Last updated: 2 August 2026
This Privacy Policy explains how the Agricultural Market Development Trust (AGMARK) collects, uses, and protects information in connection with agmark.org, in line with Kenya's Data Protection Act, 2019 (Cap. 411C). It describes what the Site actually does, provider by provider, so you can see where your information goes before you decide to send us any.
Who We Are
This website is operated by the Agricultural Market Development Trust (AGMARK), a Kenyan non-profit social enterprise founded in 2004. Our registered address is Suite 808, Applewood Adams, Ngong Road, Nairobi, Kenya. You can reach us at info@agmark.org or +254 720 384 724.
Under the Data Protection Act, 2019, AGMARK is the "data controller" for personal data collected through this website: the entity that decides why and how that data is processed. In this policy, "we", "us", and "our" mean AGMARK; "you" means anyone who visits or interacts with agmark.org (the "Site"); and "personal data" carries the meaning the Act gives it, namely any information relating to an identified or identifiable person.
What This Policy Covers
This policy covers agmark.org only. It does not cover AGMARK's programme delivery work with farmers, agro-dealers, and cross-border traders, which is governed by project-specific data protection and safeguarding agreements with our funders and beneficiaries; the third-party platforms we link to, such as Facebook, X, Instagram, and LinkedIn, each of which has its own privacy policy; or the content of any other website you reach by following a link from this Site.
It also does not cover recruitment, procurement, or employment data, or information you give us in person at a training, field day, or partner meeting.
Information We Collect
Contact form. When you send a message from our Contact page, we collect the name, email address, and message you type. To deliver that message and to guard against automated spam, our server also records the page you submitted from, your IP address, your browser's user-agent string, and the date and time of the submission. All of it is sent to AGMARK as an email through Brevo, our transactional email provider, and a short automatic acknowledgement goes back to the address you gave. The Site keeps no separate database of contact form submissions.
Newsletter sign-up. When you subscribe to our newsletter, we collect your email address and add it to AGMARK's mailing list, which is held with Brevo. As with the contact form, our server records the page you subscribed from, your IP address, your browser's user-agent string, and a timestamp, and sends us a notification email. We do not ask for your name or anything else at sign-up.
Spam protection. Both forms run automated checks that filter out bot submissions, and anything failing them is discarded rather than delivered to us. None of it asks anything extra of you. Making those checks work means briefly recording the IP address a submission came from, kept for no more than 24 hours. Where a message is discarded as spam, our server log also notes the sender's IP and email address, so we can correct the filter if it has misjudged a real enquiry.
Information collected automatically. Like most websites, agmark.org is delivered through a hosting provider (Hostinger), whose servers log standard technical information for every request: IP address, browser type, the pages requested, and timestamps. Those logs exist for security, troubleshooting, and reliability. The Site also uses Google Analytics 4 to measure traffic, and the Contact page embeds a Google map; both are covered below.
We do not ask visitors to this Site for sensitive personal data, meaning the categories the Act singles out: health status, race, ethnic or social origin, conscience, belief, genetic or biometric data, property details, marital status, family details, sex, or sexual orientation. Please do not include information of that kind in a contact form message or an email to us.
Our Legal Basis for Using It
Section 30 of the Data Protection Act requires a lawful basis for every use of personal data. Ours are set out below.
Consent, which you give by subscribing to our newsletter. You can withdraw it at any time under section 32, using the unsubscribe link in any newsletter. Withdrawing consent does not affect anything lawfully done before you withdrew it.
Legitimate interests, for answering the messages you send us, for keeping the Site secure and available, and for measuring how the Site is used. We have weighed these against your rights and consider the impact minimal, because none of it involves profiling, advertising, or automated decisions about you. If you would rather not be measured, you can object under section 36, and the next section explains how to stop it yourself in your browser.
Legal obligation, where we have to keep or disclose information to comply with Kenyan law or a valid order from a court or regulator.
How We Use Your Information
We use what you send through the contact form, or by email, to answer your question and to respond to partnership, media, and resource requests, including any follow-up the conversation needs. We use newsletter sign-ups only to send the newsletter you asked for.
We use hosting logs to keep the Site secure and running, and Google Analytics reports, which are aggregate rather than individual, to see which content is useful and where the Site needs work.
We do not sell personal data, use it for advertising or behavioural targeting, add people who use the contact form to our newsletter list, or pass it to third parties for their own marketing purposes.
Cross-Border Data Transfers
Some of the providers above operate outside Kenya. Brevo is a French company and Hostinger a Lithuanian one, both within the European Union, and Google operates globally; the servers each of them uses may sit in a different country again. Information connected to this Site is therefore transferred outside Kenya in the ordinary course of running it.
Part VI of the Data Protection Act permits these transfers where there are appropriate safeguards for the security and protection of the data, including transfer to jurisdictions with commensurate data protection laws (section 48). That is the basis we rely on: the European Union's General Data Protection Regulation affords protection comparable to Kenya's Act, and our providers commit contractually to processing data only on our instructions and to keeping it secure.
We do not transfer sensitive personal data out of Kenya through this Site at all, because we do not collect it here.
How Long We Keep Information
Section 39 of the Act requires that personal data be kept only as long as is reasonably necessary for the purpose it was collected for. In practice this works out as follows.
Contact form messages and emails stay in AGMARK's business records for as long as the enquiry needs and for our normal record-keeping afterwards. Where a message leads to nothing further, it is deleted once it no longer serves a purpose.
Newsletter subscriptions are kept until you unsubscribe, which removes your address from the list we send to.
The brief anti-spam records described above are deleted within 24 hours.
Google Analytics data is held on our Analytics property for the retention period configured there, which for event-level data is at most 14 months, after which Google deletes it automatically. Hosting and server logs are kept by Hostinger only as long as their standard security and operational practices require.
Your Rights
Section 26 of the Data Protection Act gives you the right to be informed of the use your personal data is put to, to access the personal data we hold about you, to object to the processing of all or part of it, to have false or misleading data corrected, and to have false or misleading data deleted.
The Act adds several related rights, which we will honour on the same terms: rectification and erasure of data that is inaccurate, out of date, or that we are no longer entitled to keep (section 40); restriction of processing while a dispute about accuracy or lawfulness is being resolved (section 34); objection to processing (section 36); receiving your data in a structured, commonly used, machine-readable format (section 38); and withdrawal of consent at any time (section 32).
Where someone exercises these rights on your behalf, a parent or guardian acting for a minor for instance, section 27 sets out how that works.
To exercise any of these rights, email info@agmark.org. We aim to respond within 30 days, the period the Act sets for portability requests and which we apply to the rest. We may need to ask you for enough detail to be confident we are dealing with the right person before we act.
If you believe we have mishandled your data, you can complain to Kenya's Office of the Data Protection Commissioner (odpc.go.ke), which takes complaints under section 56 of the Act and concludes them within ninety days under the Data Protection (Complaints Handling Procedure and Enforcement) Regulations, 2021. We would rather hear from you first so we can try to put it right, but you are under no obligation to come to us before going to the Commissioner.
Visitors in the EU, EEA, and UK
AGMARK is established in Kenya and this Site is written for an African audience, but we know it is read by funders, partners, and researchers in Europe. Where the EU or UK General Data Protection Regulation applies to our handling of your data, the rights it gives you sit close to the Kenyan ones above: access (Article 15), rectification (Article 16), erasure (Article 17), restriction (Article 18), portability (Article 20), and objection (Article 21).
Our lawful bases under Article 6 map onto the ones set out earlier: consent for the newsletter, legitimate interests for correspondence, security, and aggregate analytics, and legal obligation where a law requires it. You may lodge a complaint with the supervisory authority in your country under Article 77, as well as with Kenya's Office of the Data Protection Commissioner.
Security and Data Breaches
The Site is served entirely over HTTPS, and form submissions travel to our email provider over an encrypted connection. It has no accounts and no passwords, and keeps no database of visitor personal data beyond the short-lived anti-spam records described above.
Email is not a fully secure medium. Anything you email us, or type into the contact form, is only as protected as ordinary email, so please do not send us highly sensitive information that way.
If a breach of personal data we hold does occur and there is a real risk of harm to you, section 43 of the Act requires us to notify the Office of the Data Protection Commissioner without delay and within seventy-two hours of becoming aware of it, and to tell you in writing as soon as is reasonably practical.
Children's Privacy
This Site is not directed at children, and we do not knowingly collect personal data from anyone under 18 through it. Section 33 of the Act requires a parent's or guardian's consent before a child's data is processed, and this Site has no mechanism for verifying age or obtaining that consent, so we ask that children do not use its forms.
If you believe a child has sent us personal data through the Site or by email, contact info@agmark.org and we will delete it.
This is separate from AGMARK's programme work, which does involve youth participants in agricultural training and cross-border trade programmes and is governed by its own safeguarding and consent protocols rather than by this website policy.
Links to Other Websites
This Site links to other websites, including those of funders, partners, media outlets, and social platforms. We have no control over, and take no responsibility for, the content or the privacy practices of any site we link to. Please read the privacy policy of any site you visit.
Changes to This Privacy Policy
We update this policy when the Site changes or our practices do. The "Last updated" date at the top of this page always reflects the current version, and we will give more visible notice on the Site for any change that materially affects you.
Contact Us
For questions about this Privacy Policy, or to exercise any of the rights described in it, email info@agmark.org or call +254 720 384 724.
You can also write to us at Suite 808, Applewood Adams, Ngong Road, Nairobi, Kenya, or use the form on our Contact page.