Privacy Policy

1. Who We Are

The Cape Farms operates agricultural production, aquaculture, livestock husbandry, processing, and cold storage facilities headquartered in Igede-Ekiti, Ekiti State, Nigeria. We are the direct Data Controller for personal data gathered through our website (thecapefarm.ng) and associated customer service channels.

2. Information We Collect

We collect only necessary personal data when you use our platform:

• Contact Information: Full name, email address, phone number, and physical delivery address (including landmark and LGA).
• Order & Transaction Details: Produce items selected, quantities, fulfillment dates, delivery notes, and transaction references generated during checkout.
• Payment Information: All online payments are handled directly by Paystack Payments Limited, a PCI-DSS certified processor. The Cape Farms never stores, handles, or has access to your full credit/debit card numbers, PINs, or bank verification details.
• Technical Data: IP address, browser type, and operating system collected routinely in standard web server logs for platform security and debugging.

3. Purpose and Legal Basis for Processing

Under the NDPA 2023, we process your personal data on the following legal bases:

• Performance of Contract: To confirm orders, route delivery couriers to your address, provide invoice receipts, and fulfill slaughter or cold storage services.
• Legitimate Interests: To verify payment authenticity, prevent fraud, coordinate logistics dispatch, and respond to customer queries.
• Legal Obligation: To maintain accounting records and tax compliance in accordance with Federal Inland Revenue Service (FIRS) and Ekiti State Internal Revenue Service requirements.

4. Data Sharing and Third Parties

We only disclose relevant details to essential service partners:

• Payment Gateways: Paystack Payments Limited for processing electronic transactions securely.
• Logistics Couriers: The Cape Farms dedicated refrigerated transport drivers and vetted third-party cold-chain haulers receive your name, telephone, delivery address, and dispatch instructions solely to complete your delivery.
• Transactional Messaging: Automated transactional email services (Resend) to deliver digital invoices and order updates.

5. Data Retention and Security

We implement strict role-based access control, encrypted database storage, and secure HTTPS transport. Customer transaction records are retained for seven (7) years to satisfy statutory accounting and tax regulations, after which they are securely purged or anonymized.

6. Your Rights Under the NDPA 2023

As a data subject in Nigeria, you have the right to:

• Request access to copies of personal data held about you.
• Request rectification of inaccurate, incomplete, or outdated information.
• Request erasure of your data where it is no longer required for statutory or contractual purposes.
• Object to or restrict specific processing operations.
• Lodge a complaint with the Nigeria Data Protection Commission (NDPC).

7. Contact the Data Protection Officer

For questions regarding this policy or to exercise any of your data protection rights, please contact our Data Protection Officer at: