1. Introduction
This Privacy Policy explains how Msymba Agri (“we”, “us”, “our”) collects, uses, processes, stores, and protects personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable data protection laws.
We are committed to safeguarding personal data and ensuring transparency in how information is handled.
2. Scope of This Policy
This Privacy Policy applies to:
Visitors to our website
Business partners and counterparties
Producers, suppliers, and service providers
Customers and prospective customers
Investors and financial institutions
Individuals who contact us
Job applicants
This Policy does not apply to third-party websites linked from our website. We encourage you to review the privacy policies of any external sites you visit.
3. Personal Data We Collect
We may collect and process the following categories of personal data:
3.1 Information You Provide Directly
Full name
Company name
Job title
Contact information (email, telephone number, address)
Business correspondence
Information submitted via contact forms
CVs and employment application details
3.2 Information Collected Automatically
When you use our website, we may collect:
IP address
Browser type and version
Device information
Pages visited
Time and date of visit
Referring website addresses
Cookies and similar tracking technologies
3.3 Information from Third Parties
We may receive information from:
Business partners
Regulatory authorities
Public registers
Credit and due diligence providers
Professional advisers
4. Lawful Bases for Processing
Under UK GDPR, we process personal data only where we have a lawful basis to do so.
These include:
Contractual necessity – to perform a contract or take steps prior to entering into one
Legitimate interests – for business operations, risk management, and commercial engagement
Legal obligation – to comply with regulatory, tax, or compliance requirements
Consent – where required, including certain marketing communications
Vital interests – in rare circumstances
Where processing is based on legitimate interests, we ensure that such interests are not overridden by your fundamental rights and freedoms.
5. How We Use Personal Data
We may use personal data for the following purposes:
Responding to enquiries
Managing commercial relationships
Executing contracts and structured trade arrangements
Conducting due diligence and compliance checks
Risk management and credit assessment
Managing supply chain operations
Regulatory and statutory reporting
Internal governance and audit
Recruitment and human resources management
Website performance monitoring
Preventing fraud and unlawful activity
We do not sell personal data.
6. Marketing Communications
Where permitted by law, we may send business-related communications.
You may opt out of receiving marketing communications at any time by:
Using the unsubscribe link in communications
Contacting us directly
We do not engage in unsolicited marketing in breach of UK regulations.
7. Data Sharing and Disclosure
We may share personal data with:
Group companies or affiliated entities
Professional advisers (legal, financial, audit)
Logistics and operational partners
Financial institutions
Regulatory authorities
Technology service providers
Cloud hosting providers
All third-party service providers are required to implement appropriate security measures and process data in accordance with legal requirements.
We do not transfer personal data to third parties for unrelated commercial purposes.
8. International Data Transfers
Where personal data is transferred outside the United Kingdom, we ensure that appropriate safeguards are in place, including:
Adequacy regulations
Standard contractual clauses
Binding corporate rules (where applicable)
Other lawful mechanisms recognised under UK GDPR
9. Data Retention
We retain personal data only for as long as necessary to:
Fulfil the purposes for which it was collected
Comply with legal and regulatory obligations
Resolve disputes
Enforce agreements
Retention periods are determined based on:
Nature of the data
Legal requirements
Commercial necessity
Limitation periods under applicable law
When personal data is no longer required, it is securely deleted or anonymised.
10. Data Security
We implement appropriate technical and organisational measures to protect personal data against:
Unauthorised access
Accidental loss
Destruction
Alteration
Disclosure
These measures include:
Access controls
Encryption where appropriate
Secure data storage
Internal governance procedures
Staff confidentiality obligations
While we take reasonable steps to safeguard data, no transmission over the internet can be guaranteed as completely secure.
11. Your Rights
Under UK data protection law, you may have the right to:
Access your personal data
Request correction of inaccurate data
Request erasure (where applicable)
Restrict processing
Object to processing
Request data portability
Withdraw consent (where processing is based on consent)
Requests may be submitted using the contact details provided above.
We may require identity verification before responding to requests.
12. Cookies
Our website may use cookies and similar technologies to enhance user experience and analyse site performance.
You may manage cookie preferences through your browser settings.
Where required, consent will be obtained before placing non-essential cookies.
A separate Cookie Policy may be provided where applicable.
12. Automated Decision-Making
We do not carry out automated decision-making or profiling that produces legal or similarly significant effects on individuals without appropriate safeguards.