Privacy and data protection
DukaTrack handles information that matters: sales, stock, customers, credit sales, wholesale orders, payments, branches, and reports. This policy explains what we collect, why we use it, when we may contact you, and the choices you have.
Last updated
This policy applies to DukaTrack websites, apps, services, support channels, sales demos, and marketing interactions.
Kenya Data Protection Act, 2019
GDPR-style privacy principles where applicable
Marketing opt-out rights
Customer-owned business data
Sales, stock, customer, credit, branch, payment, and finance records remain your business data.
We process information to provide the platform, support users, improve reliability, prevent fraud, and communicate with you.
We may use account, contact, and usage information to send product updates, offers, education, and campaigns. You can opt out of marketing.
We respect rights under the Kenya Data Protection Act, 2019 and apply international privacy principles where relevant.
This Privacy Policy applies to Duka Track Softwares Limited, DukaTrack ERP, DukaPOS, DukaStore, DukaAI, Kodiloop where linked to this policy, our websites, mobile apps, dashboards, sales channels, customer support, events, and marketing activities.
When your business uses DukaTrack to store customer information, you are usually responsible for deciding what customer data goes into the platform. DukaTrack processes that data to provide the service, support the account, secure the platform, and meet legal obligations.
Name, phone number, email, job role, business name, branch, billing details, and account credentials.
Products, inventory, stock movement, sales, invoices, payments, expenses, customer records, suppliers, staff records, wholesale orders, and credit balances.
Device type, IP address, browser, approximate location, logs, pages visited, features used, errors, and performance data.
Messages, calls, demos, chat conversations, requests, feedback, campaign responses, and training interactions.
We may use personal information such as your name, phone number, email address, business details, demo requests, campaign responses, usage patterns, industry, location, and subscription status to send marketing messages, product education, onboarding guidance, promotions, event invitations, offers, newsletters, and customer success content.
Marketing may be sent by email, phone, SMS, WhatsApp, in-app messages, retargeting channels, or other business communication channels allowed by law. You can opt out of direct marketing by using unsubscribe options where available or contacting us at info@dukatrack.com. Opting out of marketing does not stop important service, billing, legal, or security messages.
We may share information with trusted service providers who help us operate DukaTrack, including cloud hosting, payments, email/SMS, analytics, customer support, security, accounting, and professional advisory providers. They may only use information for the work they perform for us.
We may also disclose information when required by law, regulation, court order, tax authority, regulator, law enforcement request, business transfer, merger, acquisition, financing, restructuring, or to protect DukaTrack, our customers, our users, or the public.
DukaTrack is based in Kenya, but some infrastructure, support, analytics, communication, and payment providers may process data in other countries. Where this happens, we aim to use safeguards consistent with the Kenya Data Protection Act, 2019, GDPR-style principles where applicable, contracts, access controls, and provider due diligence.
We use practical security measures such as encrypted connections, role-based access, backups, monitoring, staff access controls, and incident review. No online service can guarantee perfect security, so customers must also use strong passwords, limit staff access, and remove access when staff leave.
We keep information while needed to provide the service, comply with law, resolve disputes, enforce agreements, prevent abuse, support backups, and meet accounting, tax, audit, or legitimate business needs. Some records may remain in backups for a limited period before deletion cycles complete.
We use cookies, pixels, local storage, and similar technologies for sign-in, security, preferences, analytics, performance, marketing, and measuring campaigns. You can manage cookies in your browser, but disabling some cookies may affect platform features.
To make a request, contact info@dukatrack.com. We may need to verify your identity and may decline or limit requests where the law allows, such as where records are needed for tax, security, disputes, fraud prevention, or legal obligations.
We process personal data for clear service, business, legal, consent-based, or legitimate-interest reasons.
We try to use data for the reasons explained here, in our terms, or at the point of collection.
We aim to collect what we need to run, protect, support, and improve the platform.
We use practical technical and organizational safeguards, including access control, encrypted connections, monitoring, and backups.
For privacy questions, marketing opt-outs, or data rights requests, contact Duka Track Softwares Limited at info@dukatrack.com or +254 742 548 359. Official correspondence may be sent to Halima Heights, 15th Floor, Eastleigh 2nd Street, Nairobi, Kenya.