote courses, intakes and other institutional services.
These technologies may include advertising platforms such as Google and Meta and may process information such as:
Website visits;
Advertising interactions;
Campaign identifiers;
Referring URLs;
Device information;
Approximate location;
Conversion information;
Cookie or similar identifiers.
Such technologies help Bridge College understand the effectiveness of advertising and reach people who may be interested in Bridge College programmes.
Where required by applicable law, Bridge College will obtain consent before using non-essential cookies or similar technologies.
Bridge College does not provide advertising platforms with information for purposes outside the permitted use of those platforms.
Google API data obtained through the Gmail integration is kept separate from advertising use and is not used for personalised advertising, retargeting or advertising audience creation.
11. Cookies and Similar Technologies
Our website may use cookies and similar technologies.
Cookies may be used for:
Essential website functionality;
Security;
Website performance;
Remembering preferences;
Analytics;
Marketing measurement;
Advertising measurement, where applicable.
You may control cookies through your browser or through available website cookie controls.
Disabling certain cookies may affect the functionality or performance of parts of the website.
12. How We Share Personal Information
Bridge College does not sell or rent personal information.
We may disclose personal information in limited circumstances, including:
Service providers
To technology and service providers that process information on our behalf to provide website, application, communication, security, analytics or infrastructure services.
Bridge College personnel
To authorised personnel who require information to perform admissions, administration, communication, technical, financial or other legitimate institutional responsibilities.
Legal and regulatory authorities
Where disclosure is required by law, court order, regulatory requirement or other lawful process.
Protection of rights and security
Where reasonably necessary to prevent fraud, security threats, abuse or other unlawful activity, or to protect the rights, property or safety of Bridge College, our users or others.
Business transactions
Where permitted by applicable law, personal information may be transferred as part of a merger, restructuring, acquisition or other legitimate corporate transaction, subject to appropriate safeguards.
13. International Data Transfers
Some technology and service providers used by Bridge College may process information outside Kenya.
Where personal information is transferred outside Kenya, Bridge College will take appropriate steps required by applicable law to ensure that the transfer is subject to appropriate safeguards or another lawful basis.
These safeguards may include contractual protections, appropriate data-protection commitments, consent where applicable, or other legally recognised transfer mechanisms.
14. Data Retention
Bridge College retains personal information only for as long as reasonably necessary for the purpose for which it was collected, including:
Processing applications;
Providing admissions and student services;
Maintaining appropriate institutional records;
Meeting legal or regulatory obligations;
Resolving disputes;
Preventing fraud and abuse;
Maintaining security;
Exercising or defending legal claims.
Different categories of information may have different retention periods.
When information is no longer reasonably required, Bridge College will take reasonable steps to delete, anonymise or securely dispose of it, subject to applicable legal, regulatory, institutional or legitimate record-keeping requirements.
15. Data Security
Bridge College takes reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration, disclosure or destruction.
Depending on the nature of the information and service, these measures may include:
HTTPS/TLS encryption in transit;
Access controls;
Authentication mechanisms;
Restricted administrative access;
Secure hosting and infrastructure;
Security monitoring;
Spam and abuse prevention;
Regular maintenance and software updates;
Appropriate controls over third-party service providers.
No internet-based system can be guaranteed to be completely secure. However, Bridge College takes reasonable measures appropriate to the nature and risk of the information it processes.
16. Data Breaches and Security Incidents
Where Bridge College becomes aware of a personal-data breach, we will assess and respond to the incident in accordance with applicable law and our internal security procedures.
Where notification is legally required, Bridge College will make the required notifications to the relevant authorities and affected individuals within the applicable statutory requirements.
17. Your Data Protection Rights
Subject to applicable law and any lawful limitations, you may have rights relating to your personal information, including the right:
To be informed about the use of your personal information;
To access personal information held about you;
To request correction of inaccurate or misleading information;
To object to certain processing;
To request deletion or erasure where legally applicable;
To request restriction of processing where applicable;
To withdraw consent where processing is based on consent;
To request data portability where applicable;
To lodge a complaint with the relevant data-protection authority.
These rights are consistent with rights recognised under Kenya’s data-protection framework.
The exercise of a right may be subject to applicable legal exceptions and verification requirements.
18. How to Exercise Your Rights
To make a privacy or data-protection request, contact:
Bridge College Limited
Email: info@bridgecollege.ac.ke
Your request should describe the information or processing concerned and the action you are requesting.
For security reasons, Bridge College may need to verify the identity or authority of the person making a request before providing access to personal information or making certain changes.
We will respond to valid requests within the timeframe required by applicable law.
19. Direct Marketing and Communications
Bridge College may communicate with prospective students and applicants regarding legitimate application, admission and institutional matters.
Where we send promotional or marketing communications on the basis of consent or another lawful basis, you may request that we stop sending such communications.
You may opt out by:
Using an unsubscribe mechanism where provided;
Contacting us at info@bridgecollege.ac.ke; or
Following the instructions provided in the communication.
Opting out of marketing communications does not necessarily stop essential administrative or application-related communications.
20. Children and Minors
Bridge College provides educational services that may be relevant to students who are under the age of majority.
We do not intentionally collect personal information from children through the website for purposes unrelated to legitimate educational or administrative requirements.
Where information relating to a minor is required for an application or legitimate educational purpose, Bridge College will process such information in accordance with applicable law and appropriate safeguards.
Where consent is legally required from a parent, guardian or other authorised person, Bridge College may request such consent.
21. Third-Party Websites and Services
Our website may contain links to websites, platforms or services operated by third parties.
These third-party services have their own privacy policies and terms.
Bridge College is not responsible for the privacy practices of websites that it does not control.
We encourage users to review the privacy policies of third-party websites before submitting personal information to them.
22. Accuracy of Information
Bridge College takes reasonable steps to ensure that personal information processed by us is accurate and relevant to its intended purpose.
You are responsible for providing accurate information when submitting an application or enquiry and should notify us if information you have provided needs to be corrected or updated.
23. Automated Decision-Making
Bridge College does not rely solely on automated decision-making to make admissions decisions through the website.
Where automated technologies are used for analytics, security, spam prevention, marketing measurement or similar operational purposes, they are not intended to replace appropriate human decision-making concerning admission.
24. Data Minimisation
Bridge College seeks to collect personal information that is adequate, relevant and limited to what is reasonably necessary for the purpose for which it is processed.
We do not intentionally collect personal information merely because it is available.
25. Privacy by Design and Accountability
Bridge College seeks to incorporate appropriate privacy and security considerations into the design and operation of its digital services.
Where appropriate, we consider:
The nature and sensitivity of information;
The purpose of processing;
Data minimisation;
Access controls;
Security risks;
Third-party processing;
Data retention;
International transfers;
Applicable legal requirements.
26. Complaints
If you believe that Bridge College has not handled your personal information appropriately, we encourage you to contact us first so that we can investigate and address your concern.
You may also lodge a complaint with the Office of the Data Protection Commissioner (ODPC) of Kenya, where applicable.
The ODPC is responsible for regulating personal-data processing and protecting data-subject rights in Kenya.
27. Changes to This Privacy Policy
Bridge College may update this Privacy Policy from time to time to reflect:
Changes to our services;
Changes to technology;
Changes to how information is processed;
Changes to applicable laws or regulatory requirements;
Changes to third-party services.
When we make material changes, we will update the “Last Updated” date at the beginning of this Policy and, where appropriate, provide additional notice.
We encourage you to review this Policy periodically.
28. Contact Us
For questions, requests or concerns regarding this Privacy Policy or the processing of your personal information, contact:
Bridge College Limited
Princely House, Moi Avenue
Nairobi, Kenya
Behind Nation Centre
Email: info@bridgecollege.ac.ke
Telephone: +254 722 825 825
Telephone: +254 728 825 000
Website: https://bridgecollege.ac.ke/
29. Google API Limited Use Disclosure
For clarity and transparency, Bridge College makes the following disclosure regarding its use of Google API Services:
Bridge College Limited’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Google API data is used only for the functionality described in this Privacy Policy and is not sold, used for advertising, retargeting, or transferred for unrelated commercial purposes.
© 2026 Bridge College Limited. All Rights Reserved.