Privacy Policy

1. Who we are

Vinfarm Solutions is a farm and agri-technology business based in Eldoret, Kenya. We operate a diversified livestock and crop farm and provide the Vinfarm Solutions farm-management software to Kenyan farmers.

We are the data controller for all personal data collected through our website and app.

Contact: info@vinfarm.co.ke · +254 720 336 363

2. Data we collect

We do not collect payment card numbers. M-Pesa payments are processed through Safaricom — their terms apply.

3. How we use your data

• To send you app launch updates and farm newsletters (waitlist subscribers only).
• To respond to shop enquiries and process orders.
• To provide and improve the Vinfarm Solutions farm-management app.
• To send transactional notifications (vaccination reminders, batch alerts) within the app.
• To understand website traffic patterns and improve the site (anonymised analytics only).
• To comply with legal obligations under Kenyan law.

We do not sell your personal data to third parties. We do not use your data for automated decision-making or profiling.

4. Legal basis for processing (Kenya DPA 2019, Section 30)

5. Who we share data with

We only share data with trusted service providers who process it on our behalf:

• Supabase Inc. — database and authentication for the app and website (servers in EU/US; standard contractual clauses apply).
• Cloudflare Inc. — website hosting and anonymised analytics.
• Google Fonts — fonts loaded from Google servers (your IP is transmitted; see Google's privacy policy).

We may disclose data if required by Kenyan law, court order, or to protect the rights and safety of users.

6. How long we keep your data

After the retention period, data is securely deleted or permanently anonymised.

7. Your rights under the Kenya DPA 2019

You have the right to:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate or incomplete data.
• Deletion — ask us to delete your data (subject to legal retention requirements).
• Object — object to processing based on legitimate interest.
• Withdraw consent — unsubscribe from newsletters at any time.
• Data portability — receive your app data in a machine-readable format.
• Lodge a complaint — with the Office of the Data Protection Commissioner (ODPC) Kenya at odpc.go.ke.

8. Security

We protect your data with industry-standard measures:

• All data in transit is encrypted via HTTPS (TLS 1.3).
• Database access is restricted using Row Level Security (Supabase RLS).
• App passwords are hashed — we never store plain-text passwords.
• Access to production data is limited to authorised personnel only.

Despite these measures, no online service is 100% secure. If you suspect a breach, contact us immediately at info@vinfarm.co.ke.

9. Cookies

Our website uses minimal cookies:

• Strictly necessary: A small cookie may be set by Cloudflare for security purposes (bot detection). These cannot be disabled.
• Analytics: Cloudflare Web Analytics uses no cookies and collects no personal data — only aggregated, anonymised traffic statistics.
• No advertising cookies — we do not run ads on this site.

The app (app.vinfarm.co.ke) uses a session cookie for authentication. This cookie is essential for the app to function and cannot be disabled.

10. Children's privacy

Our services are not directed at persons under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it promptly.

11. Changes to this policy

We may update this policy from time to time. When we do, we will update the "Last updated" date at the top and, for material changes, notify subscribers via email. Continued use of our services after changes constitutes acceptance of the revised policy.

12. Contact us