The New Standard for Global Exports

24K subscribers

Stay ahead of shifting global regulations. Subscribe for exclusive insights on EUDR compliance, audit-ready traceability, and the digital tools required to secure your position in the premium international export market.

Legal & Privacy

Privacy Policy

Your data belongs to you. Here is exactly how we collect it, use it, and protect it — in plain language.

📅 Last updated: March 2026
Plain Language Summary We collect only the data we need to run ExportReady.africa. We never sell your data. We never share it with advertisers. Your compliance documents are encrypted and private. You can request deletion of your data at any time. This policy applies to all users — exporters, importers, and visitors.

1. Introduction

Welcome to ExportReady.africa. This Privacy Policy explains how ExportReady Africa Limited ("ExportReady.africa", "we", "us", or "our") collects, uses, stores, and protects information about you when you use our platform, website, and related services.

We are committed to protecting your privacy and handling your personal data in accordance with the EU General Data Protection Regulation (GDPR), the Kenya Data Protection Act 2019, and all other applicable data protection laws. By using ExportReady.africa, you agree to the practices described in this Privacy Policy.

If you do not agree with this policy, please do not use our platform. If you have questions at any point, our contact details are provided at the end of this document.

2. Who We Are

ExportReady Africa Limited is the data controller responsible for your personal data on this platform. We operate ExportReady.africa — Africa's compliance-led agricultural export platform — connecting verified African agribusinesses with international buyers across the EU, Middle East, Asia, and beyond.

Data Controller Information

Company: ExportReady Africa Limited
Platform: ExportReady.africa
Email: hello@exportready.africa
Website: https://exportready.africa

3. Data We Collect

We collect the following categories of personal and business data depending on how you use the platform:

3.1 Data You Provide Directly

Category Examples Who Provides It
Account Information Name, email address, password, company name, phone number All registered users
Exporter Profile Data Company description, country, region, crops exported, export volumes, target markets, preferred incoterms Exporter subscribers
Importer Profile Data Company description, country, products of interest, import volumes, certification requirements Importer subscribers
Compliance Documents Export licenses, phytosanitary certificates, GlobalG.A.P. certificates, organic certifications, EUDR due diligence statements Exporter Pro subscribers
Payment Information Billing name, billing address, payment method details (processed securely by Stripe — we do not store card numbers) All paying subscribers
Communications Messages sent through our contact form, support enquiries, enquiries sent between exporters and importers All users

3.2 Data We Collect Automatically

  • IP address and approximate geographic location
  • Browser type and version
  • Device type and operating system
  • Pages visited and time spent on each page
  • Referring website or search engine
  • Profile view analytics (for Exporter Pro subscribers)
  • Cookies and similar tracking technologies (see Section 8)

4. How We Use Your Data

We use your personal and business data for the following purposes:

  • To operate the platform: Creating and managing your account, processing your subscription payments, displaying your exporter profile in our directory, and enabling buyer-supplier enquiries.
  • To verify compliance documents: Our team uses uploaded compliance documents exclusively to verify the ExportReady Verified badge. Documents are not shared publicly — only verification status is displayed.
  • To send service communications: Account confirmation emails, subscription receipts, document expiry alerts, and platform update notifications.
  • To improve the platform: Analysing usage patterns to identify and fix bugs, improve user experience, and develop new features.
  • To provide customer support: Responding to enquiries, resolving disputes, and addressing technical issues.
  • To comply with legal obligations: Responding to lawful requests from regulatory authorities, preventing fraud, and maintaining platform security.
We Never Do This With Your Data We do not sell your personal data to third parties. We do not share your data with advertisers. We do not use your compliance documents for any purpose other than verification. We do not send unsolicited marketing emails to users who have not opted in.

For users in the European Union and other jurisdictions where the GDPR applies, we process your personal data under the following legal bases:

  • Contract performance: Processing necessary to fulfil our subscription agreement with you — account creation, payment processing, profile management.
  • Legitimate interests: Platform security, fraud prevention, and service improvement — where these interests do not override your rights.
  • Legal obligation: Compliance with applicable laws, tax requirements, and regulatory requests.
  • Consent: Marketing communications and non-essential cookies — where we have obtained your explicit consent and which you may withdraw at any time.

6. Data Sharing

We share your data only in the following limited circumstances:

6.1 With Other Platform Users

Exporter profiles — including company name, product listings, compliance verification status, and contact details — are visible to registered importer subscribers as part of the core platform service. Your compliance document files are never shared — only the verification status badge is displayed.

6.2 With Service Providers

We use trusted third-party service providers who process data on our behalf under strict data processing agreements:

  • Stripe: Payment processing and subscription management
  • Web hosting provider: Secure server infrastructure
  • Email delivery service: Transactional email delivery
  • Analytics provider: Anonymised platform usage analytics

6.3 Legal Requirements

We may disclose your data when required by law, court order, or governmental authority, or where necessary to protect the rights, property, or safety of ExportReady.africa, our users, or the public.

6.4 Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business assets, your data may be transferred to the acquiring entity. We will notify you of any such transfer and the new privacy policy that applies.

7. Data Storage and Security

Your data is stored on secure encrypted servers. We implement industry-standard security measures including:

  • SSL/TLS encryption for all data transmitted between your browser and our platform
  • Encrypted storage for compliance documents and sensitive personal data
  • Access controls ensuring only authorised team members can access compliance documents during verification
  • Regular security audits and vulnerability assessments
  • Automatic session timeouts and secure authentication protocols

While we implement robust security measures, no method of internet transmission or electronic storage is 100% secure. We encourage you to use a strong unique password for your account and to notify us immediately if you suspect any unauthorised access.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate and improve the platform. Cookies are small text files stored on your device.

Cookie Type Purpose Can You Opt Out?
Essential Cookies Login sessions, security, form submissions — required for the platform to function No — platform cannot function without these
Functional Cookies Remembering your preferences, language settings, dashboard layout Yes — via cookie settings
Analytics Cookies Understanding how users navigate the platform to improve features — data is anonymised Yes — via cookie settings
Marketing Cookies We do not use marketing or advertising cookies N/A

You can manage your cookie preferences through your browser settings. Note that disabling essential cookies will affect your ability to use certain features of the platform.

9. Your Rights

Depending on your location, you have the following rights regarding your personal data:

  • Right of Access: Request a copy of all personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete personal data.
  • Right to Erasure: Request deletion of your personal data ("right to be forgotten") subject to legal obligations.
  • Right to Restriction: Request that we restrict processing of your data in certain circumstances.
  • Right to Data Portability: Request your data in a structured, machine-readable format.
  • Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
  • Right to Withdraw Consent: Where processing is based on consent, withdraw that consent at any time.

To exercise any of these rights, contact us at hello@exportready.africa. We will respond within 30 days. We will never charge a fee for legitimate data rights requests.

10. Data Retention

We retain your personal data for as long as necessary to provide our services and comply with legal obligations:

  • Active account data: Retained for the duration of your subscription plus 12 months after cancellation
  • Compliance documents: Retained for the duration of your Pro subscription. Deleted within 30 days of account closure upon request
  • Payment records: Retained for 7 years in accordance with financial record-keeping requirements
  • Communication records: Retained for 3 years for dispute resolution purposes
  • Analytics data: Anonymised and retained indefinitely for platform improvement

11. Children's Privacy

ExportReady.africa is a business-to-business platform designed exclusively for commercial use by companies and individuals engaged in agricultural trade. We do not knowingly collect data from persons under the age of 18. If you believe a minor has provided us with personal data, please contact us immediately at hello@exportready.africa and we will delete the data promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or business operations. When we make material changes we will notify you by email and by posting the updated policy on this page with a new "Last Updated" date. Your continued use of the platform following notification constitutes acceptance of the updated policy.

We encourage you to review this policy periodically to stay informed about how we protect your data.

13. Contact Us

For any questions, concerns, or requests relating to this Privacy Policy or your personal data, please contact our Data Protection team:

Privacy Questions?

Our team responds to all privacy enquiries within 5 business days. For urgent data rights requests we aim to respond within 48 hours.

hello@exportready.africa
Privacy FAQs

Common Questions About
Your Privacy on ExportReady.africa

No. Importers can see your verification status — whether your profile is Verified, Pending, or Action Required — but they cannot access, download, or view your actual compliance document files. Your export license numbers, certificate files, and supporting documents are visible only to our verification team during the review process.
Never. Our business model is built on subscription fees — not data monetization. We do not sell, rent, or otherwise commercialize your personal or business data to any third party for any purpose. This is a core principle of how we operate and will not change.
You can request full account and data deletion by emailing hello@exportready.africa. We will process your request within 30 days and confirm deletion in writing. Note that we are required by law to retain payment records for 7 years, but all personal profile data, compliance documents, and communication records will be permanently deleted.
Yes. We are fully compliant with the EU General Data Protection Regulation (GDPR). This means EU-based users have the full suite of GDPR rights including access, rectification, erasure, portability, restriction, and objection. All our data processing activities have a documented legal basis and we maintain records of processing activities as required by GDPR Article 30.
Your data is stored on secure encrypted servers. All data transfers between your browser and our platform are protected by SSL/TLS encryption. Compliance documents are stored with additional encryption at rest. We use reputable, security-certified hosting infrastructure and conduct regular security audits.
Yes. You have the right to request a complete copy of all personal data we hold about you at any time. Simply email hello@exportready.africa with the subject line "Data Access Request" and we will provide a full data export within 30 days at no charge.
Your account data is retained for 12 months after cancellation in case you choose to reactivate. After that period, personal profile data and compliance documents are automatically deleted unless you request earlier deletion. Payment records are retained for 7 years as required by financial regulations. You can request immediate deletion of all non-financial data at any time after cancellation.