Last updated: March 2026

This policy explains how we collect, use, store, and protect personal data in accordance with GDPR, African Union Convention on Cyber Security and Personal Data Protection, and local data protection laws.

What We Collect

• Contact information: name, email, phone number (for partners and program participants)
• Program data: participation records, training attendance, outcomes data
• Agricultural data: farm size, crops, yields (anonymized for analysis)
• Monitoring & Evaluation: photos, testimonials, case studies (with explicit consent)
• Website analytics: device type, pages visited, referral sources (anonymized)

How We Use Data

Data Protection Measures

• Encrypted storage and transmission (TLS 1.3+)
• Role-based access control (staff access only on need-to-know basis)
• Regular security audits and vulnerability assessments
• Data minimization (we collect only what is necessary)
• Retention limits (personal data deleted after program completion unless consent extends)
• Anonymization for research and public reporting

Your Rights

Participants and partners have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion (subject to legal retention requirements)
• Withdraw consent for photos, testimonials, or case studies
• Lodge a complaint with a data protection authority

Third-Party Sharing

We do not sell personal data. We share data only with:

• Implementation partners (with data processing agreements)
• Funders and auditors (aggregated or anonymized data only)
• Legal authorities (when required by law)

Contact

For data protection inquiries or to exercise your rights, email info@agrirobust.org.