1. Introduction

AgriFriend Ltd. (“AgriFriend”, “we”, “us”, or “our”) respects the privacy of all individuals and organizations who visit our website www.agrifriend.io (the “Website”).

We are committed to processing personal data in a transparent, lawful, and secure manner. This Privacy Policy explains:

• What personal data we collect through the Website;
• How and why we use that data;
• With whom we share it;
• Your rights under applicable privacy laws; and
• How you can contact us with questions or requests.

This Policy applies only to data collected through the Website. Any use of our software platform or services provided under a separate contract is subject to the terms of that contract, which may include its own privacy provisions.

By using our Website, you acknowledge that you have read this Privacy Policy and agree to the practices described herein.

2. Definitions

For purposes of this Policy:

• “Personal Data” means any information that identifies, relates to, or can reasonably be linked to an identified or identifiable individual (e.g., name, email, IP address).
• “Processing” means any operation performed on personal data, whether automated or not, including collection, storage, use, disclosure, transfer, and deletion.
• “Controller” refers to the entity that determines the purposes and means of processing personal data. For Website-related processing, AgriFriend Ltd. acts as the Controller.
• “Processor” refers to any third party that processes personal data on behalf of a Controller.
• “Applicable Laws” refers to all privacy laws that may apply to our processing activities, including but not limited to:
  
  • EU General Data Protection Regulation (GDPR)
  • UK GDPR
  • California Consumer Privacy Act / California Privacy Rights Act (CCPA / CPRA)
  • California Online Privacy Protection Act (CalOPPA)
  • Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA)
  • U.S. Children’s Online Privacy Protection Act (COPPA)
  • Gulf Cooperation Council (GCC) data privacy frameworks
  • Other global privacy regulations if applicable to our jurisdiction and business.

3. Scope of Policy & Applicability of Laws

This Privacy Policy applies to personal data collected through our Website. AgriFriend is based in Israel and processes data in accordance with Israeli law and, where applicable, other privacy regulations relevant to the locations of our users.

Because we interact with users globally, we have structured our privacy practices to take into account the requirements of various legal frameworks, including GDPR, UK GDPR, CCPA/CPRA, CalOPPA, PIPEDA, COPPA, GCC privacy laws, and other applicable regulations.

Nothing in this Policy should be interpreted as creating obligations beyond those required by law in the jurisdiction governing our operations or the specific context of the data processing. Where local law explicitly requires additional protections, we will comply to the extent legally required.

4. Our Role as Data Controller

For the purposes of data collected via our Website, AgriFriend Ltd. acts as the Data Controller, meaning we decide how and why your personal data is processed.

However, we use certain third-party service providers (Processors) to operate the Website and analyze its usage, such as hosting, analytics, CRM, and advertising platforms. These third parties only process data on our behalf and in accordance with our instructions, subject to appropriate contractual safeguards.

For third-party tracking tools (e.g., Google Analytics, Meta Pixel), these entities may also act as independent Controllers for certain data they collect. In such cases, their own privacy policies govern their processing activities.

5. What Data We Collect

When you interact with our Website, we may collect the following categories of personal data:

1. Identifiers – your name, email address, job title, and organization when you contact us.
2. Technical Data – IP address, browser type, device type, operating system, referring URLs, and related technical information.
3. Location Data – approximate geolocation inferred from your IP address.
4. Usage Data – information about how you interact with our Website (pages visited, time spent, actions taken).
5. Communications – any information you voluntarily provide through our contact forms or emails.
6. Tracking Data – data collected automatically via cookies, pixels, and similar technologies.

We do not knowingly collect sensitive personal data (e.g., health data, biometric data) through our Website.

6. How We Collect Data

We collect personal data through the following methods:

• Directly from You – when you submit a contact form, send us an email, or otherwise choose to provide information.
• Automatically – through cookies, pixels, and similar tracking technologies that collect technical and usage data when you browse the Website.
• From Third Parties – such as analytics providers, advertising networks, and CRM platforms, who provide us with data about your interactions with our content.

We collect only the minimum amount of data necessary to fulfill the purposes described in this Policy.

7. Purposes of Processing

We process personal data for the following purposes:

1. To Respond to Inquiries – to reply to your questions, provide information, and manage communications.
2. To Operate & Improve the Website – to monitor site performance, detect security issues, and optimize user experience.
3. To Analyze Usage Trends – using analytics tools to understand how visitors engage with our content.
4. To Conduct Marketing & Advertising – using cookies and pixels to measure the effectiveness of campaigns and, where permitted, retarget users with relevant ads.
5. To Comply with Legal Obligations – retaining data where required by law, responding to lawful requests from authorities.
6. To Enforce Our Rights – preventing misuse of the Website and protecting against legal claims.

Where required by law, we obtain consent for marketing and certain tracking activities.

8. Legal Bases for Processing (GDPR)

For users in the EU, EEA, and UK, our processing of personal data is justified under the following legal bases:

• Consent – for placing non-essential cookies, marketing communications, and analytics where required.
• Legitimate Interests – to operate, secure, and improve our Website; to engage with potential business customers (without overriding your privacy rights).
• Contractual Necessity – when processing is necessary to respond to your inquiries or take steps at your request prior to entering into a contract.
• Legal Obligations – when processing is required to comply with applicable laws, regulations, or judicial orders.

You have the right to withdraw consent at any time where consent is the basis for processing.

9. Use of Cookies & Tracking Technologies

Please refer to the Cookie Policy for more information on this section.

10. Third-Party Services & Data Sharing

We use third-party service providers to operate our Website and support business functions. These entities may process personal data on our behalf, under strict contractual obligations, or as independent controllers with their own policies.

Key Third-Party Providers:

• Webflow – Website hosting and form submissions
• Google Analytics – traffic analytics
• Microsoft Clarity – user behavior analytics
• Attio – CRM and lead management
• Mailchimp – email marketing
• Meta (Facebook), LinkedIn, Google Ads – advertising and retargeting

Some of these third parties (e.g., advertising networks) may collect data directly via embedded scripts or cookies. We encourage you to review their respective privacy policies to understand how they handle your data.

11. Advertising & Retargeting

Our Website may use advertising cookies and pixels to track interactions with our content and measure campaign performance. Where permitted, these tools may be used for retargeting, i.e., showing you relevant ads on other platforms based on your previous interactions with our Website.

You can opt out of interest-based advertising:

• For Google Ads: https://adssettings.google.com
• For Facebook: https://www.facebook.com/settings
• Or by using the industry-wide opt-out tool: https://optout.aboutads.info

We do not sell personal data in exchange for money. However, certain sharing with advertising partners may constitute a “sale” or “sharing” under the CCPA/CPRA; users in California have the right to opt out (see Section 15).

12. Data Retention

We retain personal data only as long as necessary to fulfill the purposes outlined in this Policy, unless a longer retention period is required by law.

• Contact Data (inquiries, communications) – retained until your request is resolved and for a reasonable period thereafter to manage follow-ups.
• Analytics & Tracking Data – retained as per third-party provider policies (e.g., Google Analytics data is typically retained for 26 months).
• Legal Requirements – where laws require retention (e.g., for compliance or defense of legal claims), we may keep data for the required period.

When personal data is no longer needed, it is securely deleted or anonymized.

13. International Data Transfers

AgriFriend is based in Israel, a jurisdiction recognized by the European Commission as providing adequate protection for personal data under GDPR.

However, some of our service providers are located outside Israel (including in the United States). When personal data is transferred to countries without an adequacy decision, we implement appropriate safeguards, such as:

• Standard Contractual Clauses (SCCs) approved by the European Commission, or
• other mechanisms recognized under GDPR.

By using our Website, you acknowledge that your personal data may be transferred to and processed in jurisdictions outside your own country, which may have different privacy protections.

14. GDPR (EU & UK) Compliance

For users located in the European Union (EU), European Economic Area (EEA), and United Kingdom (UK), we process personal data in compliance with the General Data Protection Regulation (GDPR) and UK GDPR.

Your Rights Under GDPR:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data (“right to be forgotten”).
• Restriction: Request limitation of processing in certain circumstances.
• Data Portability: Request your data in a structured, commonly used format.
• Objection: Object to processing based on legitimate interests or for direct marketing.
• Withdrawal of Consent: Withdraw consent where processing is based on consent.

To exercise your GDPR rights, contact our Data Protection Officer (see Section 25). We may require verification of your identity before fulfilling requests. You also have the right to lodge a complaint with your local data protection authority.

15. CCPA / CPRA (California) Compliance

For residents of California, we comply with the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

Your Rights Under CCPA/CPRA:

• Right to Know: Request details about the categories and specific pieces of personal data we have collected about you.
• Right to Delete: Request deletion of your personal data, subject to legal exceptions.
• Right to Opt Out of Sale/Sharing: Opt out of any sale or sharing of personal data for cross-context behavioral advertising.
• Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
• Right to Correct: Request correction of inaccurate personal data.

To make a request, contact us at privacy@agrifriend.io. We will verify your identity before processing your request, as required by law.

16. CalOPPA (California Online Privacy Protection Act) Compliance

Under CalOPPA, we disclose:

• Do Not Track (DNT) Signals: Our Website does not currently respond to DNT browser settings because there is no industry standard for DNT compliance.
• Policy Updates: This Policy includes the date of last update and changes will be posted prominently.
• Personal Information Categories: Categories collected are described in Section 5.
• User Access: California users can request information about data we hold and request deletion (see Section 15).

17. PIPEDA (Canada) Compliance

For users located in Canada, AgriFriend processes personal data in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA).

Under PIPEDA, you have the right to:

• Access the personal information we hold about you;
• Request Corrections to ensure information is accurate and complete;
• Withdraw Consent to processing where applicable;
• Challenge Compliance by contacting our Data Protection Officer (Section 25) or the Office of the Privacy Commissioner of Canada.

We only collect personal data where we have a lawful basis and use it only for purposes described in this Policy or as otherwise permitted by law.

18. COPPA (US Children’s Privacy)

The Children’s Online Privacy Protection Act (COPPA) applies to the collection of data from children under 13 in the United States.

Our Website is not directed to children under the age of 13, and we do not knowingly collect personal data from them. If we become aware that we have collected such data without parental consent, we will delete it immediately.

If you believe a child has provided personal data to us, please contact us at privacy@agrifriend.io.

19. GCC Privacy Considerations

For users located in the Gulf Cooperation Council (GCC) countries (e.g., UAE, Saudi Arabia, Qatar, Bahrain, Oman, Kuwait), AgriFriend applies privacy protections aligned with local laws such as the UAE Federal Data Protection Law and Saudi Arabia’s Personal Data Protection Law (PDPL).

Where local GCC privacy laws grant you additional rights, you may exercise those rights by contacting us. We will handle requests in compliance with both GCC law and our global privacy framework.

20. Global Privacy

AgriFriend operates globally and recognizes that privacy laws vary by jurisdiction. We aim to handle personal data responsibly and in alignment with the privacy principles reflected in major regulations.

The rights described in this Policy are provided to the extent they are required under the laws applicable to your interaction with our Website. Users in jurisdictions with specific legal entitlements (such as the EU, UK, California, Canada, or other regions) may exercise those rights as outlined in the relevant sections of this Policy.

Nothing in this Policy should be interpreted as granting rights or imposing obligations beyond what is expressly required by the applicable law.

21. Your Privacy Rights & How to Exercise Them

You have rights under the laws described above. To exercise any of these rights, you may:

• Email us at privacy@agrifriend.io, or office@agrifrn.com
• Submit a request via our contact form on the website.

We will respond within the timelines required by applicable law (e.g., 30 days under GDPR). We may request verification of your identity before fulfilling any request to protect your data.

If you are unsatisfied with our response, you have the right to lodge a complaint with your local privacy regulator.

22. Security Measures

We implement reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or alteration. These include:

• Secure servers and encrypted connections (HTTPS);
• Access controls for staff handling data;
• Regular monitoring for vulnerabilities.

While we strive to protect your data, no system is completely secure, and we cannot guarantee absolute security. Users transmit data at their own risk.

23. Data Breach Notification

In the event of a data breach affecting your personal data, we will:

• Investigate the breach and mitigate its impact;
• Notify affected users and relevant regulators where required by law (e.g., GDPR);
• Provide information on the nature of the breach, data affected, and measures taken.

24. Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or technological changes. When we do, we will:

• Update the “Last Updated” date at the top;
• Post the revised Policy on our Website;
• Provide additional notice where required by law (e.g., email or banner notification).

Continued use of the Website after changes are posted constitutes acceptance of the revised Policy.

25. Contact Information & Data Protection Officer

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact our Data Protection Officer (DPO):

Name: Gilad
Email: privacy@agrifriend.io
Alternate Contact: office@agrifrn.com

For general inquiries, you may also contact us at:
AgriFriend Ltd.

‍