Effective Date: June 1, 2025

Farmlend (“we”, “our”, or “us”) respects your privacy. This Privacy Policy outlines how we collect, use, share, and protect your personal data when you use our website and software services (“Services”), including any data collected from individuals located in the European Union (EU) and European Economic Area (EEA).

1. What Data We Collect

We collect information in two ways:

a. Information You Provide

• Name, business name, and role/title
• Work email address and phone number
• Documents (e.g., orders, invoices, Bills of Lading)
• Communications and feedback

b. Information Collected Automatically

• IP address, browser type, device and operating system
• Usage data, including pages visited and actions taken
• Cookies (see Section 7)

We do not intentionally collect sensitive personal data.

2. Legal Basis for Processing (GDPR Art. 6)

We rely on the following legal bases:

• Contract performance – to provide our Services
• Legal obligation – to comply with applicable laws
• Legitimate interest – to operate, maintain, and improve our Services
• Consent – where required, such as for marketing or optional cookies

When we rely on legitimate interest, it includes:

• Improving platform functionality and performance
• Analyzing usage patterns
• Enhancing the user experience
• Ensuring platform security and reliability

3. How We Use Your Information

We use your information to:

• Provide, maintain, and improve the Services
• Manage user accounts and communication
• Facilitate shipment tracking, documentation, and order management
• Send transactional communications (e.g., shipment updates)
• Monitor and prevent fraudulent or unauthorized activity

Automated Communications:

We may automatically send notifications related to service updates or workflows. We do not use automated decision-making or profiling that produces legal or similarly significant effects.

4. Sharing Your Information

We may share data with:

• Service providers (e.g., Supabase, email delivery, infrastructure partners)
• Transaction counterparties (e.g., suppliers or buyers involved in your workflows)
• Regulatory or legal authorities, if required
• Affiliates or acquiring entities in the event of a merger or business transfer

We do not sell your personal data.

5. Data Storage and International Transfers

Your data may be processed and stored in regions outside your country of residence, depending on the infrastructure used by our cloud service providers (e.g., Supabase).

When we transfer personal data from the EU/EEA to countries without an adequacy decision, we rely on Standard Contractual Clauses (SCCs) and other safeguards required under GDPR to ensure your data is appropriately protected.

6. Data Retention

We retain personal data only for as long as necessary to:

• Provide the Services
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain operational integrity and security

You may request data deletion or restriction at any time (see Section 8).

7. Cookies and Tracking

We currently use only essential cookies necessary to operate the platform, including:

• Session cookies (temporary, for in-session functionality)
• Authentication cookies (to recognize logged-in users)
• Security cookies (to protect users from malicious behavior)

These do not require consent.

If we introduce non-essential cookies (e.g., analytics or marketing), we will implement a cookie consent mechanism compliant with applicable laws.

8. Your Rights (GDPR)

If you are in the EU/EEA, you have the right to:

• Access your data
• Request correction or deletion
• Object to or restrict processing
• Request data portability
• Withdraw consent at any time

To exercise your rights, contact us at: support@farmlend.com

We will respond within one month. If your request is complex, we may need more time and will notify you accordingly.

You may also lodge a complaint with your local data protection authority.

9. Security Measures

We implement industry-standard technical and organizational safeguards, including:

• Encryption of data in transit and at rest
• Access control and identity management
• Secure software development practices
• Periodic security reviews and audits
• Staff training on data protection

While we take every precaution, no system is fully secure. We cannot guarantee absolute protection of your data.

10. Marketing Communications

We currently send only transactional communications.

In the future, if we introduce marketing emails:

• We will obtain your explicit opt-in consent
• Each message will include a clear unsubscribe option
• Consent will be collected through unchecked boxes or explicit opt-in forms

11. Updates to This Policy

We may revise this Privacy Policy to reflect changes in our services or applicable laws. When we do, we will update the “Effective Date” and, if changes are significant, notify users via email or platform alerts.

12. Contact

Data Controller: Abdel Wahab Turkmani

Contact Person: Abdel Wahab Turkmani

Email: support@farmlend.co.uk

Website: www.farmlend.co.uk

13. Children’s Data

Our Services are intended for professional users and are not directed to individuals under 18. We do not knowingly collect personal data from children. If we discover that we have, we will delete the data immediately.

14. Data Breach Notification

In the event of a data breach that may pose a risk to your rights or freedoms, we will:

• Notify the appropriate supervisory authority within 72 hours (where required)
• Inform affected users with details of the breach, its impact, and mitigation steps
• Document the breach internally, including actions taken

If you suspect unauthorized access to your data, contact support@farmlend.co.uk immediately.