Farmbity Privacy Notice

This notice applies to Farmbity websites, dashboards, marketplace features, communications, support, and services that link to it. Farmbity acts as the data controller for personal data processed to operate the platform, unless a specific notice explains a different arrangement.

It applies to farmers, buyers, drivers, agents, administrators, public visitors, support contacts, and people whose information is included in a legitimate Farmbity transaction.

Required information depends on your role and activity. For example, a public visitor provides less information than a driver seeking bidding approval or a recipient requesting a payout.

From you: when you register, use Google or another available sign-in method, complete onboarding, update settings, upload media or proof, create a listing, order, bid, message, review, dispute, or contact support.

From other participants: when a buyer, farmer, driver, agent, or administrator records information connected to your shared order, market, transport request, payment review, dispute, or support case.

Automatically: when the service records session, security, request, device, error, and usage information needed to deliver and protect the application. This includes privacy-preserving visitor activity records used to understand which pages are opened and the approximate areas from which visitors reach Farmbity.

From service providers or lawful sources: when sign-in, maps, route estimates, email delivery, media hosting, database hosting, payment reconciliation, or fraud and identity checks return information needed for the requested service.

Farmbity may also use information to comply with law, respond to valid authority requests, enforce the Terms of Use, defend legal claims, and communicate important service, safety, policy, and transaction updates.

Depending on the processing, Farmbity relies on one or more recognized lawful bases:

• Contract or steps requested before a contract, such as opening an account, showing listings, handling an order, coordinating transport, or recording payment and fulfillment.
• Legal obligation, such as retaining required transaction records, responding to lawful requests, preventing prohibited financial activity, or meeting data-protection duties.
• Legitimate interests, such as securing accounts, preventing fraud, improving the marketplace, supporting users, maintaining audit records, and resolving disputes, where those interests do not override your rights.
• Consent, where Farmbity specifically asks for it. You may withdraw consent, but withdrawal does not make earlier lawful processing invalid.

If required data is withheld, Farmbity may be unable to provide the related feature, approve a role, process a transaction, or meet a legal obligation.

Public or marketplace-visible information may include a display name, farm or company name, logo, profile image, role, market, general location, listing details and media, reviews, ratings, and content intentionally posted in public discussion rooms.

Transaction participants may receive contact and location information reasonably needed to coordinate an accepted order, pickup, delivery, support, or dispute. Access depends on role and order status.

Restricted information includes passwords, identity proof, full bank details, internal review notes, private messages, payment proof, and non-public audit data. This information is limited to the user, authorized Farmbity personnel, and service providers or authorities with a valid need.

Before posting in a public listing, review, or discussion, remove information you do not want other users or search engines to see.

Farmbity may share only the information reasonably needed with:

• farmers, buyers, selected or bidding drivers, agents, and market participants involved in a relevant marketplace activity;
• authorized Farmbity administrators, support, finance, trust, safety, and operational personnel;
• providers supporting cloud hosting, databases, authentication, media uploads, email, mapping and routing, security, and other platform infrastructure;
• banks, payment reviewers, professional advisers, insurers, auditors, or dispute specialists where relevant to a transaction or legal obligation;
• regulators, courts, law enforcement, or other authorities when disclosure is required or permitted by law;
• a successor or participant in a genuine merger, financing, restructuring, or transfer, subject to appropriate confidentiality and legal safeguards.

Farmbity does not sell personal data for money. Service providers may use data only for agreed services and their lawful obligations, subject to contractual and security controls appropriate to the service.

Some cloud, authentication, upload, email, map, and infrastructure providers may process or store information outside Nigeria. When personal data is transferred internationally, Farmbity will use a lawful transfer mechanism and safeguards appropriate to the destination, provider, and risk.

Farmbity keeps personal data only as long as reasonably needed for the purpose collected and for applicable legal, accounting, fraud-prevention, safety, dispute, and recordkeeping requirements.

• Account and profile data is generally kept while the account is active and for a reasonable period needed to close or defend account activity.
• Order, payment, refund, payout, transport, dispute, and audit records may be kept longer because they support financial reconciliation, legal obligations, and claims.
• Identity and proof documents are kept only while needed for verification, fraud prevention, regulatory duties, or an active investigation, then deleted, anonymized, or access-restricted where appropriate.
• Listing media, discussions, reviews, support data, security logs, and backups follow operational retention periods based on account status, public records, safety, recovery, and dispute needs.
• Anonymous visitor activity records are retained for up to 90 days, then deleted or aggregated. The records use a rotating salted daily hash and do not retain raw IP addresses or exact browser location.

Deletion from the live service may not immediately remove securely isolated backups. Farmbity may retain a minimal record when needed to document a request, enforce a restriction, prevent fraud, or comply with law.

Farmbity uses measures designed to protect confidentiality, integrity, and availability, including encrypted network connections, password hashing, role-based access, restricted administrative tools, status controls, audit records, provider security features, and review of sensitive payment or identity actions.

No online service can promise absolute security. Keep your password and one-time codes private, use a secure device, sign out from shared devices, and report suspicious activity promptly. Farmbity will assess suspected personal-data incidents and notify affected people or authorities when required.

Farmbity uses a short-lived first-party session-storage marker to avoid recording duplicate visitor activity during the same 15-minute window. It is not used for cross-site advertising or to identify a person. Farmbity does not currently use this notice to authorize third-party behavioral advertising. If non-essential analytics or advertising technologies are introduced, this notice and any required consent choices will be updated.

Farmbity may automatically rank search results, suggest spelling corrections, identify possible product matches, estimate distance or transport cost, calculate fees, and show risk or workflow indicators. These tools support marketplace decisions and can be affected by incomplete or inaccurate data.

Farmbity does not intend to make a solely automated decision that produces a legal or similarly significant effect without a lawful basis and required safeguards. Important identity, payment, dispute, payout, and enforcement decisions may involve authorized human review.

Subject to the Nigeria Data Protection Act 2023 and lawful limitations, you may ask Farmbity to:

• confirm whether your personal data is processed and provide access to it;
• correct inaccurate or incomplete information;
• delete information or restrict its processing in appropriate circumstances;
• object to processing based on legitimate interests or to direct marketing;
• provide eligible information in a portable format;
• withdraw consent where processing depends on consent;
• raise concerns about qualifying automated decision-making;
• complain to the Nigeria Data Protection Commission or seek another remedy available by law.

Many details can be corrected in Profile Settings. For another request, email support@farmbity.com. Farmbity may verify your identity before disclosing or changing personal data and may retain information that must lawfully remain in transaction, security, or legal records.

Farmbity marketplace accounts are intended for people who can lawfully enter marketplace transactions or are properly authorized to act for an organization. Farmbity does not knowingly invite children to create independent trading accounts or submit identity, payment, or transaction data.

If you believe a child supplied personal data without appropriate authority, contact Farmbity so the account and information can be reviewed.

Farmbity may update this notice when services, providers, practices, or legal requirements change. Material changes will be communicated through the platform or another appropriate channel, and the effective date will be updated.

This notice should be read with the Terms of Use and Compliance framework.