Privacy Policy for Foundations for Farming System

Last updated: 07-04-2025

Kalekt Analytics ("we", "our", or "us") is committed to protecting the privacy of users of the Foundations for Farming System. This Privacy Policy outlines how we collect, process, store, and disclose your personal data in compliance with the Cyber and Data Protection Act [Chapter 12:07] of Zimbabwe (CDPA), and other applicable data protection regulations.

By using our system, you consent to the data practices described herein.

1. Legal Basis for Processing

This policy and our data processing practices are governed by the CDPA, which establishes principles and obligations relating to the protection of personal information in Zimbabwe.

We collect and process personal data based on the following lawful bases:

• Consent
• Contractual necessity
• Legal obligation
• Legitimate interests

2. Information We Collect

2.1 Farmer Information

• Full Name (First, Middle, Last)
• Gender
• Date of Birth
• National ID Number & Image
• Location: Country, Province, District, Ward
• Phone Number (SMS-enabled)
• Geolocation (farm field polygons)
• Crop information

2.2 Extension Officer Information

• Full Name, Gender, Date of Birth
• National ID Number & Document (image)
• Geographical assignment
• Group association
• System login credentials

2.3 Survey and Activity Data

• Survey responses
• GPS coordinates of response location
• Timestamps
• Sync status

3. Purpose of Data Collection

• Enable registration and verification of farmers and field officers
• Monitor farming activities and productivity
• Improve agricultural extension services
• Enable offline survey data capture and syncing
• Export structured reports for insights and decision-making

4. Data Protection and Security

• Data Minimization
• Integrity and Confidentiality (encrypted in transit and at rest)
• Role-Based Access Control (RBAC)
• Activity logging and auditing
• Incident response policies

5. Data Sharing and Transfers

We do not sell or rent your data. Data may be shared with:

• Authorized system administrators
• Governmental or regulatory bodies as required by law
• Third-party cloud providers (e.g., GCP) under strict confidentiality agreements

We do not transfer data outside Zimbabwe without legal safeguards as per CDPA Section 25.

6. Data Subject Rights (Under CDPA)

You have the right to:

• Access your personal data
• Rectify inaccurate or incomplete information
• Erase personal data ("Right to be Forgotten")
• Restrict or object to processing
• Withdraw consent
• Lodge a complaint with the Data Protection Authority

To exercise your rights, contact us using the details below.

7. Data Retention

Data is retained only as long as necessary for its purpose or as required by law. When no longer needed, it will be securely deleted or anonymized.

8. Children’s Privacy

We do not knowingly collect information from individuals under 18 without parental or guardian consent, in line with CDPA.

9. Offline and Mobile Data Use

Survey data collected via mobile apps is stored locally and encrypted until synced online.

10. Updates to this Privacy Policy

We may update this policy to reflect legal, technological, or operational changes. Updates take effect immediately upon posting.

11. Contact Us

Kalekt Analytics
Email: dpo@kalektanalytics.com
Phone: +263775033599