Privacy policy

A. Website and customers

What we collect

When you order, we receive what you send us: your name, phone number, delivery address and your order, by WhatsApp, email or phone. When you send a trade enquiry through this site, we receive the details you enter in the form: business name, buyer type, contact name, phone, email, the products and estimated weekly volume you are interested in, any notes, and optionally your KRA PIN. Enquiries are stored as a dated record and delivered to [email protected].

Why we collect it

To fulfil orders, arrange delivery, quote trade terms, and issue the tax invoice Kenyan law requires for every sale.

KRA PINs and eTIMS

Kenya requires electronic tax invoices through the KRA eTIMS system. Invoice details, including a buyer's KRA PIN where one is provided, are transmitted to the Kenya Revenue Authority as a legal requirement. For an individual customer, a KRA PIN is personal data under the Data Protection Act, 2019, and we treat it that way: it is used only for invoicing and is not shared with anyone other than KRA.

Retention

Order and invoice records are kept for as long as Kenyan tax law requires. Trade enquiry records are kept while the conversation is live and for up to 24 months after, then deleted.

Analytics and cookies

This site uses self-hosted, cookie-free analytics to count page visits, order-contact clicks and accepted trade enquiries. These counts include the product and contact channel, but not names, phone numbers, email addresses, tax PINs or enquiry messages. No advertising networks, no cross-site tracking, and no analytics data leaves systems we operate.

Sharing

We do not sell personal data. It is shared only with KRA (as described above) and, as needed to complete an order, with payment providers you choose to pay through.

Your rights

Ask for a copy, correction or deletion of your data any time at [email protected]. Deletion is subject to records the law requires us to keep.

B. QuickBooks integration

The farm operates a bridge that connects a QuickBooks Online company to KRA eTIMS so that invoices raised in QuickBooks become compliant electronic tax invoices. This section covers data handled by that integration, which lives under this domain at /app.

What the integration receives

When you connect your QuickBooks company through Intuit's consent screen, the bridge receives the data needed to issue eTIMS invoices: customer records, invoices, item names and amounts. It requests nothing beyond that purpose.

How it is used

Solely to generate KRA eTIMS invoices from your QuickBooks invoices, transmit them to KRA, and report their status back to QuickBooks. QuickBooks data is not used for any other purpose, not sold, and not shared with any party other than KRA.

Where it is stored

On the farm's own server infrastructure (not on third-party SaaS), with access restricted to the farm's operator.

Retention and disconnection

QuickBooks data is held while your connection is active. You can disconnect at any time from the app itself, at /disconnect, or from your QuickBooks company's connected-app settings. On disconnect the bridge stops receiving data and deletes synced QuickBooks data within 30 days, except invoice records Kenyan tax law requires us to keep.

Questions

Data questions about either section: [email protected].