1. Data Controller
Daye Farm Ltd (the "Data Controller") of 110 Ankpa Ayingba Road, Kogi, Nigeria is responsible for the personal data processed through this website and related services. For any privacy-related queries please contact our Data Protection Officer at privacy@dayefarmltd.com.
2. Personal Data We Collect
- Identity & contact data: full name, email, phone number, dial code, delivery address.
- Account data: hashed password, role (customer, investor, wholesale, admin), preferences.
- Transaction data: orders, invoices, wholesale agreements, investment expressions of interest, payment status (we do not store full card numbers).
- Communications: live chat messages, support tickets, emails and any correspondence with our team.
- Technical data: IP address, browser type, device identifiers, pages visited, referrer URL, session and cookie identifiers.
- KYC / compliance data: for investor and wholesale accounts where required by law.
3. How We Collect Data
- Directly from you (registration, checkout, contact forms, chat, uploads).
- Automatically through cookies and similar technologies (see our Cookie Notice).
- From third-party providers such as Google (authentication), payment processors and logistics partners.
4. Lawful Bases for Processing
We process your personal data on one or more of the following bases:
- Contractual necessity — to create your account, fulfil orders and provide the services you have requested.
- Consent — for marketing communications, non-essential cookies and optional features. You may withdraw consent at any time.
- Legal obligation — to comply with tax, anti-money-laundering and consumer-protection requirements.
- Legitimate interests — to secure our systems, prevent fraud and improve our services, balanced against your rights.
5. How We Use Your Data
- Create and manage your account and authenticate sessions.
- Process orders, payments, deliveries and returns.
- Operate the wholesale, investment and live chat services.
- Provide customer support and respond to enquiries.
- Send transactional notifications and, with consent, marketing updates.
- Detect, prevent and investigate fraud, abuse or security incidents.
- Comply with applicable laws and regulatory requests.
- Analyse usage to improve our products, content and user experience.
6. Sharing Your Data
We do not sell your personal data. We share it only with:
- Service providers who process data on our behalf under written agreements — hosting, email, analytics, payment processing (e.g. Paystack), logistics and customer support tools.
- Authentication partners such as Google when you choose social sign-in.
- Regulators, courts and law enforcement where required by law.
- Business transferees in the event of a merger, acquisition or sale of assets, subject to equivalent privacy protections.
7. International Transfers
Some of our service providers may be located outside Nigeria. Where personal data is transferred internationally we rely on appropriate safeguards such as adequacy decisions, standard contractual clauses and equivalent measures recognised under the NDPA and GDPR.
8. Data Retention
We retain personal data only for as long as necessary for the purposes set out in this Policy, including to satisfy legal, accounting and reporting obligations. Typical retention windows are:
- Account data: while the account is active and up to 24 months after deactivation.
- Transaction records: 7 years (Nigerian tax and accounting requirements).
- Marketing data: until consent is withdrawn.
- Live chat transcripts: 24 hours after a chat is closed, then automatically deleted.
9. Your Rights
Under the NDPA, GDPR and other applicable laws you have the right to:
- Access the personal data we hold about you.
- Request rectification of inaccurate or incomplete data.
- Request erasure of your data ("right to be forgotten") subject to legal limits.
- Restrict or object to certain processing.
- Request portability of your data in a structured, machine-readable format.
- Withdraw consent at any time, without affecting prior lawful processing.
- Lodge a complaint with the Nigeria Data Protection Commission (NDPC) or your local data protection authority.
To exercise any of these rights, email privacy@dayefarmltd.com. We will respond within 30 days.
10. Security
We implement technical and organisational measures including encryption in transit (HTTPS), secure password hashing, role-based access control, secure httpOnly session cookies, audit logging, regular backups and supplier due diligence. No system is perfectly secure, and we encourage you to use strong, unique passwords and to enable two-factor authentication where available.
11. Children's Privacy
Our services are not directed to children under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us so we can delete it.
12. Cookies & Tracking
We use cookies and similar technologies as described in our Cookie Notice. You can adjust your preferences at any time through the cookie banner or the "Manage Cookies" link in the footer.
13. Changes to this Policy
We may update this Privacy Policy from time to time. Where changes are material we will notify you by email or through a prominent notice on the site before they take effect.
14. Contact
Data Protection Officer
Daye Farm Ltd
110 Ankpa Ayingba Road, Kogi, Nigeria
Email: privacy@dayefarmltd.com