Privacy Policy
Your data belongs to you. Here is exactly how we collect it, use it, and protect it — in plain language.
1. Introduction
Welcome to ExportReady.africa. This Privacy Policy explains how ExportReady Africa Limited ("ExportReady.africa", "we", "us", or "our") collects, uses, stores, and protects information about you when you use our platform, website, and related services.
We are committed to protecting your privacy and handling your personal data in accordance with the EU General Data Protection Regulation (GDPR), the Kenya Data Protection Act 2019, and all other applicable data protection laws. By using ExportReady.africa, you agree to the practices described in this Privacy Policy.
If you do not agree with this policy, please do not use our platform. If you have questions at any point, our contact details are provided at the end of this document.
2. Who We Are
ExportReady Africa Limited is the data controller responsible for your personal data on this platform. We operate ExportReady.africa — Africa's compliance-led agricultural export platform — connecting verified African agribusinesses with international buyers across the EU, Middle East, Asia, and beyond.
Company: ExportReady Africa Limited
Platform: ExportReady.africa
Email: hello@exportready.africa
Website: https://exportready.africa
3. Data We Collect
We collect the following categories of personal and business data depending on how you use the platform:
3.1 Data You Provide Directly
| Category | Examples | Who Provides It |
|---|---|---|
| Account Information | Name, email address, password, company name, phone number | All registered users |
| Exporter Profile Data | Company description, country, region, crops exported, export volumes, target markets, preferred incoterms | Exporter subscribers |
| Importer Profile Data | Company description, country, products of interest, import volumes, certification requirements | Importer subscribers |
| Compliance Documents | Export licenses, phytosanitary certificates, GlobalG.A.P. certificates, organic certifications, EUDR due diligence statements | Exporter Pro subscribers |
| Payment Information | Billing name, billing address, payment method details (processed securely by Stripe — we do not store card numbers) | All paying subscribers |
| Communications | Messages sent through our contact form, support enquiries, enquiries sent between exporters and importers | All users |
3.2 Data We Collect Automatically
- IP address and approximate geographic location
- Browser type and version
- Device type and operating system
- Pages visited and time spent on each page
- Referring website or search engine
- Profile view analytics (for Exporter Pro subscribers)
- Cookies and similar tracking technologies (see Section 8)
4. How We Use Your Data
We use your personal and business data for the following purposes:
- To operate the platform: Creating and managing your account, processing your subscription payments, displaying your exporter profile in our directory, and enabling buyer-supplier enquiries.
- To verify compliance documents: Our team uses uploaded compliance documents exclusively to verify the ExportReady Verified badge. Documents are not shared publicly — only verification status is displayed.
- To send service communications: Account confirmation emails, subscription receipts, document expiry alerts, and platform update notifications.
- To improve the platform: Analysing usage patterns to identify and fix bugs, improve user experience, and develop new features.
- To provide customer support: Responding to enquiries, resolving disputes, and addressing technical issues.
- To comply with legal obligations: Responding to lawful requests from regulatory authorities, preventing fraud, and maintaining platform security.
5. Legal Basis for Processing (GDPR)
For users in the European Union and other jurisdictions where the GDPR applies, we process your personal data under the following legal bases:
- Contract performance: Processing necessary to fulfil our subscription agreement with you — account creation, payment processing, profile management.
- Legitimate interests: Platform security, fraud prevention, and service improvement — where these interests do not override your rights.
- Legal obligation: Compliance with applicable laws, tax requirements, and regulatory requests.
- Consent: Marketing communications and non-essential cookies — where we have obtained your explicit consent and which you may withdraw at any time.
6. Data Sharing
We share your data only in the following limited circumstances:
6.1 With Other Platform Users
Exporter profiles — including company name, product listings, compliance verification status, and contact details — are visible to registered importer subscribers as part of the core platform service. Your compliance document files are never shared — only the verification status badge is displayed.
6.2 With Service Providers
We use trusted third-party service providers who process data on our behalf under strict data processing agreements:
- Stripe: Payment processing and subscription management
- Web hosting provider: Secure server infrastructure
- Email delivery service: Transactional email delivery
- Analytics provider: Anonymised platform usage analytics
6.3 Legal Requirements
We may disclose your data when required by law, court order, or governmental authority, or where necessary to protect the rights, property, or safety of ExportReady.africa, our users, or the public.
6.4 Business Transfers
In the event of a merger, acquisition, or sale of all or part of our business assets, your data may be transferred to the acquiring entity. We will notify you of any such transfer and the new privacy policy that applies.
7. Data Storage and Security
Your data is stored on secure encrypted servers. We implement industry-standard security measures including:
- SSL/TLS encryption for all data transmitted between your browser and our platform
- Encrypted storage for compliance documents and sensitive personal data
- Access controls ensuring only authorised team members can access compliance documents during verification
- Regular security audits and vulnerability assessments
- Automatic session timeouts and secure authentication protocols
While we implement robust security measures, no method of internet transmission or electronic storage is 100% secure. We encourage you to use a strong unique password for your account and to notify us immediately if you suspect any unauthorised access.
8. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device.
| Cookie Type | Purpose | Can You Opt Out? |
|---|---|---|
| Essential Cookies | Login sessions, security, form submissions — required for the platform to function | No — platform cannot function without these |
| Functional Cookies | Remembering your preferences, language settings, dashboard layout | Yes — via cookie settings |
| Analytics Cookies | Understanding how users navigate the platform to improve features — data is anonymised | Yes — via cookie settings |
| Marketing Cookies | We do not use marketing or advertising cookies | N/A |
You can manage your cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to use certain features of the platform.
9. Your Rights
Depending on your location, you have the following rights regarding your personal data:
- Right of Access: Request a copy of all personal data we hold about you.
- Right to Rectification: Request correction of inaccurate or incomplete personal data.
- Right to Erasure: Request deletion of your personal data ("right to be forgotten") subject to legal obligations.
- Right to Restriction: Request that we restrict processing of your data in certain circumstances.
- Right to Data Portability: Request your data in a structured, machine-readable format.
- Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent: Where processing is based on consent, withdraw that consent at any time.
To exercise any of these rights, contact us at hello@exportready.africa. We will respond within 30 days. We will never charge a fee for legitimate data rights requests.
10. Data Retention
We retain your personal data for as long as necessary to provide our services and comply with legal obligations:
- Active account data: Retained for the duration of your subscription plus 12 months after cancellation
- Compliance documents: Retained for the duration of your Pro subscription. Deleted within 30 days of account closure upon request
- Payment records: Retained for 7 years in accordance with financial record-keeping requirements
- Communication records: Retained for 3 years for dispute resolution purposes
- Analytics data: Anonymised and retained indefinitely for platform improvement
11. Children's Privacy
ExportReady.africa is a business-to-business platform designed exclusively for commercial use by companies and individuals engaged in agricultural trade. We do not knowingly collect data from persons under the age of 18. If you believe a minor has provided us with personal data, please contact us immediately at hello@exportready.africa and we will delete the data promptly.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes we will notify you by email and by posting the updated policy on this page with a new "Last Updated" date. Your continued use of the platform following notification constitutes acceptance of the updated policy.
We encourage you to review this policy periodically to stay informed about how we protect your data.
13. Contact Us
For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact our Data Protection team:
Privacy Questions?
Our team responds to all privacy enquiries within 5 business days. For urgent data rights requests we aim to respond within 48 hours.
hello@exportready.africa
