Legal
Privacy policy
This is a template policy and should be reviewed by a qualified lawyer before relying on it.
Who we are
ElimuTech provides school management software to schools ("Schools"). For learner, guardian and staff records, the School is the data controller and we act as its processor. For accounts on our marketing site and platform billing, we are the controller.
What we process
Information Schools enter (learner profiles, guardians, assessments, attendance, fee records, messages), account details of users, and technical logs needed for security. We handle children's personal data only on the School's instructions and apply additional safeguards to it.
How we protect it
Each School's data is logically isolated; access is role-based; sensitive fields are encrypted; actions are audit-logged; transport is encrypted (HTTPS). Platform staff do not access School records except through time-limited, logged support sessions.
Sharing
We do not sell personal data. We use sub-processors for hosting, SMS and email delivery, and payments, only as needed to provide the service.
Your rights
Parents, learners and staff should contact their School to access, correct or delete their data. Schools can export their data at any time. We aim to support obligations under Kenya's Data Protection Act, 2019; this does not by itself constitute a claim of legal compliance.
Retention
We keep School data for as long as the School's account is active and for a limited period afterwards to allow reactivation or export, unless the School requests earlier deletion.
Contact
Questions about privacy: use the contact page.