Privacy
Policy

1. Who We Are

Micro-Greens Farm Ja ("we", "us", "our") is a microgreens farm and delivery service based in Jamaica. We operate the website at www.microgreensfarmja.farm.

We are the data controller responsible for personal data collected through this website. We are committed to protecting your privacy and handling your data in accordance with the Jamaica Data Protection Act 2020 (JDPA), the European Union General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA).

Contact: For any privacy enquiries, write to us via our Contact Page or reach us on WhatsApp at +1 (876) 283-2127.

2. Data We Collect

2.1 Information you provide directly

Data Type	Where Collected	Required?
First and last name	Order form, Contact form	Yes
Email address	Order form, Contact form	Yes
Phone number	Order form, Contact form	Yes (order) / No (contact)
Delivery address	Order form	Yes
Parish	Order form	Yes
Order details	Order form	Yes
Payment method preference	Order form	Yes
Message content	Contact form	Yes
Marketing consent	Contact form (opt-in checkbox)	No (voluntary)

2.2 Information collected automatically

When you visit our website, we may collect technical information including:

• Browser type and version
• Operating system
• Pages visited and time spent
• Referring website
• Device type (desktop, mobile, tablet)

This data is collected through cookies. Please see our Cookie Policy for full details.

3. Legal Basis for Processing

Under the JDPA and GDPR, we rely on the following lawful bases:

Processing Activity	Legal Basis
Processing your order	Performance of a contract (Section 17, JDPA)
Responding to enquiries	Legitimate interests
Marketing communications	Explicit consent (opt-in only)
Analytics cookies	Consent
Fraud prevention	Legitimate interests / Legal obligation
Legal compliance	Legal obligation

4. How We Use Your Data

We use personal data only for the purposes for which it was collected:

• Order fulfilment: Processing, confirming, packaging, and delivering your order.
• Customer communication: Sending order confirmations, delivery updates, and responding to enquiries.
• Marketing (consent-only): Sending harvest updates, new product announcements, and promotions only where you have explicitly opted in. You may withdraw consent at any time.
• Service improvement: Understanding how the website is used to improve content and functionality.
• Legal compliance: Meeting obligations under Jamaican law.
• Fraud prevention: Detecting and preventing fraudulent orders or abuse of our services.

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

5. Who We Share Data With

We do not sell your personal data. We may share data with:

• Delivery partners: Your name, address, and phone number are shared with our delivery personnel solely to fulfil your order.
• Payment processors: If bank transfer details are needed to complete payment. We do not process card payments through this website.
• Analytics providers: Aggregated, anonymised data only (if analytics cookies are consented to).
• Legal authorities: Where required by law or a valid legal order.

All data processors we engage are bound by data processing agreements and may not use your data for their own purposes.

6. How Long We Keep Your Data

Data Type	Retention Period
Order records	7 years (Jamaican tax/accounting obligations)
Contact form messages	2 years from receipt, then deleted
Marketing consent records	Until consent is withdrawn, plus 3 years
Analytics data	14 months (aggregated thereafter)
Cookie consent logs	3 years

Data stored in your browser's local storage remains under your control and can be cleared at any time using your browser settings.

7. Your Privacy Rights

Depending on your location, you have the following rights regarding your personal data:

Under the Jamaica Data Protection Act (JDPA)

• Right of access: Request a copy of the personal data we hold about you.
• Right to correction: Request correction of inaccurate or incomplete data.
• Right to erasure: Request deletion of your data where it is no longer necessary.
• Right to object: Object to processing based on legitimate interests.
• Right to withdraw consent: Withdraw marketing consent at any time without penalty.

Under GDPR (if you are in the EU/EEA)

All the above, plus: data portability, restriction of processing, and the right not to be subject to solely automated decisions.

Under CCPA (if you are a California resident)

Right to know, right to delete, right to opt-out of sale (we do not sell data), and right to non-discrimination.

To exercise any of these rights, contact us via our Contact Page or WhatsApp. We will respond within 30 days as required by the JDPA.

8. Cookies

We use cookies to operate this website. For a complete description of the cookies we use, their purposes, and how to manage your preferences, please read our Cookie Policy.

You can manage your cookie preferences at any time by clicking Manage Cookie Preferences.

9. Children's Privacy

Our website and services are not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us immediately and we will delete it.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

• Password hashing (SHA-256) for administrative access
• HTTPS encryption for all data in transit
• Access controls limiting who can view customer data
• Regular review of our data handling practices

No method of transmission over the internet is 100% secure. If you believe your data has been compromised, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. We will post the updated version on this page with a revised "Last Updated" date. For material changes, we will notify you via the website banner.

Your continued use of our website after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us / Data Requests

For any questions about this Privacy Policy, to exercise your data rights, or to lodge a complaint:

• Website: Contact form
• WhatsApp: +1 (876) 283-2127
• Instagram: @microgreensfarm_ja

You also have the right to lodge a complaint with the Office of the Information Commissioner of Jamaica if you believe your data has been handled unlawfully.