Last updated: 6 November 2026
This policy explains what personal information Creative Lab Academy ("we", "us") collects when you use creativelabet.com, why we collect it, and the choices you have. We handle personal data in line with Ethiopia's Personal Data Protection Proclamation No. 1321/2024 and other applicable law.
1. Information we collect
- Account details: your name, email address, password (stored only in scrambled, hashed form), and optionally a phone number and profile photo.
- Learning activity: courses you enroll in, lessons completed, video progress, quiz answers and scores, assignments you submit, certificates issued, and reviews and messages you send.
- Payments: the course, amount, payment method, transaction reference and any payment receipt or screenshot you upload. We do not store card numbers or mobile-money PINs.
- Support: tickets, live chat messages and contact-form messages.
- Technical data: IP address, browser and device type, and sign-in times, used for security and to keep the site working.
2. How we use it
- To create your account, give you access to the courses you enroll in and track your progress.
- To process payments, confirm bank transfers, handle refund requests and keep financial records.
- To mark quizzes and assignments and issue certificates (your name appears on certificates you earn).
- To send service messages: sign-in, verification and password emails, receipts, course announcements and support replies. You can turn optional notifications off in your notification settings.
- To protect the academy by preventing fraud, account sharing, abuse and unauthorized access.
- To improve courses and the site, using totals and statistics rather than individual profiles.
We do not sell your personal information and we do not use it for third-party advertising.
3. Who can see it
- Academy staff, only as far as their role requires (for example, finance staff see payments and support staff see tickets).
- Instructors may see the names, progress and submitted work of learners in their own courses.
- Service providers that run parts of the site for us: our web host, Cloudflare (website delivery and private video and file storage), and our email provider. They may only use the data to provide their service to us.
- Authorities, when the law requires it.
Some of these providers store data outside Ethiopia. We use providers with strong security practices and share only what is needed.
4. How long we keep it
We keep your account and learning record while your account is open, so you keep lifetime access to your courses and certificates. Payment records are kept for as long as tax and accounting law requires. Unfinished uploads and temporary files are deleted automatically. When you close your account we delete or anonymise your personal data, except records we must keep by law.
5. Security
Passwords are hashed, the site uses encrypted HTTPS connections, videos and submitted work are kept in private storage with short-lived links, staff accounts use two-step sign-in, and access is limited by role. No system is perfectly secure, so please use a strong, unique password and do not share your account.
6. Your rights
You can ask to see, correct, download or delete your personal data, or object to how we use it. You can update most details yourself on your Profile page. For anything else, contact us using the details below and we will reply within 30 days. You may also complain to the relevant Ethiopian data protection authority.
7. Children
Learners under 18 should use the academy with the permission and supervision of a parent or guardian, who is responsible for any purchase.
8. Cookies
We use a small number of essential cookies. See our Cookie policy.
9. Changes
If we change this policy we will update the date above, and tell you by email or in your account when the change is significant.
10. Contact
- Online: the contact page, or Support in your account