Last Updated: 11 September 2026
Welcome to OViq LMS (“OViq”, “we”, “us”, or “our”).
OViq LMS is a learning management platform designed to provide online and blended learning services, including course registration, learning content, assessments, student progress tracking, communication, certification, and related educational services.
We respect your privacy and are committed to protecting the personal information entrusted to us. This Privacy Policy explains how we collect, use, store, protect, and disclose personal information when you access or use OViq LMS.
OViq LMS is operated by OVC Labs / OvalCore Labs (“OVC Labs”), unless otherwise stated by the institution or organisation providing you with access to the platform.
This Privacy Policy should be read together with our Terms and Conditions and any other notices provided to you when you use specific OViq LMS services.
OViq LMS is committed to handling personal information in accordance with applicable data protection and privacy laws, including the Kenya Data Protection Act, 2019, where applicable.
The Kenya Data Protection Act establishes rights for individuals and obligations for organisations processing personal data.
Where OViq LMS is provided to an institution, school, college, academy, company, or other organisation, that organisation may act as the Data Controller, while OViq Labs may process information on its behalf as a Data Processor, depending on the specific arrangement.
Depending on how you use OViq LMS, we may collect the following categories of information.
When you create or are provided with an account, we may collect:
Full name
Username
Email address
Telephone/mobile number
Password or authentication information
Profile photograph, where provided
Student, employee, teacher, or user identification number
Institution or organisation information
Account role and permissions
When you use OViq LMS, we may collect information relating to your learning activities, including:
Courses enrolled in
Course completion status
Lessons accessed
Learning progress
Assessment and examination results
Assignment submissions
Quiz results
Grades and scores
Certificates issued
Course attendance
Learning activities and interactions
Teacher or instructor feedback
If you contact us or communicate through the platform, we may collect:
Messages
Support requests
Feedback
Complaints
Enquiries
Communication history
Where OViq LMS supports paid courses or services, payment-related information may be processed.
Depending on the payment method, this may include:
Transaction reference
Payment amount
Payment date
Payment status
Customer/account identifier
Mobile money transaction information
Where payments are processed through third-party payment providers, we may not directly store complete payment card or financial account details.
When you access OViq LMS, certain technical information may automatically be collected, including:
IP address
Browser type
Device type
Operating system
Login dates and times
Pages or features accessed
Session information
Error logs
Security and authentication logs
This information may be used to maintain the security, reliability, and performance of the platform.
We may use personal information for legitimate educational, operational, contractual, legal, and security purposes, including to:
Create and manage user accounts
Provide access to courses and learning materials
Process course enrolments
Track learning progress
Administer assessments and examinations
Record grades and results
Issue certificates
Manage attendance
Provide learner and instructor support
Process payments and verify transactions
Communicate important service information
Send course-related notifications
Maintain platform security
Detect and prevent fraud, misuse, or unauthorised access
Troubleshoot technical problems
Improve OViq LMS
Generate aggregated statistics and reports
Meet legal and regulatory obligations
Enforce our Terms and Conditions
We will not use personal information for purposes that are incompatible with the purpose for which it was collected unless permitted by applicable law or otherwise appropriately authorised.
Depending on the circumstances, we may process personal information based on one or more lawful grounds, including:
Your consent
Performance of a contract or provision of requested services
Compliance with a legal obligation
Legitimate interests, where permitted by applicable law
Protection of vital interests where applicable
Other lawful grounds recognised under applicable data protection legislation
Where consent is required, you may withdraw your consent subject to applicable legal and contractual limitations.
The Office of the Data Protection Commissioner recognises lawful bases such as consent, contractual necessity, legal obligation, legitimate interests, public interest, and certain research/statistical purposes.
If you access OViq LMS through a school, college, academy, employer, training organisation, or other institution, that organisation may provide information about you to OViq LMS.
This may include:
Student or employee details
Course enrolment information
Class or department information
Academic records
Assessment results
Attendance information
User roles and permissions
In such circumstances, the institution may determine why and how your information is processed, while OViq LMS processes the information according to the applicable agreement and instructions.
For questions about information provided by your institution, you may also contact the institution directly.
We do not sell your personal information.
We may share or provide access to personal information where reasonably necessary to provide OViq LMS services or comply with legal obligations.
This may include sharing information with:
Your school, college, academy, employer, or organisation
Authorised teachers, instructors, administrators, or staff
Payment service providers
Hosting and infrastructure providers
Email, SMS, notification, or communication providers
Technical support and service providers
Professional advisers where necessary
Government authorities or regulators where legally required
Other authorised service providers working on our behalf
Third-party service providers are expected to process personal information only for appropriate purposes and to implement reasonable security measures.
OViq LMS may integrate with or use third-party services to provide certain functionality.
These may include services for:
Payment processing
Email delivery
SMS notifications
Cloud hosting
Analytics
Authentication
File storage
Security
Communication
The privacy practices of third-party providers are governed by their own privacy policies and terms.
Where appropriate, we will take reasonable steps to ensure that third-party processors provide appropriate safeguards for personal information.
OViq LMS may use cookies and similar technologies to:
Keep users signed in
Maintain secure sessions
Remember preferences
Improve platform functionality
Understand how the platform is used
Detect security issues
Improve performance
Some cookies may be essential for the operation of the LMS and cannot be disabled without affecting certain functionality.
Where non-essential cookies or similar technologies are used, appropriate information or consent mechanisms may be provided where required by applicable law.
We take reasonable technical and organisational measures to protect personal information against:
Unauthorised access
Unauthorised disclosure
Loss
Destruction
Alteration
Misuse
Accidental disclosure
Security measures may include access controls, authentication mechanisms, password protection, encryption where appropriate, backups, monitoring, logging, and other security controls.
However, no internet-based system can be guaranteed to be completely secure. Users should also protect their account credentials and immediately report suspected unauthorised access.
Users are responsible for maintaining the confidentiality of their passwords and account credentials.
You should:
Use a strong and unique password
Avoid sharing your password
Log out when using shared devices
Keep your account information up to date
Report suspicious account activity
OViq LMS administrators will not normally ask you to disclose your password.
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to:
Provide educational services
Maintain academic and training records
Meet contractual requirements
Comply with legal obligations
Resolve disputes
Maintain security and audit records
Enforce agreements
Protect legitimate business interests
Retention periods may vary depending on the type of information, the purpose for which it is used, and applicable legal or institutional requirements.
When personal information is no longer required, it may be securely deleted, anonymised, or otherwise disposed of in accordance with applicable requirements.
Subject to applicable law, you may have the right to:
Be informed about how your personal information is used
Request access to personal information held about you
Request correction of inaccurate or misleading information
Object to certain processing
Request deletion of certain personal information
Request restriction of processing where applicable
Request portability of your information where applicable
Withdraw consent where processing is based on consent
Lodge a complaint regarding the processing of your personal information
Kenya's Data Protection framework recognises several of these rights, including access, correction, objection and deletion, while the ODPC also identifies rights such as portability and restriction of processing.
Some rights may be subject to legal, contractual, educational, or other applicable limitations.
To make a privacy or data protection request, contact us using the details provided in the Contact Us section of this Privacy Policy.
When making a request, we may need sufficient information to verify your identity and locate the relevant account or information.
If your OViq LMS account is managed by a school, college, academy, employer, or other organisation, you may also contact that organisation regarding information for which it is the Data Controller.
OViq LMS may be used by students who are minors.
Where personal information relating to minors is collected or processed, we will take appropriate measures required by applicable data protection laws and the circumstances of the service.
Where required, consent or authorisation may be obtained from a parent, guardian, institution, or other legally authorised person.
Institutions using OViq LMS are responsible for ensuring that they have an appropriate lawful basis and required permissions for the student information they provide to the platform.
OViq LMS may use service providers or infrastructure located outside Kenya.
Where personal information is transferred outside Kenya, we will seek to ensure that appropriate safeguards are in place as required by applicable data protection laws.
Kenya's data protection framework places requirements on transfers of personal data outside Kenya, including appropriate safeguards or other lawful grounds.
OViq LMS does not generally make decisions that produce significant legal or similarly significant effects solely through automated processing.
Where automated tools are introduced that materially affect users, appropriate information and safeguards will be provided as required by applicable law.
If we become aware of a personal data breach affecting information processed through OViq LMS, we will assess and respond to the incident in accordance with applicable law and our internal security procedures.
Where notification is legally required, we will make the appropriate notifications to relevant authorities and/or affected individuals within the applicable timeframe.
Users should report suspected security incidents or unauthorised access to us as soon as possible.
We may update this Privacy Policy from time to time to reflect:
Changes to OViq LMS
Changes in our data processing practices
Changes in technology
Changes in legal or regulatory requirements
Improvements to our privacy practices
When significant changes are made, we may provide an appropriate notice through the LMS or other communication channels.
The updated policy will include a revised Last Updated date.
If you have questions, concerns, requests, or complaints regarding this Privacy Policy or the handling of your personal information, please contact:
OViq LMS / OVC Labs
Website: www.coreoval.com
Email: hello@coreoval.com
Phone: 0738664275
Address: 3rd Parklands
You may also have the right to lodge a complaint with the Office of the Data Protection Commissioner (ODPC) where applicable. The ODPC is responsible for regulating personal-data processing and protecting data-subject rights in Kenya.
By accessing or using OViq LMS, you acknowledge that you have read and understood this Privacy Policy.
Where applicable, you will be provided with additional notices or consent requests before personal information is collected or processed for purposes requiring additional authorisation.
OViq LMS — Privacy, Security and Responsible Learning Data Management.