Privacy Policy
Effective Date: 1 January 2025 | Last Updated: 1 May 2025
AgroFund Technologies Ltd (“AgroFund”, “we”, “us”, or “our”) is committed to protecting your personal data. This Privacy Policy explains what information we collect, why we collect it, how it is used and stored, and the rights you have regarding your data when you use the AgroFund platform and website.
Please read this policy carefully. By using the Platform, you acknowledge that you have read and understood this Privacy Policy.
1. Information We Collect
Account Information: When you register, we collect your full name, email address, phone number, country of residence, and a secure password. Corporate investors additionally provide entity name, registration number, and authorised representative details.
Identity Verification (KYC) Data: To comply with anti-money laundering and financial regulations, we collect copies of government-issued identity documents, proof of address, tax identification numbers, and source-of-funds declarations. This data is processed by our KYC partner and stored securely.
Financial Data: We collect bank account details (IBAN, account number, sort code) for the purpose of processing wallet deposits and investment return disbursements. We do not store card details on our servers; card payments are handled by PCI-DSS compliant payment processors.
Usage Data: We automatically collect information about how you use the Platform, including IP address, browser type, device identifiers, pages visited, session duration, and feature interactions. This data is used to improve platform performance and security.
Communications: If you contact our support team, we retain records of those communications to resolve your queries and improve service quality.
2. How We Use Your Information
We use the information we collect to: (a) create and manage your account; (b) verify your identity and comply with regulatory obligations; (c) process investments, disbursements, and wallet transactions; (d) provide real-time updates on your investments including satellite imagery data, production milestones, and harvest notifications; (e) communicate important platform updates, policy changes, and account alerts; (f) improve the Platform through analytics and user feedback; (g) detect and prevent fraud, money laundering, and unauthorised account access.
We will not use your personal data for purposes other than those described in this policy without first obtaining your explicit consent.
3. Legal Basis for Processing
We process your data on the following legal bases: Contract Performance — processing is necessary to fulfil our obligations under your investor agreement; Legal Obligation — KYC, AML, and financial reporting requirements obligate us to collect and retain certain data; Legitimate Interests — fraud prevention, platform security, and service improvement; Consent — for marketing communications and non-essential cookies, which you may withdraw at any time.
4. Data Sharing
We do not sell your personal data. We share data only with: (a) Verified Farmers on the Platform, who receive limited information necessary to manage the investment relationship (e.g., investment amount, not full identity); (b) KYC and AML service providers for identity verification; (c) Payment processors for wallet and disbursement transactions; (d) Cloud and data hosting providers operating under strict data processing agreements; (e) Regulators and law enforcement where required by law; (f) Professional advisors (lawyers, auditors) bound by confidentiality obligations.
Any third-party service provider we engage is contractually required to maintain appropriate security standards and to use your data only for the specific purpose for which it was shared.
5. Data Retention
We retain your account and transaction data for a minimum of seven (7) years after account closure to comply with financial record-keeping regulations. KYC documentation is retained for the period required by applicable AML law. You may request deletion of non-mandatory data (e.g., marketing preferences, usage analytics) at any time.
6. Data Security
We implement industry-standard security measures including AES-256 encryption for data at rest, TLS 1.3 for data in transit, role-based access controls, and regular third-party penetration testing. Multi-factor authentication is mandatory for all investor accounts.
Despite these measures, no system is completely immune to security breaches. In the event of a data breach that poses a risk to your rights and freedoms, we will notify you and relevant regulatory authorities in accordance with applicable law.
7. Cookies and Tracking Technologies
We use essential cookies to maintain your session and secure your account. We use analytics cookies (e.g., anonymised usage tracking) to understand how users interact with the Platform. We use preference cookies to remember your settings. Non-essential cookies are only deployed with your consent, which you can manage via our cookie preference centre accessible from the Platform footer.
8. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your personal data: (a) Access — request a copy of the data we hold about you; (b) Rectification — request correction of inaccurate data; (c) Erasure — request deletion of data we are not legally required to retain; (d) Restriction — request that we limit processing in certain circumstances; (e) Portability — receive your data in a structured, machine-readable format; (f) Objection — object to processing based on legitimate interests; (g) Withdraw Consent — where processing is based on consent, withdraw it at any time without affecting prior lawful processing.
To exercise any of these rights, contact our Data Protection Officer at [email protected]. We will respond within 30 days.
9. International Data Transfers
AgroFund operates across multiple countries. Your data may be transferred to and processed in countries outside your own. Where such transfers occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by relevant data protection authorities.
10. Children’s Privacy
The Platform is not directed at individuals under 18 years of age. We do not knowingly collect personal data from children. If you believe a minor has provided us with personal data, please contact us immediately and we will delete it.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of material changes by email and by prominent notice on the Platform at least 14 days before the changes take effect. The “Last Updated” date at the top of this page reflects the most recent revision.
12. Contact Us
For privacy-related enquiries, contact our Data Protection Officer at [email protected] or write to: AgroFund Technologies Ltd, Data Protection Officer, P.O. Box 1042, Accra, Ghana.