Privacy Policy

1. Introduction

Orange Sands Ltd(“Orange Sands”, “we”, “our”, or “us”) operates Shamba Ledger. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our Service. By using Shamba Ledger, you agree to the practices described in this policy.

2. Information We Collect

Information you provide directly:

• Account details: name, email address, phone number, and password.
• Farm data: crop records, livestock entries, worker information, expense logs, and financial data you enter into the Service.
• Profile information: your organisation name, farm locations, and settings.

Information collected automatically:

• Device and browser information (type, operating system, browser version).
• Usage data: pages visited, features used, actions taken, and session duration.
• IP address and approximate geographic location (country/region level).
• Cookies and similar tracking technologies (see Section 7).

Information from third parties:

• If you sign in with Google, we receive your name, email address, and profile picture from Google in accordance with your Google account settings.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and improve the Service.
• Authenticate your identity and maintain your account security.
• Deliver the farm management features you use, including dashboards, reports, and activity logs.
• Send you important service notifications (e.g., account changes, security alerts).
• Respond to your support requests and communicate with you.
• Analyse usage patterns to improve performance and user experience.
• Comply with legal obligations under Kenyan law.

We do not use your farm data or financial records for advertising or sell your data to third parties.

4. Data Sharing & Disclosure

We may share your information with:

• Service providers: third-party vendors who assist us in delivering the Service (e.g., cloud hosting, authentication infrastructure, email delivery). These vendors are contractually bound to keep your information confidential and use it only to perform services on our behalf.
• Legal requirements: when required by applicable law, court order, or governmental authority, or to protect the rights, property, or safety of Orange Sands, our users, or others.
• Business transfers: in connection with a merger, acquisition, or sale of assets, your information may be transferred. We will notify you via email or a prominent notice on the Service before such a transfer.

5. Data Storage & Security

Your data is stored on secure servers hosted in data centres with industry-standard physical, technical, and administrative safeguards. We use encryption in transit (TLS/HTTPS) and at rest for sensitive fields. Access to your data is restricted to authorised personnel on a need-to-know basis.

While we take reasonable measures to protect your information, no method of transmission over the internet is 100% secure. If you believe your account has been compromised, please contact us immediately at privacy@orangesands.co.ke.

6. Data Retention

We retain your account and farm data for as long as your account is active or as needed to provide the Service. After account deletion, we retain your data for 30 days before permanent deletion, except where longer retention is required by law.

7. Cookies

Shamba Ledger uses cookies and similar technologies to maintain your session (authentication), remember your preferences, and analyse usage patterns. Essential cookies are required for the Service to function. You can control non-essential cookies through your browser settings, but disabling cookies may affect Service functionality.

8. Your Rights

Under applicable Kenyan data protection law, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Delete your personal data (subject to legal retention obligations).
• Object to or restrict certain processing of your data.
• Portability — receive your data in a structured, machine-readable format.

To exercise any of these rights, contact us at privacy@orangesands.co.ke. We will respond within 30 days.

9. Children’s Privacy

The Service is not directed at children under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via a notice in the Service or by email. We encourage you to review this policy periodically. Continued use of the Service after changes take effect constitutes your acceptance.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy, please reach out to our Data Protection contact: