Privacy and Data Use Policy

1 Your Privacy is Important to Us

This Privacy Policy applies to the Processing of your personal information by Cellsoft Technologies.

At Cellsoft, we believe that an important part of protecting privacy is to be clear about how we handle personal information, and to make information about our approach easily accessible. We have developed this Policy to outline how we protect the personal information entrusted to us by you. This Policy is current as of October 14, 2023. We may change it from time to time, and post the changes to our Site, so please be sure to check back periodically. If we make any changes to this Policy that materially affect our practices with regard to the personal information we have previously collected from you, we will try to provide you with notice in advance and highlight the change on our Site. When required under applicable laws, we will also seek your consent.

2 Scope of this Policy

This Policy applies to the Processing of your personal information by Cellsoft Technologies ("Cellsoft," "we," "us," and "our"). In particular, this Policy applies to personal information collected through:

• Any Cellsoft website on which we post this Policy (our "Sites");
• Our mobile or downloadable applications, web-based applications or SaaS platforms (our "Apps"); and
• Any offline collection, either within or outside the use of our Sites and Apps

Our Sites, Apps, and any offline services are collectively referred to as "Services".

Where we provide Services designed for business Customers, we act as a Processor, and the business Customer is the Controller of any personal information it provides or that we collect on its behalf. In these instances, the business Customer is responsible for providing any required privacy notices or rights to its End Users. End Users should contact the business Customer directly to exercise any rights available to them.

3 Acknowledgement

By using the Services, you acknowledge that we will handle your personal information as described in this Policy and any agreement you have entered into with us.

4 Consent

To the extent required by applicable law, CELLSOFT obtains any consents necessary for the Processing of personal information as described in this Policy. However, where CELLSOFT does not have a direct relationship with the End Users, we rely on our Customers to obtain all necessary consents or otherwise have all necessary authority we require for the Processing of End User personal information.

5 Information We Collect About You

We may collect personal information directly from you or automatically through your use of our Services. For example, collection may happen when you create an account, request information from us, access our Services, subscribe to communications, or attend our events. We may also collect information from third party sources (including offline), such as social media, farm and business customers, or business databases and records.

Information We Collect From You or Third Parties

Depending on your interaction with us, we collect the following information, which may constitute personal information, in your jurisdiction:

• Your name, email, address (including country), phone number and log-in credentials
• Your company or farm name, website or industry sector
• Billing, shipping and payment information
• Communication preferences
• Any other information you voluntarily provide to us, such as agronomic data, farm production data, or any information about your land
• Field boundaries or geo-location information with respect to fields
• User information including workflow app data and performance information

Information We Collect Automatically

We automatically collect information about your use of our Sites and Apps through cookies, web beacons, scripts, and other technologies. The types of information we automatically collect include:

• Domain name
• Your browser type, language and operating system
• Online browsing or 'clickstream' data
• The webpage that led you to our Sites
• Device identifiers, IP address, operating system type
• Mobile device location information (if necessary to provide the Service)

6 How and Why We Use Your Information

Service Provisioning/Transactional Purposes:

• To communicate with you throughout your relationship with CELLSOFT
• To understand your needs and preferences
• To provide products and services tailored to your requirements
• To diagnose technical problems and maintain security
• To meet contractual, legal and regulatory requirements

Marketing Communications:

In accordance with applicable laws (and with your consent where required), we may use your information to send you:

• Newsletters, product and event information
• Marketing communications about our Services
• Marketing communications about products and services of third-party entities

Site and Product Improvement/Development/Research:

• To develop, improve, update or create Services
• To study how our Services are used
• To administer surveys and questionnaires

Legal Purposes:

• To preserve our legal rights or comply with legal obligations
• To protect against fraud or other criminal activity
• To respond to requests from public authorities
• To meet any other legal and regulatory requirements

7 With Whom We Share Your Information

We may share your information, including personal information, with:

• Service Providers: Who perform functions on our behalf, such as hosting services and payment processors
• Advertising Networks: For marketing purposes
• Other Entities: With your permission, banks, food processors, insurance companies, suppliers, growers and other CELLSOFT customers

We also share information in Business Transfers and in Response to Legal Process.

8 Location of Service Providers and Data Centers

Your personal information may be Processed and stored in any country where we or our service providers have facilities. By using our Services, you understand that your personal information may be Processed and stored outside of your country of residence. We will continue to protect your information in accordance with this Policy.

9 Retention

We retain your personal information for as long as necessary to provide our Services to you, to fulfill the purposes described in this Policy, or as permitted or required by law or regulation.

10 Our Use of Cookies and Other Tracking Mechanisms

We use cookies to understand how you interact with our Services primarily to improve your user experience.

Disabling Cookies: Most web browsers automatically accept cookies, but you can accept, refuse or delete them through your browser. If you disable cookies, some functions may not be available.

Analytics: On some of our Services, we use Adobe Analytics and Google Analytics to evaluate usage. To learn more about Google's privacy practices, please visit https://www.google.com/policies/privacy/.

11 Security of Your Personal Information

We employ security measures appropriate to the sensitivity of the information we collect in an effort to protect it from loss, misuse, and unauthorized access, disclosure, alteration, and destruction.

You should take steps to protect against unauthorized access to your password, phone, device, and computer by signing off after using a shared device, choosing a robust password, and keeping your log-in and password private.

12 Your Privacy Rights

As a data subject, you may have certain rights including:

• Access and Correction: Right to access and correct your personal information
• Withdraw Consent: Change your mind and withdraw consent previously provided
• De-registration: Request de-registration of your account
• Object to Processing: Ask us to stop or restrict Processing
• Data Portability: Have your information transferred to another Controller
• Automated Decision Making: Object to decisions made on automated processing
• Complaints: Complain to your local supervisory authority

13 Data Protection Principles

14 Additional Information for EU and UK Individuals

The personal information we collect about you is controlled by Cellsoft Technologies which is headquartered at 214 Kilimani Road, Nairobi Kenya.

Legal Bases for Processing:

• Legitimate interest
• Performance of a contract
• Legal or regulatory obligation
• Your consent
• Protection of vital interests

Cross-border Transfer: We may process, store or transfer your personal information outside of the EEA and UK. We will take steps to ensure the information receives the same level of protection.

15 Children

Our Services are not intended for children or persons under legal age. If we discover that a child or minor has provided us with personal information, we will delete such information from our systems.

16 Cellsoft Sub-processors