Legal

Privacy Policy

Last updated: May 22, 2026

This Privacy Policy explains how FarmSync Aqua collects, uses, stores, shares, and protects personal data when farmers, group users, suppliers, customers, staff, and visitors use our website, onboarding forms, feed store, financing workflows, reports, and related support services.

This policy is drafted with Kenya's Data Protection Act, 2019 and the Data Protection (General) Regulations, 2021 in mind. It is a practical summary and should be reviewed by counsel before launch or ODPC filing.

Who is responsible for your data

FarmSync Aqua decides why and how most personal data is processed on the platform. For some services, such as payment, delivery, financing, hosting, messaging, or support, trusted service providers may process data on our behalf or as independent providers.

For privacy questions or requests, call 0720712888 or 0754233807.

Personal data we collect

Account and identity

Name, phone number, email address, password credentials, role, approval status, membership number, National ID where provided, and account activity.

Farm and location

County, sub-county, village or landing site, farm name, GPS coordinates where provided, cage dimensions, species, stocking dates, stock quantities, costs, measurements, mortality, feed use, harvests, and sales.

Orders and financing

Feed orders, cart details, delivery information, payment status, financing applications, disbursements, repayments, references, balances, and related support notes.

Technical and support data

Device and browser information, IP address, cookies or session identifiers, security logs, messages, calls, complaints, and other information you send to us.

How we use personal data

To create, verify, approve, secure, and manage user accounts.
To onboard farmers, farms, cages, and stock batches.
To calculate feed recommendations, production reports, farm performance, harvest records, and related dashboards.
To process feed orders, delivery coordination, payments, financing applications, disbursements, and repayments.
To communicate service updates, account notices, support responses, and operational messages.
To prevent fraud, protect the platform, investigate misuse, and enforce our Terms.
To meet legal, tax, audit, regulatory, accounting, and ODPC-related obligations.
To improve FarmSync Aqua using aggregated or anonymised information where practical.

Our lawful reasons for processing

Depending on the activity, we process personal data because it is needed to provide the service or perform a contract, because you have given consent, because we must comply with legal obligations, because we have a legitimate operational or security interest, or because processing is needed to protect the rights and interests of users and the platform.

Where we rely on consent, you may withdraw it. Withdrawal does not affect processing that happened before withdrawal, and some services may not work without the required data.

Sharing personal data

We only share personal data where necessary and with appropriate safeguards. Recipients may include approved group or BMU administrators, suppliers, delivery partners, payment providers, financing partners, hosting and software providers, professional advisers, auditors, regulators, law enforcement, courts, or another party involved in a lawful business transfer.

We do not sell personal data. We require service providers who process data for us to keep it confidential, protect it, and use it only for agreed purposes.

International transfers

Some technology providers may store or access data outside Kenya. Where personal data is transferred outside Kenya, we aim to use safeguards required by Kenyan data protection law, such as contractual protections, appropriate security measures, consent where required, or another lawful transfer basis.

Retention

We keep personal data only for as long as reasonably necessary for the purpose collected, including service delivery, account management, farm records, financing and repayment records, legal compliance, tax and accounting records, dispute handling, fraud prevention, and audit needs. When data is no longer required, we delete, anonymise, or securely restrict it.

Security

We use administrative, technical, and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, disclosure, or destruction. No system is perfectly secure, so users should keep passwords private and tell us promptly about suspected unauthorised access.

Your rights

Under Kenyan data protection law, you may have the right to be informed about how your data is used, access your personal data, object to some processing, ask for false or misleading data to be corrected, and ask for deletion of false or misleading data. You may also raise a complaint with us or with the Office of the Data Protection Commissioner.

We may need to verify your identity before acting on a request. If we cannot fully comply, we will explain why where the law allows.

Children

FarmSync Aqua is intended for adults and organisations involved in aquaculture, feed, financing, and farm operations. We do not knowingly create accounts for children without appropriate authority from a parent, guardian, or authorised representative.

Changes to this policy

We may update this policy when our services, legal duties, or data handling practices change. The updated version will be posted on this page with a new date.