Effective Date: 1 April 2026 | Last Updated: 2 June 2026 | Version: 2.1

1. Who We Are

Agrosocial Services Limited (“Agrosocial”, “we”, “us”, or “our”) is an agricultural compliance and export consultancy registered and operating in Nairobi, Kenya. We operate the website agrosocialservices.co.ke.

For data protection purposes, Agrosocial Services Limited is the data controller for personal information collected through this website. Cookie consent configurations are dynamically managed via the Complianz Privacy Suite to ensure international compliance validation.

Data Protection Point of Contact: For all data protection enquiries, requests, and complaints, contact us at info@agrosocialservices.co.ke with the subject line “Data Protection Request”. We will respond within 30 days without charge. Where required under the Kenya Data Protection Act (2019) or GDPR, we will appoint a formal Data Protection Officer and update this section accordingly.

2. Information We Collect

Information you provide directly

When you contact us via email or our contact form, we collect your name, email address, phone number, and the content of your message.

When you contact us via WhatsApp, your message and phone number are received through Meta Platforms Inc.’s WhatsApp service. Meta may process certain metadata associated with your message in accordance with their own Privacy Policy, available at whatsapp.com/legal/privacy-policy. We do not share your WhatsApp contact details with any third party. We use WhatsApp solely to respond to your enquiry and, with your consent, to send you relevant updates about our services.

When you purchase a digital product through our WooCommerce store, your payment and contact details are processed by our payment processor (Pesapal/DPO Group). When you subscribe to our newsletter or request free resources, we collect your email address.

Information collected automatically

When you visit our website, our third-party partners and we automatically collect certain information through cookies and similar tracking technologies. This includes your IP address, browser type and version, device type and operating system, pages visited and time spent, referring website, and general geographic location (country/region level).

This data is collected by the following third-party services operating on our website:

• Google Analytics 4 — website traffic and behaviour analysis
• Grow by Mediavine — audience engagement, social sharing, and email capture tools
• Google AdSense / Google Ad Manager — advertising services (currently inactive; will be activated when traffic thresholds are reached — this policy will be updated prior to activation)

3. Cookies and Tracking Technologies

Our website uses cookies — small text files stored on your device — to improve functionality, analyse traffic, and support advertising. The categories of cookies used are:

You can control or disable non-essential cookies via our Complianz cookie consent banner or through your browser settings. For EU, UK, and international visitors, non-essential cookies are blocked dynamically until you provide affirmative consent.

4. Grow by Mediavine

This website uses Grow by Mediavine, a suite of audience engagement tools. Grow may collect the following data to provide its services:

• Email address (if you subscribe through a Grow form)
• Social sharing behaviour
• Content bookmarking and engagement data
• Device and browser information for functionality purposes

Grow by Mediavine operates as a data processor on our behalf for email capture and engagement features. Mediavine’s data practices are governed by their own Privacy Policy, which you can review at mediavine.com/privacy-policy.

If you subscribe through a Grow form, your email address is stored by Mediavine’s platform and used to send you the content or newsletter you requested. You may unsubscribe at any time using the link in any email we send, or by contacting us at info@agrosocialservices.co.ke.

5. Advertising — Google AdSense (Future)

When Google AdSense is activated on this website, Google will use cookies and similar technologies to serve advertisements based on your prior visits to this and other websites.

• Google may use the DoubleClick cookie to serve ads across the web
• You may opt out of personalised advertising by visiting google.com/settings/ads
• You may also opt out through the Network Advertising Initiative opt-out page at optout.networkadvertising.org
• All advertisements will be clearly labelled as “Sponsored” or “Advertisement”
• Agrosocial Services does not control which specific ads Google displays — ads are served automatically based on content relevance and visitor interest signals
• We accept advertising only from advertisers whose products and services are relevant to Kenya’s agricultural sector

Google’s privacy policy governing AdSense is available at policies.google.com/privacy.

6. Direct Partner Advertising

This website may display banner advertisements from direct commercial partners — organisations whose products and services are relevant to Kenya’s agricultural sector, including logistics companies, agri-banks, certification bodies, and development organisations. These advertisements are clearly labelled as “Partner” content.

Direct advertising partners do not receive your personal data. Partner advertisements are served as static images or links — they do not use cookies or tracking technologies on our website. For more information about our partner advertising, see our Partner With Us page.

7. Legal Basis for Processing and How We Use Your Information

Under the Kenya Data Protection Act (2019) and the EU General Data Protection Regulation (GDPR Article 6), we process your personal data under the following legal grounds:

• Consent — for sending newsletters, marketing materials, and placing non-essential cookies. You may withdraw consent at any time.
• Performance of a Contract — to process payments, manage WooCommerce transactions, and deliver digital downloads.
• Legitimate Interests — to optimise our website layout, resolve technical errors, audit performance analytics, and safeguard site security. We have assessed that our legitimate interests are not overridden by your rights.
• Legal Obligation — to satisfy mandatory statutory requirements, financial reporting duties, or cooperate with regulatory investigations.

We process this data specifically to:

• Respond to your enquiries and provide consultancy services
• Deliver digital products you have purchased
• Send you the free resources or newsletter you have requested
• Improve our website and content based on anonymised usage data
• Serve relevant advertising to support the free content we publish (when AdSense is active)
• Comply with our legal obligations under Kenyan law and applicable international regulations

8. How We Share Your Information

We do not sell, rent, or share your personal information with third parties for their own marketing purposes. We may share information with:

• Service providers who help us operate our business — including Pesapal/DPO Group (payments), Google (analytics and future advertising), and Mediavine (Grow engagement tools) — under strict confidentiality and data processing obligations
• Subcontracted consultants — when you request a service that requires specialist expertise, we may share the minimum necessary details with a verified consultant. We will inform you before doing this.
• Legal authorities — if required by Kenyan law, a valid court order, or a formal request from the Office of the Data Protection Commissioner (ODPC)

9. Digital Product Downloads

When you purchase a digital product from our WooCommerce store, your transaction is processed by Pesapal/DPO Group. We retain a record of your purchase for delivery and customer support purposes. Download links are time-limited. We do not store your full payment card details.

10. International Data Transfers

To provide our services, your data may be transferred to and processed on servers outside Kenya — including servers operated by Google (USA), Mediavine (USA), and Paystack. Where such transfers occur, we ensure they are covered by appropriate data protection safeguards including Standard Contractual Clauses (SCCs) or adequacy decisions where applicable. A copy of applicable safeguards is available on request by contacting info@agrosocialservices.co.ke.

11. Data Security

We implement reasonable technical and organisational measures to protect your personal information. Our website uses HTTPS encryption. Payments are processed by PCI-DSS compliant processors. Access to personal data is restricted to authorised personnel only. However, no internet transmission is completely secure, and we cannot guarantee absolute security.

12. Data Retention

We retain your personal information only as long as necessary for the purposes described in this policy:

When retention periods expire, data is securely deleted or anonymised. You may request early deletion at any time — see Section 14.

13. Data Breach Notification

In the event of a personal data breach, we will take the following steps:

• Within 72 hours of becoming aware of a breach that is likely to result in a risk to your rights and freedoms, we will notify the Office of the Data Protection Commissioner (ODPC) in accordance with Section 43 of the Kenya Data Protection Act (2019).
• Without undue delay, where a breach is likely to result in a high risk to your rights and freedoms, we will also notify you directly — by email or, where email is unavailable, by a prominent notice on our website.
• Our breach notification to the ODPC will include: a description of the nature of the breach, the categories and approximate number of individuals affected, the likely consequences, and the measures taken or proposed to address the breach.
• We maintain an internal record of all data breaches regardless of whether they are required to be reported to the ODPC, as required by Article 33(5) of the GDPR.

If you suspect that your personal data has been compromised, please contact us immediately at info@agrosocialservices.co.ke with the subject line “Data Breach Report”.

14. Your Rights and Regulatory Recourse

Under the Kenya Data Protection Act (2019) and the EU GDPR, you have the following rights regarding your personal data:

To exercise any of these rights, contact us at info@agrosocialservices.co.ke with the subject line “Data Protection Request”. We will respond within 30 days without charge.

15. Children’s Privacy

This website is not directed at children. Under the Kenya Data Protection Act (2019), a child is defined as a person under the age of 18. We do not knowingly collect personal information from persons under 18 years of age without verifiable parental or guardian consent.

If you are a parent or guardian and believe that your child has provided us with personal information without your consent, please contact us at info@agrosocialservices.co.ke and we will delete such information promptly.

16. Third-Party Links and Content Disclaimer

Our website contains links to third-party websites including KEPHIS, AFA, GLOBALG.A.P, Rainforest Alliance, and others. We are not responsible for the privacy practices of these websites and encourage you to review their own privacy policies before providing any personal information.

The content published on agrosocialservices.co.ke is intended for general informational purposes. While we endeavour to keep information accurate and current, it does not constitute professional agricultural, legal, or financial advice specific to your situation. Agrosocial Services Limited accepts no liability for decisions made based solely on information from this website without direct professional consultation.

17. Changes to This Policy

We may update this Privacy Policy from time to time — particularly when we activate Google AdSense advertising, add new third-party services, or in response to changes in Kenyan or international data protection law. The current version is always available at agrosocialservices.co.ke/privacy-policy.

Material changes will be notified via a prominent notice on the website and an update to the “Last Updated” date above. For significant changes affecting how we use your personal data, we will seek fresh consent where required.

18. Contact Us

For any questions about this Privacy Policy or how we handle your data: