Privacy Policy
Effective Date:
Mytochondria Investments Limited ("Mytochondria", "we", "our", or "us") respects your privacy and is committed to protecting the personal information entrusted to us. This Privacy Policy explains how we collect, use, store, disclose and protect information when you visit our website, create an account, use our agricultural technology platforms, purchase services, make a donation or otherwise interact with us.
This Policy applies to our website, digital platforms, applications, agricultural intelligence services, customer support channels and other services operated by Mytochondria. It should be read together with our Terms & Conditions.
By accessing or using our services, you acknowledge that you have had an opportunity to read this Policy. Where consent is required by applicable law, we will seek that consent separately and appropriately. Nothing in this Policy removes any rights you have under applicable data protection laws.
1. Information We Collect
Depending on how you interact with us, we may collect the following categories of information:
1.1 Personal and contact information
- Full name, username and identification details where required.
- Email address, telephone number and physical address.
- Organisation, cooperative, business or institutional affiliation.
- Account registration details and communication preferences.
1.2 Account and technical information
- Login credentials and account-related information.
- IP address, browser type, operating system and device information.
- Log files, access timestamps, website interactions and diagnostic information.
- Usage statistics and information about how our services are accessed.
1.3 Agricultural, farm and geospatial information
In delivering our agricultural intelligence and Earth Observation services, we may collect or process information relating to agricultural land, farms and farming activities, including:
- Farm locations, geographical coordinates and field boundaries.
- Farm size, land-use information and crop identification.
- Soil characteristics, soil test results and laboratory data.
- Soil pH, nutrient information, including nitrogen, phosphorus and potassium.
- Soil moisture, temperature, water stress and related environmental indicators.
- Crop performance, vegetation indices and satellite-derived observations.
- Planting activities, agricultural practices and information supplied by farmers or partner organisations.
Where farm or geographical information can identify an individual, household or identifiable land user, it may constitute personal data and will be handled accordingly.
1.4 Payment and transaction information
- Donation, purchase and subscription records.
- Transaction references, payment status and amounts.
- Billing information and relevant payment confirmations.
- Limited payment-related information supplied by payment processors.
Card payments are processed through authorised third-party payment providers. We do not intend to collect or store complete payment card numbers or card security codes on our own systems.
1.5 Communications and user-submitted information
- Information submitted through contact forms, emails and support requests.
- Feedback, survey responses and service reviews.
- Photographs, documents and other materials voluntarily submitted to us.
- Information provided when participating in programmes, campaigns or research activities.
1.6 Information from other sources
Where lawful, we may receive relevant information from cooperatives, NGOs, institutional partners, service providers, public datasets, agricultural research institutions and other organisations working with us.
1.7 Information we do not intentionally collect
We do not intentionally request information that is unnecessary for our services, including passwords to third-party accounts, complete payment card security credentials or sensitive personal information unrelated to our legitimate operations.
2. How We Use Your Information
We process information for legitimate, specified and lawful purposes, including:
- Creating, administering and maintaining user accounts.
- Providing agricultural intelligence, soil assessment, geospatial analysis and related services.
- Analysing satellite imagery and agricultural information to generate field-level insights.
- Providing crop, soil, water and land-management recommendations.
- Processing donations, subscriptions, purchases and other transactions.
- Verifying transactions and preventing fraud or unauthorised activity.
- Responding to enquiries, complaints and technical support requests.
- Communicating important service updates, security notices and policy changes.
- Improving our technology, research, operational performance and user experience.
- Measuring programme outcomes, agricultural impact and environmental performance.
- Developing statistical, aggregated or anonymised datasets.
- Meeting legal, regulatory, accounting and reporting obligations.
- Establishing, exercising or defending our legal rights.
2.1 Agricultural research and analytics
We may use agricultural and environmental information, including appropriately anonymised or aggregated data, to improve our analytical models, satellite-based assessments, agricultural methodologies and service performance.
Where research or analytical activities involve identifiable personal data, we will apply the appropriate lawful basis, safeguards and consent requirements under applicable law.
2.2 Marketing and communications
We may send information about our services, programmes, campaigns, opportunities and company developments where permitted by law. You may opt out of promotional communications at any time. Opting out of marketing will not prevent us from sending essential account, payment, security or service-related communications.
2.3 Legal basis for processing
Depending on the circumstances, our processing may be based on your consent, the performance of a contract, compliance with legal obligations, or another lawful basis recognised under applicable law.
4. Data Security
Mytochondria takes the security and confidentiality of information seriously. We implement and maintain appropriate technical, organisational and administrative safeguards designed to protect information against unauthorised access, disclosure, alteration, loss, destruction or misuse.
Depending on the system and information involved, these measures may include:
- Access restrictions and role-based permissions.
- Authentication and account-security controls.
- Secure transmission protocols where supported.
- System monitoring, logging and security reviews.
- Appropriate backup and recovery procedures.
- Confidentiality obligations for personnel and service providers.
- Security incident response and appropriate breach notification procedures.
No website, internet transmission, cloud service or electronic storage system can be guaranteed to be completely secure. Accordingly, although we take reasonable precautions, we cannot warrant absolute security against every possible cyberattack, system failure or unauthorised third-party action.
You are responsible for maintaining the confidentiality of your login credentials, using secure devices and promptly notifying us if you suspect unauthorised access to your account.
Where a personal data breach occurs, we will take appropriate steps to investigate, mitigate and notify affected persons and relevant authorities where required by applicable law.
6. Your Rights
Subject to applicable law and any lawful limitations, you may have the following rights in relation to your personal information:
- Right of access: Request confirmation of whether we process your personal data and obtain access to relevant information.
- Right to rectification: Request correction of inaccurate, incomplete or outdated personal information.
- Right to erasure: Request deletion of personal information where the legal conditions for erasure are met.
- Right to object: Object to certain forms of processing where permitted by law.
- Right to restriction: Request restriction of processing in circumstances recognised by law.
- Right to data portability: Request a copy or transfer of qualifying personal data where legally applicable and technically feasible.
- Marketing preferences: Withdraw consent or opt out of direct marketing communications.
- Automated decisions: Exercise applicable rights concerning decisions made solely through automated processing.
To exercise these rights, contact us using the details provided below. We may request reasonable information to verify your identity before processing a request.
We will respond within the periods prescribed by applicable law. Certain information may need to be retained to meet legal, regulatory, accounting, contractual, security or dispute-resolution obligations.
You may also have the right to lodge a complaint with the Data Protection Commissioner of Zambia or another competent supervisory authority, as applicable.
7. Contact Us
For questions, complaints, privacy concerns or requests relating to your personal information, please contact:
Mytochondria Investments Limited
Email:
info@mytochondria.com
Please include sufficient information to help us identify your request. We may request additional information where reasonably necessary to verify your identity or protect your information.
8. Retention of Information
We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including service delivery, contractual administration, legal compliance, accounting, security and the establishment or defence of legal claims.
When information is no longer required, we will take reasonable steps to securely delete, anonymise or otherwise dispose of it in accordance with applicable law and our retention procedures.
9. Age Restriction and Children's Privacy
Our website, accounts, platforms and services are intended exclusively for individuals who are at least eighteen (18) years of age.
Individuals under the age of 18 are not permitted to register, create accounts, purchase or subscribe to our services, make donations through our platform, or use any account-based features.
By registering or using our services, you represent and warrant that you are at least eighteen (18) years old and legally capable of entering into a binding agreement.
We do not knowingly collect personal information directly from individuals under 18 through services intended for adults. If we become aware that such information has been submitted, we may suspend the relevant account, restrict access and take appropriate steps to delete the information, subject to applicable legal obligations.
If you believe that an individual under 18 has provided personal information to us, please contact info@mytochondria.com.
10. Changes to This Privacy Policy
We reserve the right to revise this Privacy Policy periodically to reflect changes in our services, technology, business operations or legal obligations.
Updated versions will be published on this page with a revised effective date. Where a material change requires notification or renewed consent, we will take appropriate steps to provide it.
11. Governing Privacy Law
This Privacy Policy is intended to operate in accordance with the laws of the Republic of Zambia, including the Data Protection Act No. 3 of 2021, together with applicable regulations and other relevant data-protection legislation.
Where mandatory data-protection laws in another jurisdiction apply to our processing activities, we will respect those obligations to the extent required by law.
Last updated: