Privacy Policy

Who we are: [company legal name], [email], [postal address] — the controller for the data described below.

What we collect. (a) Account data — username, business email, password (hash only — we never see it), and the business role you choose. (b) Business profile — company name, registration number, country, website, and description as you provide. (c) Trade activity — enquiries, quotations, agreed Deal records and their contents — visible only to the parties and platform staff. (d) Verification/vetting data — when a business profile is submitted, we record the submitting IP address and (where available) the network country, shown to staff to cross-check the region you declared. This pre-screen is stored to a limited period and deleted once vetted. (e) Messages — enquiry and quotation text, plus password-reset requests. (f) Technical data — cookies (see /cookies/), server logs, and mail service delivery records.

Why, and on what basis. To operate your account and provide marketplace features (performance of a contract); to moderate content, verify businesses, prevent fraud and abuse, and block restricted countries (legitimate interests); where the law requires (legal obligation) e.g. retaining certain records; with your consent, which you can withdraw (e.g. if we ever add analytics or newsletters).

Sharing. Trusted service providers only, namely our VPS host, our WordPress/email service providers, and (if adopted) a security or analytics plugin — with no secondary use. We do not sell data. We may disclose if we are legally required to. Staff who moderate and verify see your data, including vetting data on the moderation screens.

Retention. Account and profile data are kept while your account remains active. Deleted accounts: core data removed or hidden within 30 days, except records we must retain for the safety and evidential value of agreed Deals and policy/audit logs, which are kept up to [6 years].

Your rights. Under the UK GDPR/EU GDPR as applicable: access, rectification, erasure, restriction, portability, and objection (including to pre-screening IP records used for vetting). To exercise any of these, email [privacy@agricm.com]. You also have the right to complain to the UK ICO (ico.org.uk).

Security. See our security summary below; we enforce TLS on all site traffic, apply server hardening, review and monitor plugin access, and never store technical password data in plain text.

Cookie Policy (/cookies/)

We use a minimal number of cookies, all of them essential to the site functioning correctly: a session cookie that keeps you logged in and remembers preferences (via WP auth cookies), a security token that protects forms (nonce), and standard cookies some caching or security plugins may set. None of these cookies aggregate your data with outside services; none involve tracking or profiling.

If you choose not to accept cookies, some features of the site (such as your dashboard or account login) may not work. You can accept or reject all but essential cookies at any time through your browser’s own “delete cookies” option. [If you later add analytics (GA4/Matomo) or LinkedIn pixel etc., they need to be disclosed here with a consent banner before they load.