Privacy Policy

Effective Date: 01 January 2026
Last Updated: 01 June 2026

CBET Master is developed, operated and supported by ABNO Softwares International Ltd.

This Privacy Policy explains how personal data is collected, used, stored, shared and protected when users access or interact with CBET Master, the CBET Master website, QAB tenant portals, certificate verification services, support channels and related platform features.

1. Who We Are

ABNO Softwares International Ltd is a Kenyan education technology company providing digital platforms for institutional automation, CBET assessment management, ePOE readiness and related education technology services.

CBET Master is a digital assessment management platform designed to support Qualification Awarding Bodies, QAIs, institutions and authorized users in managing CBET assessment workflows.

EduBridge is the trainee-facing platform that supports ePOE, assessment readiness and evidence submission workflows where applicable.

2. Scope of This Policy

This Privacy Policy applies to:

  • The CBET Master website: https://cbetmaster.com
  • QAB tenant portals, such as {qabcode}.cbetmaster.com
  • CBET Master login and user accounts
  • QAB onboarding and executive briefing request forms
  • CBET Master support requests
  • Certificate verification pages
  • CBET Master dashboards, reports and audit trails
  • Integrations between CBET Master, EduBridge and authorized institutional or assessment systems
  • Communications sent through email, SMS, WhatsApp or system notifications where enabled

This policy does not replace any separate agreement, MoU, data processing addendum or institutional policy between ABNO and a QAB, QAI or institution.

Where there is a signed MoU or Data Protection Addendum, that agreement shall guide the specific processing relationship between ABNO and the relevant QAB or institution.

3. Roles and Responsibilities

For data submitted into CBET Master by a QAB, QAI, institution or authorized officer:

  • The QAB, QAI or Institution generally acts as the Data Controller.
  • ABNO Softwares International Ltd generally acts as the Data Processor.

This means the QAB or institution determines why assessment, candidate, staff, trainee and institutional data is collected and used.

ABNO processes such data to provide, host, support, maintain, secure and improve CBET Master and related platform services.

For website enquiries, onboarding requests, executive briefing forms, support forms and general business communications submitted directly to ABNO, ABNO may act as the Data Controller for that interaction.

4. Personal Data We May Collect

Depending on how CBET Master is used, we may process the following categories of data.

4.1 Website and Enquiry Data

When you submit a form on the CBET Master website, we may collect:

  • Full name
  • Designation
  • QAB or institution name
  • Work email address
  • Phone or WhatsApp number
  • Preferred briefing mode
  • Current onboarding status
  • Area of interest
  • Message or enquiry details

4.2 QAB and Institution Data

For onboarding, tenant setup and implementation, we may process:

  • Institution name
  • Official address
  • County and sub-county
  • Official email and phone number
  • Institution logo
  • QAB code or tenant identifier
  • Focal person details
  • Committee or implementation contact details
  • Programme, course and department information
  • Units of competency
  • Curricula and assessment structures
  • Grading schemes
  • Assessment series
  • Fee or clearance rules where applicable
  • User roles and access rights

4.3 Candidate, Trainee or Student Data

Where authorized by a QAB or institution, CBET Master and related integrations may process:

  • Candidate, trainee or student names
  • Admission, registration, index or candidate numbers
  • Identification details where required by the institution or assessment process
  • Contact details
  • Programme, level, course, unit or competency details
  • Assessment registration details
  • Assessment status
  • Results, marks, comments or competence decisions
  • Certification and verification records
  • ePOE references or related evidence status where integrated with EduBridge

4.4 Staff, Trainer, Assessor and Verifier Data

CBET Master may process:

  • Names
  • Work email addresses
  • Phone numbers
  • Designations
  • Departments
  • Assigned roles
  • User account details
  • Login and activity logs
  • Approval or assessment actions
  • Comments, review records and workflow decisions

4.5 Technical and Security Data

When users access CBET Master, we may collect:

  • Login records
  • IP address
  • Browser and device information
  • Session activity
  • System logs
  • Audit trail records
  • Access timestamps
  • Failed login attempts
  • Error logs
  • Integration logs

4.6 Certificate Verification Data

Where certificate verification is enabled, the system may process:

  • Certificate number
  • Candidate or certificate holder details required for verification
  • QAB or issuing institution
  • Programme or qualification details
  • Issue date
  • Verification status
  • Verification access logs

Certificate verification should display only the information necessary to confirm authenticity.

4.7 Communication Data

Where enabled, CBET Master may process records related to:

  • Email notifications
  • SMS alerts
  • WhatsApp messages
  • System reminders
  • Support communications
  • Delivery status or notification logs

4.8 Payment or Transaction References

Where payment or clearance workflows are enabled, the platform may process:

  • Payment references
  • Transaction confirmation details
  • Payment status
  • Fee category
  • Clearance status

CBET Master should not store full card details unless explicitly supported through a compliant payment provider.

5. How We Collect Personal Data

We may collect personal data from:

  • Website forms
  • QAB onboarding submissions
  • Data import templates
  • QAB or institution administrators
  • Authorized system users
  • EduBridge integrations
  • ERP or payment integrations where applicable
  • Email, phone, WhatsApp or support interactions
  • System logs and audit trails
  • Certificate verification requests

6. Why We Process Personal Data

We process personal data for the following purposes:

  • To operate CBET Master
  • To create and manage QAB tenant portals
  • To support QAB onboarding and implementation
  • To configure programmes, units, users, assessment series and workflows
  • To manage candidate registration and assessment workflows
  • To support assessor, verifier, moderator and QA workflows
  • To process assessment results and reports
  • To support certificate generation and verification where enabled
  • To support EduBridge linkage and ePOE readiness workflows
  • To provide dashboards, reports and audit trails
  • To create and manage user accounts
  • To authenticate users and protect system access
  • To provide support and troubleshooting
  • To send system notifications and reminders where enabled
  • To maintain backups, security logs and system records
  • To comply with legal, regulatory, audit or contractual obligations
  • To respond to enquiries, onboarding requests and executive briefing requests
  • To improve platform reliability, usability and security

7. Legal Basis for Processing

Depending on the context, personal data may be processed based on:

  • Performance of a contract or MoU
  • Lawful instructions from a QAB, QAI or institution
  • Institutional mandate or assessment responsibility
  • Consent where required
  • Compliance with legal or regulatory obligations
  • Legitimate interests in operating, securing and supporting the platform
  • Protection of platform integrity, auditability and user accountability

Where consent is required from candidates, trainees, students, staff or other users, the relevant QAB or institution is generally responsible for obtaining and maintaining that consent unless otherwise agreed in writing.

8. How We Share Personal Data

We do not sell personal data.

Personal data may be shared only where necessary and lawful, including with:

  • The relevant QAB, QAI or institution
  • Authorized officers and users within the relevant QAB or institution
  • EduBridge where integration is enabled
  • Approved assessment systems where routing is authorized
  • Hosting, infrastructure and backup service providers
  • Email, SMS, WhatsApp or communication service providers where enabled
  • Payment service providers where payment workflows are enabled
  • Technical support or maintenance providers under confidentiality obligations
  • Regulators, courts, law enforcement or public authorities where legally required
  • Professional advisers where necessary for legal, audit or compliance purposes

ABNO does not disclose QAB or candidate data to unauthorized third parties.

9. Data Security

We apply reasonable technical and organizational measures to protect personal data.

These may include:

  • Role-based access control
  • Password-protected accounts
  • User authentication
  • Audit trails
  • Access logs
  • Secure hosting
  • Backups
  • Administrative access restrictions
  • System monitoring
  • Security updates and maintenance
  • Confidentiality obligations for authorized personnel
  • Controlled support access
  • User deactivation where required

Users must also protect their accounts by keeping login credentials confidential and avoiding password sharing.

10. Tenant Isolation and Access Control

Each QAB has its own CBET Master tenant portal.

Users should only access data and workflows assigned to their QAB, institution, role or permission level.

CBET Master is designed so that one QAB should not access another QAB's data.

Sensitive settings should be limited to authorized administrators only.

11. Data Accuracy

The QAB, QAI or institution is responsible for ensuring that data submitted to CBET Master is accurate, lawful, complete and properly authorized.

This includes:

  • Candidate data
  • Staff data
  • Programme data
  • Unit data
  • Assessment data
  • Result data
  • Certification data
  • User access information

ABNO may support data formatting, upload, validation and troubleshooting, but the QAB or institution remains responsible for approving the correctness of official institutional and assessment data.

12. Data Retention

Personal data is retained only for as long as reasonably required for:

  • Assessment management
  • Certification and verification support
  • Institutional records
  • Audit trails
  • Legal or regulatory compliance
  • Candidate record continuity
  • System backups
  • Dispute resolution
  • Platform operation and support
  • The duration of the relevant MoU, contract or service relationship
  • Any agreed transition or data export period

Retention periods may vary depending on the nature of the data, the QAB's requirements and applicable regulatory obligations.

13. Data Export, Return or Deletion

Where a QAB or institution terminates use of CBET Master, ABNO may support reasonable data export, transition or deletion processes subject to:

  • Applicable law
  • Assessment and certification obligations
  • Regulatory requirements
  • Audit requirements
  • Data retention needs
  • Payment of any approved outstanding charges
  • Written instructions from the relevant QAB or institution

ABNO may retain limited records where required for legal, compliance, audit, backup, dispute resolution or business continuity purposes.

14. Data Subject Rights

Subject to applicable law, data subjects may have rights relating to their personal data, including:

  • The right to be informed
  • The right to access personal data
  • The right to request correction of inaccurate data
  • The right to request deletion of certain data
  • The right to object to certain processing
  • The right to restrict processing where applicable
  • The right to lodge a complaint with the relevant authority

Where CBET Master processes data on behalf of a QAB or institution, requests relating to candidate, trainee, staff, assessment or institutional data should generally be directed to the relevant QAB or institution.

ABNO will provide reasonable technical assistance where the request relates to data processed or stored in CBET Master.

15. Children, Minors and Trainee Data

Some trainees or learners using systems connected to CBET Master may be minors.

Where data relates to minors, the relevant QAB or institution must ensure that collection and processing is lawful, properly authorized and supported by appropriate notices, consent or institutional mandate where required.

ABNO processes such data only for authorized platform, assessment, ePOE, support, reporting, certification or system administration purposes.

16. Cookies and Similar Technologies

The CBET Master website and portals may use cookies or similar technologies to:

  • Keep users signed in securely
  • Remember user preferences
  • Improve website performance
  • Monitor platform usage
  • Protect against unauthorized access
  • Understand how users interact with the website

Users may adjust browser settings to block cookies, but some platform features may not work properly without essential cookies.

17. Cross-Border Processing

Some hosting, backup, communication or technical service providers may process data outside Kenya.

Where cross-border processing is necessary, ABNO will take reasonable steps to ensure that personal data remains protected and is handled in line with applicable data protection requirements and contractual obligations.

18. Third-Party Links

The CBET Master website or portals may contain links to third-party websites or services.

ABNO is not responsible for the privacy practices, content or security of third-party websites not operated by ABNO.

Users should review the privacy policies of any external websites they visit.

19. User Responsibilities

Users of CBET Master must:

  • Use the platform only for authorized purposes
  • Keep login credentials confidential
  • Avoid sharing user accounts
  • Submit accurate and authorized data
  • Avoid uploading unlawful, false or irrelevant content
  • Respect confidentiality of candidate and assessment data
  • Report suspected unauthorized access or data misuse
  • Use only approved communication and support channels

ABNO may suspend or restrict access where misuse, security risk or unauthorized activity is suspected.

20. Incident Reporting

Where ABNO becomes aware of a personal data breach or security incident affecting CBET Master, ABNO will take reasonable steps to:

  • Investigate the incident
  • Contain the risk
  • Notify affected QABs or institutions where required
  • Support legally required reporting
  • Take corrective action
  • Improve controls where necessary

Users and QABs should promptly report suspected unauthorized access, password compromise, data misuse or system abuse.

21. Marketing and Communications

ABNO may use contact details submitted through website forms or business engagements to respond to enquiries, provide onboarding information, schedule briefings, send platform updates or communicate about related services.

ABNO will not use QAB candidate or trainee assessment data for unrelated marketing.

Users may request to stop receiving non-essential marketing communications.

System, security, support and account-related messages may still be sent where necessary.

22. Certificate Verification

Where certificate verification is enabled, CBET Master may allow authorized stakeholders to verify certificate authenticity.

Verification results should be limited to the information reasonably necessary to confirm whether a certificate is valid, issued by the relevant QAB or institution, and linked to the stated qualification or assessment outcome.

ABNO and QABs should avoid exposing unnecessary personal data through public verification pages.

23. Changes to This Privacy Policy

ABNO may update this Privacy Policy from time to time to reflect changes in the law, platform features, security practices or operational requirements.

The updated version will be posted on the CBET Master website with the revised effective date.

Material changes may be communicated through the website, platform notice or official communication channels.

24. Contact Us

For questions about this Privacy Policy, CBET Master data handling, support or privacy-related requests, contact:

ABNO Softwares International Ltd
Kaka House, 3rd Floor
Maua Close, Off Parklands Road
Westlands, Nairobi, Kenya

Email: info@abnosoftwares.com
Phone: +254 792 550 077
Website: https://cbetmaster.com

25. Complaints

Where a privacy concern relates to data controlled by a QAB, QAI or institution, the user should first contact the relevant QAB or institution.

Where the concern relates to ABNO's operation of CBET Master, users may contact ABNO using the details above.

Users may also lodge a complaint with the relevant data protection authority where applicable.

26. Final Statement

CBET Master is built to support credible, traceable and secure digital CBET assessment.

ABNO is committed to protecting personal data, respecting institutional responsibilities and supporting QABs and institutions in handling assessment data responsibly.

CBET Master powers assessment and verifiable certification.

EduBridge powers trainee evidence readiness.

Data protection supports trust across the CBET ecosystem.