Privacy Policy

The Data Controller responsible for your personal data under this Policy is:

As the Data Controller, Farmstarck determines the purposes and means of processing your personal data. Where Farmstarck engages third parties to process data on its behalf, such parties act as Data Processors and are bound by the terms of this Policy and applicable data protection law.

For the purposes of this Policy, the following terms carry the meanings assigned to them:

Farmstarck collects the following categories of Personal Data, depending on your interaction with our platforms:

Farmstarck processes your Personal Data on the following lawful bases as recognised under the NDPA 2023:

We process your Personal Data for the following purposes:

• Account Management: To create, verify, and manage your Farmstarck account and user profile.
• Service Delivery: To fulfill product orders, procurement requests and other services you request through the platform.
• Transaction Processing: To process payments, issue receipts and maintain accurate financial records.
• Customer Support: To respond to inquiries, resolve complaints and provide technical assistance.
• Security and Fraud Prevention: To detect, investigate, and prevent fraudulent transactions, misuse or security threats on our platform.
• Regulatory Compliance: To meet our obligations under Nigerian law, including Know-Your-Customer (KYC) requirements, anti-money laundering regulations and applicable agricultural trade regulations.
• Platform Improvement: To analyse usage patterns, conduct research and improve the functionality and performance of our Site and App.
• Personalisation: To deliver content, recommendations, and services tailored to your interests and usage history.
• Marketing and Communications: To send promotional content, product updates and relevant offers where you have consented or where permitted by applicable law.
• Legal Proceedings: To establish, exercise or defend legal claims where necessary.

Farmstarck does not sell your Personal Data. We may share your data with the following categories of recipients, under strict confidentiality obligations and only to the extent necessary for the stated purpose:

Farmstarck uses cookies and similar technologies on our Site and App. Cookies are small text files stored on your device that help us recognise you and enhance your experience.

As a Data Subject under the NDPA 2023, you have the following rights with respect to your Personal Data:

To exercise any of the rights above, please contact our Data Protection Officer using the details set out in Section 14. We will respond to all verified requests within 30 days, or within such shorter period as may be required by applicable law. We may request proof of identity before acting on any request.

Farmstarck's platforms are not directed at or intended for use by persons under the age of 18 years. We do not knowingly collect or process the Personal Data of minors. If you are a parent or guardian and believe that a minor has provided us with Personal Data without your consent, please contact us immediately using the details in Section 14. We will take prompt steps to delete such data from our systems.

Farmstarck implements appropriate technical and organisational measures to protect your Personal Data against unauthorised access, disclosure, alteration or destruction. Our security measures include:

• End-to-end encryption for data in transit using industry-standard protocols (TLS/SSL)
• Encryption and pseudonymisation of data at rest
• Role-based access controls and multi-factor authentication for system access
• Regular vulnerability assessments, penetration testing and security audits
• Documented data breach response and incident management procedures
• Ongoing staff training on data protection obligations and best practices

While we are committed to maintaining strong security standards, no method of electronic transmission or storage is completely secure. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the NDPC as required by the NDPA 2023, within the prescribed timeframes.

Farmstarck retains your Personal Data only for as long as is necessary to fulfill the purposes for which it was collected, to comply with applicable legal and regulatory obligations, or for the establishment, exercise or defence of legal claims. The following general retention principles apply:

At the expiry of the applicable retention period, Personal Data will be securely deleted, destroyed, or anonymised in a manner that prevents reconstruction or identification.

Where the operation of Farmstarck's business requires the transfer of Personal Data outside Nigeria, we ensure that such transfers are conducted in compliance with the NDPA 2023. Specifically, we ensure that:

• Transfers are made only to countries, territories, or international organisations that the NDPC has determined to provide an adequate level of data protection; or
• Appropriate safeguards are in place, including standard contractual clauses, binding corporate rules, or equivalent mechanisms approved under applicable law; and
• Technical and organisational safeguards are applied where the level of protection in the receiving jurisdiction may be lower than that afforded by Nigerian law.

You may contact our Data Protection Officer to obtain further information about the safeguards in place for any specific international transfer.

Farmstarck has designated a Data Protection Officer (DPO) responsible for overseeing compliance with this Policy and applicable data protection laws. For all enquiries, complaints, or requests relating to your Personal Data, please contact:

If you are not satisfied with our response, you have the right to escalate the matter to the Nigeria Data Protection Commission (NDPC) at www.ndpc.gov.ng.

You are responsible for:

• Reviewing this Policy regularly, as it may be updated from time to time
• Ensuring that all Personal Data you provide to Farmstarck is accurate, complete and current
• Keeping your account login credentials strictly confidential and not sharing them with any third party
• Notifying us promptly if you believe your account has been compromised or your data has been misused
• Complying with applicable laws when using our platform, including laws governing agricultural trade, data protection, and financial transactions

Our Site and App may contain links to external websites, applications, or social media platforms that are not operated or controlled by Farmstarck. This Policy does not apply to those third-party platforms. We do not accept responsibility for the data practices, content or privacy policies of any external platform. We encourage you to review the privacy policy of any third-party site before submitting your Personal Data.

Farmstarck may use automated processing technologies, including profiling, to personalise your experience on our platform, deliver relevant product recommendations and assess certain transactional risks. Where any automated decision-making produces legal or similarly significant effects on you, we will inform you and provide you with the right to request human review of the decision, to express your point of view and to contest the outcome.

Farmstarck reserves the right to update or revise this Policy at any time to reflect changes in applicable law, regulatory requirements or our business practices. The revised Policy will be published on our Site and App with an updated “Last Reviewed” date. Where the changes are material, we will notify you by email or through a prominent notice on our platforms prior to the changes taking effect. Your continued use of our Site or App following notification of changes constitutes acceptance of the updated Policy.