Privacy Policy
Last updated: August 12, 2026
1. Overview
AgriBridge Africa connects growers across the continent with importers in Europe and North America. To do that safely we handle identity documents, farm data and trade correspondence. This policy explains what we collect, why, and what control you keep.
2. Information we collect
Account details (name, email, phone, country, role), farmer verification records (national ID, cooperative letters, export permits, farm GPS coordinates, lab reports), buyer company details, listing and RFQ content, messages exchanged on the platform, payment metadata for listing fees and subscriptions, and technical data such as device type, IP address and pages viewed.
3. How we use your information
We use data to verify farmers, publish listings, match buyers with suitable lots, process listing fees and Buyer Pass subscriptions, deliver enquiry notifications, prevent fraud and abuse, resolve disputes, and improve the marketplace with aggregated analytics.
4. Legal basis for processing
Where GDPR applies we rely on contract performance (operating your account and trades), legitimate interests (platform safety, analytics, product improvement), legal obligation (export, tax and sanctions compliance) and consent (marketing emails, optional cookies). Consent can be withdrawn at any time.
7. International data transfers
Because trades span Africa, the EU and the US, personal data may be transferred outside your country. Transfers out of the EEA rely on Standard Contractual Clauses and, where required, supplementary technical safeguards such as encryption in transit and at rest.
8. Data retention
Account and listing data is retained while your account is active. Verification documents are kept for seven years after the last shipment to satisfy export and audit obligations. Message threads tied to a completed trade are retained for three years. Anything else is deleted or anonymised within 12 months of account closure.
9. Your rights
Depending on where you live, you may request access, correction, deletion, restriction or portability of your data, object to processing, and lodge a complaint with your supervisory authority. Verified requests are answered within 30 days at privacy@agribridge.africa.
10. Security
Documents are encrypted at rest, access is role-based and logged, and verification reviewers see only the files required for the decision in front of them. We run annual penetration testing and require multi-factor authentication for all staff accounts.
11. Children's privacy
AgriBridge Africa is not intended for anyone under 18. We do not knowingly collect data from minors, and we delete such accounts and records as soon as we become aware of them.
12. Changes and contact
We will post material changes to this policy on this page and notify account holders by email at least 14 days before they take effect. Questions can be sent to privacy@agribridge.africa or through the contact page.