Privacy Policy

This Privacy Policy describes how Nurseryz.io ("we", "us", "our") collects, uses, shares and protects personal information. It applies to all users — nursery owners, smallholder farmers, programme managers, funders, government partners and visitors to our website and product surfaces.

1. Who we are

Nurseryz.io is operated by Nurseryz Technologies Limited, registered in Uganda. Our address is Lira, Northern Region, Uganda. For data-protection enquiries, contact privacy@nurseryz.io.

2. What we collect

Account data (nursery owners, programme managers, funders)

Name, email, phone, organisation, role, language preference. Collected at registration or when invited to a programme. Required to provide access to the platform.

Farmer data (smallholders enrolled by nurseries or programmes)

Name, phone number, optional National ID, village/parish/sub-county/district, GPS coordinates where consented, language. Collected by nurseries at point of sale, or by funder programmes during enrolment.

Distribution & survival data

Seedling species, quantity, distribution date, source, survival photos, GPS captures, SMS replies. Collected for inventory, advisory and auditing purposes.

Telemetry

Page loads, time on dashboard, errors. Used to improve the product. No third-party advertising cookies; no cross-site tracking.

3. How we use it

• Provide and operate the Nurseryz.io platform.
• Deliver SMS and WhatsApp advisory to enrolled farmers.
• Generate audit-grade reports for funder programmes.
• Detect ghost-farmer anomalies (duplicate phone, NID, GPS mismatch).
• Compute carbon-credit eligibility for Gold Standard / Plan Vivo / REDD+ verification.
• Comply with regulatory or contractual obligations to funders, government partners and verifiers.

4. What we do NOT do

• We do not sell personal data to third parties.
• We do not show third-party advertising in the platform.
• We do not share farmer-level data outside the programme they're enrolled in (cross-funder isolation is enforced at the database layer).
• We do not use farmer data for any purpose other than what the enrolling nursery or programme committed to at enrolment.

5. Sharing

We share data only with:

• Funders and programme managers, scoped strictly to the programmes they're attached to via the platform's pivot table.
• Carbon-credit verifiers (Gold Standard, Plan Vivo, REDD+), only for cohorts the funder has explicitly nominated for verification.
• Government regulators, where compelled by law or contractually required for procurement oversight.
• Sub-processors (hosting providers, SMS gateways like Africa's Talking, email services). A current list is available on request.

6. Data retention

Farmer records are kept for the lifetime of the programme they're enrolled in, plus a retention window required by the funder's audit policy (typically 7 years for EU/World Bank). After that, records are anonymised or deleted on request.

7. Your rights (PDPA + GDPR-aligned)

You have the right to: access your data; request correction; request deletion (subject to retention obligations); withdraw consent; object to processing; and lodge a complaint with Uganda's Personal Data Protection Office. Contact privacy@nurseryz.io to exercise these rights.

8. Security

Data is encrypted in transit (TLS) and at rest. Access is gated by role-based permissions enforced at the application and database layer. Audit logs are immutable.

9. International transfers

Some sub-processors operate outside Uganda. For these, we rely on Standard Contractual Clauses or equivalent safeguards. For sensitive cohorts (where the funder requires in-region hosting), data residency in Uganda or East Africa is available on request.

10. Changes

We'll update this policy as the platform evolves. Material changes are notified by email and via the platform 14 days before they take effect.

11. Contact

For privacy questions, complaints or data subject requests:
Email: privacy@nurseryz.io
Office: Lira, Northern Region, Uganda