Privacy
Policy

Patolink is an enterprise technology practice in Nairobi. We sell services (our time, our on-call, our configuration) and named products (licences, appliances, seats, and Cloud EA Linux VPS plans). The controller for personal data collected on patolink.com and in the Cloud EA portal is Patolink Investments Limited.

Office: Unit 1105, Applewood Adams, Ngong Road, Nairobi, Kenya. Desk hours: Monday–Saturday, 8.00 AM–5.00 PM East Africa Time. Emergencies on retained estates are covered around the clock.

This notice applies to visitors of the public website, people who send a quote or contact form, people who open a Cloud EA portal account, people named on an order or invoice, and staff we deal with at a customer organisation.

It does not replace a vendor’s own privacy notice for Microsoft, Sophos, 3CX, Yeastar, or other products we place. Those vendors are separate controllers for data they hold in their own clouds.

We collect only what we need to quote, deliver, bill, and support the work.

• check_circle Identity and contact: name, work email, phone, organisation, job title, office address.
• check_circle Commercial: quotations, orders, plan names, billing cycle, payment references, invoices, and correspondence.
• check_circle Portal: login email, role on the account, support tickets, and audit events we keep so the desk can see who changed what.
• check_circle Cloud EA instance metadata: hostname, plan, operating-system image you chose, public addresses we assign, power state, and usage we need to bill and support. We do not treat the files inside your virtual machine as our content.
• check_circle Website: pages requested, browser type, referring URL, and a coarse location derived from the IP address. We do not sell advertising profiles.
• check_circle Calls and visits: notes from the Nairobi desk when you phone or sit with us at Applewood Adams.

We use personal data to answer a request, write a quotation, take payment, provision a Cloud EA instance after payment, issue credentials in the portal, send invoices, deliver a service line, and keep the estate we are retained to watch.

We also use it to detect abuse under the Acceptable Use Policy, to meet tax and accounting duties in Kenya, and to improve how the website and portal work. We do not sell personal data.

Under the Data Protection Act we rely on: performance of a contract (or steps you ask us to take before a contract); our legitimate interests in running a Nairobi practice and a VPS platform; a legal obligation (tax, accounting, court or regulator request); and consent where we ask for it — for example a marketing brief you subscribe to and can leave.

You may refuse a field that is not required. If a field is required to provision or bill, we will say so and we will not complete that step without it.

We share personal data only with people who need it to do the work.

• check_circle Staff and contractors under Patolink direction, bound to keep it confidential.
• check_circle Payment rails you choose on an order — M-Pesa, card acquirers, or an accounts invoice process.
• check_circle Vendors whose product is on the quotation, when they must issue a licence or a tenant in your name.
• check_circle Professional advisers, insurers, and auditors when the file requires it.
• check_circle Regulators, courts, or law-enforcement when Kenyan law requires it.

We do not list the hypervisor or management addresses of the platform on a customer surface. Customers see plans, credentials, and billing.

Cloud EA instances on published plans are provisioned in Kenya. Billing and portal records for those instances are kept so the Nairobi desk can operate the account.

Some tools we use to run the website or send mail may process a copy outside Kenya. Where that happens we take steps that match the Act — a contract, a transfer assessment, or another lawful mechanism — and we keep the customer estate itself in the site we quoted.

Quote and contact forms are kept while we work the request and for a short period after so the desk can see what was asked. Portal accounts stay while the organisation is a customer and for a limited period after closure so invoices and credentials can be reconstructed if there is a dispute.

Tax and accounting records are kept for the period Kenyan law requires. Backup copies of platform metadata follow the retention on the published plan or the quotation. Content inside a virtual machine is yours; we delete the instance when the service ends, subject to any legal hold.

Subject to the Act, you may request access to personal data we hold about you, correction of what is wrong, deletion where we no longer need it, restriction or objection to some processing, and a copy in a portable form where that is technically reasonable.

Write to info@patolink.com from the address we have on file, or visit the office. We will answer within the statutory period. You may also complain to the Office of the Data Protection Commissioner if you are not satisfied.

The public site uses cookies that are needed to keep a session, remember a VPS configurator choice, or measure that a page loaded. The portal uses cookies to keep you signed in and to protect the account.

You can block cookies in the browser. The site will still render; the portal cannot keep you signed in without a session cookie.

Our website, portal, and services are for organisations and adults acting for them. We do not knowingly collect personal data from children.

We will update this page when the practice, the platform, or the law changes. The date at the top is the date this text took effect. Material changes that affect an existing customer will also be noted from the Nairobi desk where we have a current email on the account.

Data protection and privacy requests: info@patolink.com.

Phone: +254 709 343 000 / +254 722 616 999.

Office: Unit 1105, Applewood Adams, Ngong Road, Nairobi, Kenya.

Related public terms: Terms of Service, Service Level Agreement, and Acceptable Use Policy on this site.