Shift AgriHub collects and processes personal data as set out in the Privacy Policy.
Use of the Service constitutes consent where required by law.
Privacy Policy
Scope;
Shift Agrihub. is the data controller for personal data collected through the Service.
Shift Agrihub Hub is duly registered with the Office of the Data Protection Commissioner
(ODPC) as a data controller.
Shift Agrihub. is the data controller for personal data collected through the Service. This
Policy explains how we collect, use, disclose and protect personal data.
Information we collect
Information you provide: account details (name, email, phone, business name),
Listings and Content, messages, reviews, KYC/verification documents (if
provided), payment and billing information (processed by third parties), support
communications.
Automatically collected data: IP addresses, device and browser data, usage logs,
cookies and analytics data.
Third‑party sources: Verification partners, payment processors, social logins,
public registries.
Legal basis for processing
Performance of contract (account provision and service delivery);
Legitimate interests (security, fraud prevention, platform improvement);
Consent (marketing communications, cookies where required);
Legal obligations (compliance with law or law enforcement requests).
Use of information
We use data to operate the Service, display Listings, communicate with Users, process
payments, verify identity, provide customer support, improve features and detect abuse.
Sharing and disclosure
We share personal data with:
Service providers (hosting, analytics, payment processors) under contractual
safeguards;
Other Users to the extent needed for Listings and communications (e.g., public
profile information);
Authorities when legally required or to protect rights and safety. We do not sell
personal data.
Security & retention
We implement appropriate technical and organisational measures to protect
personal data against loss, unauthorised access, alteration or disclosure, in
accordance with section 41 of the Kenya Data Protection Act.
Data breach notification: In the event of a personal data breach that poses a real
risk of harm to data subjects, Shift Agrihub will notify the Office of the Data
Protection Commissioner (ODPC) within seventy‑two (72) hours of becoming
aware of the breach, and affected data subjects without undue delay, as required by
law.
Personal data is retained only for as long as necessary for the purposes for which it
was collected or as required by law. Account deletion requests will be honoured
subject to lawful retention obligations.
We implement reasonable technical and organisational measures to protect data.
We retain personal data for as long as necessary for legitimate purposes and as
required by law. Account deletion requests will be handled subject to lawful
retention obligations.
International transfers
Where data is transferred outside Kenya, we will implement appropriate safeguards (standard
contractual clauses or similar).
Your rights
Subject to applicable law, you may exercise the following rights: access,
rectification, erasure, restriction of processing, objection, and data portability.
Shift Agrihub Hub will acknowledge requests promptly and respond within thirty (30)
days of receipt, or within such shorter or longer period as may be permitted under
the Kenya Data Protection Act, 2019 and applicable regulations.
To exercise these rights contact email address
Subject to law, you may request access, correction, deletion, restriction, portability,
or object to processing. To exercise rights contact email address.
Cookies and tracking
We use cookies and similar technologies strictly for functionality, security, and
analytics. Where required by law, cookie consent will be obtained through a cookie
banner or preference centre.
Users may manage or disable cookies through their browser settings. A standalone
Cookies Notice may be published on the platform providing granular information
on cookie categories and purposes.
We use cookies for site function, analytics and security. Users can manage cookies
via their browser. Detailed cookie settings will be available on the Service.
Children’s data
The Service is not intended for children under 18. We do not knowingly collect children’s
data.