Last updated: 5 November 2026
Elitepath Software, based in Nairobi, Kenya, is responsible for the personal data described here. This policy explains what we collect when you use this store. Questions are welcome at [email protected].
What we collect
- Account details: your name, email address and password (stored in encrypted form).
- Order details: what you bought, amounts, payment status and reference numbers. If you check out as a guest, also any name and company you give for your invoice. You can also add order notes.
- Payment details: Paystack handles your card or Apple Pay details on its secure page. We don't receive or store your full card number.
- Licence details: your purchase code and the website addresses where a module is activated, with the times it last checked in.
- Your country: worked out from your IP address when you order, using a database held on our own server.
- Technical details: IP address, browser type and pages visited, as in normal server logs.
- Sign-in activity: the devices signed in to your account (browser and system), their IP addresses and approximate country, and your sign-ins, downloads and security changes. For guest orders, we record the same device details when a download link is used. We use this to enforce device limits and spot shared logins. You can see your devices and recent activity on your Security page.
- Messages: what you send us by email, WhatsApp, support or our forms, including any access details you share for support.
- Newsletter: your email address, only if you sign up.
Why we use it
- To fulfil your order: payment, delivery, licences, support and refunds.
- To meet legal duties: such as tax and accounting records.
- For our legitimate interests: keeping the store secure, preventing fraud, misuse of offers and shared accounts, and improving the store.
- With your consent: newsletters and offers, which you can leave at any time. Creating an account does not sign you up for marketing.
Recent order notices
The store can show notices such as "Someone in Kenya purchased [product], 4 hours ago". They come from real paid orders and show only the country, product and time, never your name or contact details. If you'd rather not have your order included, tell us.
Who receives your data
We don't sell your personal data. We share it only as needed with:
- Paystack, to process payments and refunds;
- our hosting and email providers, to run the store and send emails;
- Cloudflare, for security checks that help block spam on our forms;
- WhatsApp, if you choose to contact us there;
- authorities or professional advisers, where the law requires it or to protect our legal rights.
Some of these providers may process data outside your country. Where that happens, we rely on the safeguards the law requires.
How long we keep it
- Account details: until you close your account.
- Orders and licence records: as long as tax and accounting law requires, and while your licence is in use.
- Support messages: as long as needed to help you and keep a record of the case.
- Server access details you shared for support: please change them after your case closes, and we delete them once we no longer need them.
- Sign-in activity: 180 days.
- Newsletter: until you unsubscribe.
Your rights
Depending on where you live, including under Kenya's Data Protection Act and the EU and UK GDPR, you can ask to see, correct, delete or get a copy of your data, object to or limit how we use it, and withdraw consent. Email us and we will reply within 30 days. We may need to keep some records where the law requires it, and we may need to confirm your identity first.
If you aren't happy with how we handled your data, you can complain to the Office of the Data Protection Commissioner in Kenya or your local data protection authority.
Cookies
We use cookies and similar browser storage to keep you signed in, recognise your device, remember your cart and preferences, and protect forms. We don't currently use analytics or advertising cookies, and we will update this policy before adding any. You can block or delete cookies in your browser, but parts of the store, such as signing in and the cart, may then stop working.
Security
We protect data with measures such as encrypted connections and encrypted passwords, and we limit who can access it. No system is completely secure. If a breach is likely to put you at risk, we will tell you and the relevant authorities as the law requires.
Children
This store is for adults aged 18 and over. We don't knowingly collect data from children. If you believe a child has given us data, please contact us and we will delete it.
Other websites
Links to other websites are covered by those websites' own privacy policies.
Changes to this policy
We will post any changes here with a new date, and tell you by email or on the store if a change is important.
Contact
- Email: [email protected]
- WhatsApp: +254 714 643 906
