Privacy Policy

1. Introduction

Agridence Pte. Ltd. (“Agridence”, “we”, “us”, or “our”) is committed to protecting the privacy and security of personal data. This Privacy Policy describes how we collect, use, store, and protect information when you visit our website, use our supply chain traceability platform, or engage with our compliance solutions.

As a provider of enterprise supply chain traceability and regulatory compliance solutions (including EUDR and PPWR compliance), we understand the importance of data protection in business operations. We process personal data in accordance with the EU General Data Protection Regulation (GDPR), the Singapore Personal Data Protection Act (PDPA), and other applicable data protection laws.

2. Data Controller

Agridence Pte. Ltd. is the data controller responsible for your personal data. If you have questions about data protection or wish to exercise your rights, you may contact our Data Protection Officer at dpo@agridence.com.

3. Information We Collect

We collect information necessary to provide our B2B services effectively. The types of data we collect include:

3.1 Business Contact Information

• Name and job title
• Company name and business address
• Business email address and phone number
• Professional social media profiles (e.g., LinkedIn)

3.2 Account and Service Data

• Login credentials and account preferences
• Subscription and billing information
• Service usage data and platform activity logs
• Support tickets and communication records

3.3 Supply Chain Data

• Supplier information and certifications
• Geolocation data of production sites (polygons)
• Traceability records and compliance documentation
• Transaction and shipment data

3.4 Technical Data

• IP address and browser type
• Device information and operating system
• Cookies and similar tracking technologies
• Website usage analytics

4. Legal Basis for Processing

We process personal data under the following legal bases:

• Contractual Necessity: To perform our obligations under service agreements with your organization
• Legitimate Interests: To operate and improve our services, conduct business development, and ensure platform security
• Legal Obligation: To comply with applicable laws, regulations, and legal processes
• Consent: For marketing communications and optional data processing activities where you have provided explicit consent

5. How We Use Your Information

We use collected information for the following purposes:

• Providing and maintaining our traceability and compliance platform
• Processing EUDR due diligence statements and PPWR compliance documentation
• Generating supply chain visibility reports and risk assessments
• Managing customer accounts and providing technical support
• Communicating product updates, security alerts, and service notifications
• Sending newsletters and marketing communications (with consent)
• Conducting product research and platform improvements
• Ensuring platform security and preventing fraud
• Fulfilling legal and regulatory obligations

6. Information Sharing and Disclosure

We do not sell personal data. We may share information in the following circumstances:

• Service Providers: Trusted third-party vendors who assist in operating our platform (cloud hosting, analytics, customer support) under strict data processing agreements
• Supply Chain Partners: When necessary to facilitate traceability verification between authorized parties in your supply chain
• Regulatory Authorities: To comply with legal obligations, including submission of due diligence statements to EU authorities under EUDR
• Business Transfers: In connection with a merger, acquisition, or sale of assets, with appropriate confidentiality protections
• With Consent: When you or your organization has authorized specific data sharing

7. International Data Transfers

As a global company, we may transfer personal data to countries outside the European Economic Area (EEA) or your country of residence. When we do so, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Transfers to countries with adequate data protection (as determined by the EU)
• Binding Corporate Rules where applicable

8. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including:

• Active Account Data: For the duration of our business relationship plus 3 years
• Compliance Records: As required by law (e.g., 5-10 years for EUDR/PPWR documentation)
• Marketing Data: Until consent is withdrawn
• Technical Logs: Up to 12 months for security purposes

After the retention period, data is securely deleted or anonymized for statistical purposes.

9. Data Security

We implement industry-standard technical and organizational measures to protect personal data, including:

• Encryption of data in transit (TLS 1.2+) and at rest (AES-256)
• Regular security audits and vulnerability assessments
• Access controls and multi-factor authentication
• Employee training on data protection and security
• Incident response procedures and breach notification protocols

While we strive to protect your data, no system is completely secure. We encourage you to use strong passwords and maintain the confidentiality of your account credentials.

10. Your Data Protection Rights

Under applicable data protection laws (including GDPR), you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data (subject to legal retention requirements)
• Right to Restriction: Request temporary restriction of data processing
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent at any time for consent-based processing

To exercise these rights, contact us at dpo@agridence.com. We will respond within 30 days. You also have the right to lodge a complaint with your local supervisory authority.

11. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience on our website:

• Essential Cookies: Required for basic website functionality and security
• Analytics Cookies: Help us understand how visitors interact with our website
• Functional Cookies: Remember your preferences and settings
• Marketing Cookies: Used to deliver relevant advertisements (with consent)

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect website functionality.

12. Third-Party Links

Our website may contain links to third-party websites and services. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies before providing any personal information.

13. Children's Privacy

Our services are designed for business use and are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us immediately.

14. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices, technologies, or legal requirements. Material changes will be communicated via email to registered users or through a prominent notice on our website. We encourage you to review this policy regularly. Your continued use of our services after changes constitutes acceptance of the updated policy.

15. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about our data practices, please contact us: