Privacy Policy

Agrisoko is an agricultural marketplace platform operated by LeadAfrik Agricultural Solutions (“we”, “us”, “our”), a company incorporated in Kenya. We are the data controller for personal data collected through the Agrisoko website and mobile application.

We are registered with the Office of the Data Protection Commissioner (ODPC) in accordance with the Kenya Data Protection Act, 2019.

We collect personal data in several ways:

We use your personal data to:

• Create and maintain your account
• Enable you to post listings and connect with buyers or sellers
• Verify your identity and display trust signals to other users
• Process orders and facilitate transactions
• Send transactional notifications (OTP codes, order updates, listing status)
• Send platform announcements and marketing emails (you may opt out at any time)
• Detect fraud, enforce our policies, and moderate listings
• Improve platform performance, features, and user experience
• Comply with our legal obligations under Kenyan law

We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.

Under the Kenya Data Protection Act, 2019, we rely on the following bases:

• Consent — where you have given clear consent (e.g., marketing emails, optional ID verification)
• Contract performance — where processing is necessary to deliver services you have requested
• Legal obligation — where processing is required to comply with Kenyan law
• Legitimate interests — where we have a legitimate interest not overridden by your rights (e.g., fraud prevention, platform security)

• With other users — your name, listing details, and county are visible when you post a listing. Your phone number is visible only if you choose to display it.
• With service providers — trusted third-party processors (cloud hosting, image storage, SMS delivery) are contractually bound to handle your data only for the purposes we specify.
• With payment processors — M-Pesa payment metadata is processed by Safaricom. We do not store full transaction secrets or PINs.
• For legal compliance — we may disclose data where required by Kenyan law, a court order, or a lawful request from a regulatory authority including the ODPC.
• Business transfers — in the event of a merger or acquisition, your data may be transferred to the acquiring entity under equivalent data protection standards.

We never share your ID documents or selfie with other users or third parties except as required by law.

• Account data — retained for the duration of your account and up to 2 years after deletion
• Transaction and order records — retained for 7 years in accordance with Kenyan commercial and tax law
• ID documents — retained only during the verification review period, then deleted unless required for a legal claim
• Messages — retained while your account is active; you may request deletion

We implement reasonable technical and organisational measures to protect your data, including:

• HTTPS encryption for all data in transit
• Encrypted password storage (bcrypt)
• Role-based access controls for staff
• Regular security reviews

No method of transmission over the internet is 100% secure. If you believe your account has been compromised, contact us at info@leadafrik.com.

Under the Kenya Data Protection Act, 2019, you have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate or incomplete data
• Deletion (erasure) — request deletion of your personal data where there is no overriding legitimate reason to retain it
• Object — object to processing in certain circumstances
• Restriction — request that we restrict processing in certain circumstances
• Data portability — request transfer of your data in a structured, machine-readable format
• Withdraw consent — withdraw consent at any time where processing is based on consent

Contact us at info@leadafrik.com. We will respond within 21 days as required by the Act.

We use session cookies to keep you logged in and secure your sessions. We may use analytics tools to understand platform usage and improve user experience.

We do not use advertising cookies or sell cookie data to advertisers. You can control cookie settings in your browser; disabling essential cookies may affect platform functionality.

Agrisoko is not intended for use by persons under 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has created an account, please contact us and we will promptly delete the account and associated data.

We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify registered users of material changes by email or through a platform notification. The effective date at the top of this page reflects the most recent revision.

For privacy-related questions, requests, or concerns:

If you are not satisfied with our response, you may lodge a complaint with the Office of the Data Protection Commissioner (ODPC), the Kenyan supervisory authority for data protection.