1. Who we are
FarmFlow is an agricultural marketplace app for the Caribbean, operated by Civil Digital ("we", "us"). We are the data controller for personal data processed through FarmFlow. You can reach us at info@civildigital.co.uk.
2. What we collect
| Data | When | Why |
|---|---|---|
| Name, email address, and sign-in identifier (email, Google, or Facebook) | When you create an account | To create and secure your account |
| Profile town (island and town name) | When you set your profile location | To show you nearby listings and show buyers roughly where sellers are |
| Approximate device location (coarse, one-time) | Only if you grant location permission | To suggest your nearest town. We do not store your coordinates or track your movements — only the town you confirm is saved |
| Listings, photos, and messages | When you list items or chat with other users | To operate the marketplace and keep it safe |
| Marketing consent records | If you opt in to marketing emails | To prove your consent, including the wording you agreed to and when |
| Purchase records (donations) | If you make an optional donation via Google Play | To confirm and record your Google Play purchase. We never see your card details |
| Verification documents | If you apply to the Verified Seller Programme | To confirm your identity and regulatory compliance for restricted categories |
| Push notification token (Firebase Cloud Messaging) | Automatically, if you allow notifications | To send you alerts about your listings, messages, and account. You can turn notifications off in your device settings at any time |
| Usage analytics (screens viewed, listing views, button taps) | Automatically | To understand how features are used and improve the app (Google Firebase Analytics) |
| Device and diagnostic data | Automatically | To fix crashes, prevent abuse, and keep the service reliable |
3. Advertising
FarmFlow may show advertising provided by Google AdMob. When ads are enabled, Google may process your device's advertising ID to serve and measure ads. You can reset or delete your advertising ID in your device's Google settings. See Google's advertising policies for details.
4. What we never do
- We do not sell your personal data.
- We do not track your precise or continuous location.
- We do not read your messages except where required for moderation of reported content or by law.
- We do not send marketing emails without your opt-in consent.
5. Payments
Buyer–seller transactions take place directly between users, outside the app; we do not process or hold those payments. Optional donations are processed by Google Play Billing. Fees for boosts and the Verified Seller Programme are arranged directly with us and processed by our payment provider (Stripe); their processing is governed by Stripe's privacy policy.
6. Who we share data with
- Service providers — Google (Firebase authentication, database, storage, analytics, and push notifications; Play Billing; AdMob), Stripe (payments), and our email delivery provider, each processing data only on our instructions.
- Other users — your display name, profile town, and listings are visible to other users; your email address is not.
- WhatsApp / SMS — FarmFlow includes contact buttons that open WhatsApp or your messaging app to connect buyers and sellers directly. Using one passes the relevant contact number to that app on your device; anything you then send is handled under WhatsApp's privacy policy or your SMS provider's terms, not this one.
- Authorities — where required by law or to protect users from serious harm.
7. How long we keep data
We keep your data while your account is active. When you delete your account, personal data is deleted or anonymised promptly, except records we must keep longer for legal, security, or accounting reasons (for example, purchase ledgers and consent logs). Details of what is removed are on our Account & Data Deletion page.
8. Your rights
Under the Data Protection Act, 2020 (Jamaica) and the Data Protection Act, Chap. 22:04 (Trinidad & Tobago), you have rights to access, correct, and delete your personal data, and to withdraw consent (such as marketing consent) at any time. To exercise any right, email info@civildigital.co.uk. You may also complain to your local data protection authority: the Office of the Information Commissioner (Jamaica) or the Office of the Information Commissioner (Trinidad & Tobago).
9. Children
FarmFlow is for adults aged 18 and over. We do not knowingly collect data from anyone under 18; if we learn we have, we will delete it.
10. Changes to this policy
If we change this policy materially, we'll notify you in the app before the change takes effect. Each version is dated and numbered at the top of this page.