Privacy Policy

Agronix NG Limited is an agribusiness that provides inputs on credit and buys out farmers’ harvest, and gives buyers quality produce at a fair price (“Agronix”, “we”, “us”, or “our”). Agronix acts as the data controller for all personal data collected through the Agronix website/platform and any associated professional activities. This means that we are legally responsible for deciding how your data is used and protected.

This privacy policy outlines our practices for collecting, storing, and sharing your data in connection with your use of the Agronix website and other interactions with us, while also detailing your rights and how to contact us with any inquiries and complaints.

This policy applies to:

• Farmers and agribusiness users accessing the Agronix platform to receive inputs on credit, sell their harvest, or manage their farm accounts.
• Buyers and off-takers who purchase produce sourced or aggregated through Agronix.
• Input suppliers and logistics/service partners whose data is processed in connection with the supply of farm inputs, credit facilitation, or produce collection and distribution.
• Employees and representatives of the organisations above, whose data may be processed when they interact with Agronix on behalf of their organisation.
• Any automated data processing activities conducted by our systems, including credit scoring, produce quality assessment, and matching of farmers with buyers.

The Agronix platform may contain links to third party websites managed by our trusted partners. Please review and read the privacy policy of those websites to understand how your personal data is being managed by those third parties.

The personal data we collect depends on how you use the Agronix platform (whether as a farmer, buyer, or input/logistics partner) and which services you access. We only collect what is reasonably necessary for the purpose in question.

Where data is only collected for a specific service (such as input credit), we will indicate this at the point of collection, and you will not be required to provide it unless you choose to access that service.

We collect personal data from you through the following channels:

• Directly from you, when you register on the platform, complete onboarding or credit application forms, list produce, place orders, or otherwise interact with Agronix.
• From cooperatives, farmer groups, or aggregators that facilitate your onboarding or transactions with Agronix on your behalf, where applicable.
• From third-party integrations, such as payment processors and mobile money providers, credit reference bureaus, and relevant government or regulatory databases (e.g. NIMC for identity verification, or agricultural sector databases where applicable).
• Indirectly through your use of and interaction with the platform, facilitated by technologies such as cookies and tracking tools (e.g. Google Analytics).

We will only process your personal data where we have a lawful basis for doing so. Depending on the nature of the processing activity, the applicable basis may include:

• Consent: Where you have freely given us specific, informed and unambiguous permission to process your data for a stated purpose.
• Legal Compliance: Where processing is necessary for us to meet our obligations under applicable laws and regulations including tax, labour, and financial regulations.
• Contractual Performance: Where processing is necessary to provide our services to you, or take steps you have requested prior to entering into an agreement with us.
• Legitimate Interests: Where we have a genuine business or operational interest in processing your data, provided that interest does not override your rights as a data subject.

Legitimate Interest Assessment: Where we intend to rely on legitimate interest as a lawful basis, we will first conduct an assessment to ensure that our interests are proportionate and do not unfairly prejudice your privacy rights. You may request details of any such assessment by contacting us.

We will use personal data for the following purposes:

• Assessing eligibility for and disbursing input credit, and tracking repayment through harvest supply.
• Facilitating the purchase of harvested produce from farmers and processing payments due to them.
• Facilitating transactions between buyers and Agronix, including order processing and payment collection.
• Managing onboarding and payment disbursements for input suppliers and logistics/service partners.
• Verifying user identity and maintaining account security.
• Communicating with you regarding your account, transactions, support requests, or platform updates.
• Conducting analytics to improve platform performance and user experience.
• Complying with legal, regulatory, and tax obligations, including reporting to relevant authorities where required.
• Protecting our legal rights and interests, resolving disputes, and enforcing our policies.

We will not use personal data for any purpose incompatible with those outlined in this policy without obtaining your consent or as required by law.

We may share your personal data with third parties in the following circumstances:

• Transacting Counterparties: Where necessary to complete a transaction, relevant data (such as name, contact details, farm location, produce quality, or delivery information) may be shared between farmers and buyers, or between farmers and input suppliers, solely to facilitate the transaction, delivery, or payment involved.
• Service Providers: Where we engage third-party processors, we require them to enter into data processing agreements that obligate them to process personal data only on our instructions, apply appropriate security measures, and comply with applicable data protection laws. While we take reasonable steps to ensure our processors meet these obligations, each processor remains independently responsible for their own compliance.
• Professional Advisors and Auditors: External legal counsel, auditors, accountants, and other professional advisors engaged under strict confidentiality obligations, including where such engagement is necessary for regulatory filings, dispute resolution, and compliance reviews.
• Legal and Regulatory Authorities: Law enforcement agencies, courts, regulators, and government bodies where disclosure is required or permitted by applicable law, court order, or regulatory directive, including the Nigeria Data Protection Commission, Nigeria Revenue Service, and Central Bank of Nigeria.
• Corporate Transactions: In connection with a merger, acquisition, business combination, asset sale, financing, or insolvency proceeding, personal data may be transferred to relevant parties. In such cases, data will be anonymised or pseudonymised where practicable, and any recipient will be bound by confidentiality and data protection obligations no less protective than this policy.

We implement appropriate technical and organizational measures to protect personal information from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security. These measures include but are not limited to:

• Regular security assessments and audits.
• Secure data storage and transmission (data encryption both at rest and in transit).
• Access controls and authentication mechanisms.
• Vulnerability Assessment Penetration Testing.
• Employee training on data privacy and security.

We restrict access to personal data to authorized employees, contractors, and agents who need to know the information to provide our services and are subject to strict confidentiality obligations.

Under the Nigeria Data Protection Act 2023 and other applicable data protection legislation, you have the following rights with respect to your personal data:

• Access: The right to request a copy of the personal data we hold about you.
• Rectification: The right to have inaccurate or incomplete personal data corrected without undue delay.
• Erasure: The right to request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent.
• Restriction: The right to request that we suspend or limit our processing of your personal data in certain circumstances.
• Data Portability: The right to receive your personal data in a structured, machine-readable format and to transmit it to another controller where technically feasible.
• Objection: The right to object to processing carried out on the basis of legitimate interests or for direct marketing, including profiling linked to such marketing.
• Automated Decision Making: The right not to be subject to decisions made solely by automated systems including profiling that produce legal or similarly significant effects on you.
• Withdrawal of Consent: Where our processing is consent based, you may withdraw that consent at any time via your account settings or by contacting us directly. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.

If you have any questions, concerns, or requests regarding this Data Privacy Policy or our data privacy practices, please contact us at: