PRIVACY POLICY
OUR COMMITMENT TO YOUR PRIVACY
Green-Hydro AgTech Inc. is committed to protecting your privacy and handling your personal information transparently and lawfully. This Privacy Policy explains what information we collect, how we use it, who we share it with, and the rights available to you under the laws of the Commonwealth of Dominica, the European Union, the United Kingdom, the United States, and other jurisdictions where our visitors and users reside.
1. Introduction
- Visit our websites, including green-hydro.org and ghagtech.com (the “Sites”)
- Register as a producer, buyer, farmer, or platform participant on our Producer-Buyer Relationship Exchange
- Contact us through forms, email, phone, or social media
- Subscribe to our newsletters, mailing lists, or promotional communications
- Apply for employment or partnership opportunities
- Attend our events, tours, or investor presentations
- Otherwise interact with our products, services, or content
IMPORTANT NOTE FOR VISITORS OUTSIDE DOMINICA: Green-Hydro is incorporated in the Commonwealth of Dominica. If you access our Sites from outside Dominica, please be aware that your information may be transferred to, stored in, and processed in Dominica, the United States, or other jurisdictions where privacy laws may differ from those in your home country. See Section 9 (International Data Transfers) for details.
2. Who We Are – Data Controller Information
For the purposes of applicable data protection laws – including the Dominica Data Protection Act 2022, the EU General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) – the data controller responsible for your personal information is:
| Field | Details |
|---|---|
| Entity Name | Green-Hydro AgTech Inc. |
| Registration | Company Registration No. 2026/C0053 |
| Jurisdiction of Incorporation | Commonwealth of Dominica |
| Registered Office | [Registered office address, Roseau, Dominica] |
| Primary Website | www.ghagtech.com |
| Secondary Website | www.green-hydro.org |
| Contact Email | info@green-hydro.org |
| Privacy Contact | info@green-hydro.org |
3. Information We Collect
We collect information in three primary ways: (a) information you provide directly to us, (b) information we collect automatically when you use our Sites, and (c) information we receive from third parties.
3.1 Information You Provide Directly
We collect information you provide when you complete forms, register accounts, contact us, or otherwise interact with our services. This may include:
| Category | Examples of Information Collected |
|---|---|
| Contact Information | Full name, email address, phone number, mailing address, country of residence |
| Account Credentials | Username, password, security questions and answers, account recovery information |
| Producer/Farmer Profile Data | Farm name, farm location, cultivation practices, crop types, production capacity, certifications, bank account information for payments |
| Buyer/Partner Profile Data | Business name, business type, procurement needs, purchase history, payment method details |
| Communication Content | Messages, inquiries, feedback, testimonials, and any information contained within your communications to us |
| Employment Information | Resume/CV, work history, education, references, and other information provided in employment applications |
| Investor Inquiry Information | Name, contact details, investment interest, accreditation status where applicable |
| Payment Information | When applicable, we use third-party payment processors and do not directly store full payment card details |
| Marketing Preferences | Email subscription status, communication preferences, event attendance |
3.2 Information We Collect Automatically
When you visit our Sites, we automatically collect certain information about your device and browsing activity using cookies and similar tracking technologies:
| Category | Examples |
|---|---|
| Device Information | IP address, browser type and version, operating system, device identifiers, screen resolution |
| Usage Information | Pages visited, time spent on pages, referring URLs, click patterns, search terms, download activity |
| Location Information | General geographic location based on IP address (city and country level; we do not collect precise GPS location without explicit consent) |
| Log Information | Access times, error logs, hardware settings, browser language settings |
| Cookies and Similar Technologies | See Section 5 (Cookies and Tracking Technologies) |
3.3 Information from Third-Party Sources
We may receive information about you from third-party sources, including:
- Business partners and referral sources who introduce you to our platform
- Public databases, government registries, and publicly available social media profiles for verification purposes
- Analytics providers (such as Google Analytics) that help us understand Site usage
- Payment processors and financial institutions in connection with transactions
- Verification and identity services when required for account authentication
3.4 Sensitive Personal Information
We do not intentionally collect sensitive personal information – such as racial or ethnic origin, political opinions, religious beliefs, health information, biometric data, or precise geolocation – unless you voluntarily provide it or such information is necessary for a specific service you have requested (e.g., health-related dietary preferences for premium buyer accounts). Where applicable law requires explicit consent for such processing, we will request it separately.
4. How We Use Your Information
We use the information we collect for the following purposes, based on the legal grounds identified below. Under the GDPR and similar laws, we must have a lawful basis for processing your personal information. The lawful bases we rely on are: (a) your consent, (b) performance of a contract with you, (c) compliance with our legal obligations, (d) protection of vital interests, (e) performance of tasks in the public interest, and (f) our legitimate interests where they are not overridden by your rights.
| Purpose | Description | Legal Basis (GDPR) |
|---|---|---|
| Provide Services | Deliver our Producer-Buyer platform, process transactions, fulfill orders, provide customer support | Contract Performance |
| Account Management | Create and manage your account, authenticate your identity, maintain records | Contract Performance |
| Communications | Respond to inquiries, send transactional emails, provide service updates, notify you of platform changes | Contract / Legitimate Interest |
| Marketing | Send newsletters, promotional materials, event invitations, and other marketing communications | Consent / Legitimate Interest |
| Analytics & Improvement | Analyze how users interact with our Sites, improve functionality, develop new features | Legitimate Interest / Consent |
| Personalization | Customize content and recommendations based on your preferences and behavior | Consent / Legitimate Interest |
| Security & Fraud Prevention | Detect, prevent, and investigate security breaches, fraud, and unauthorized access | Legitimate Interest / Legal Obligation |
| Compliance | Comply with legal obligations, respond to government requests, enforce our Terms of Service | Legal Obligation |
| Business Operations | Conduct research, financial analysis, business planning, and support corporate governance | Legitimate Interest |
| Recruitment | Evaluate job applications and manage the hiring process | Contract (Pre-contract Steps) |
| Investor Relations | Communicate with prospective and current investors, comply with securities regulations | Legitimate Interest / Legal Obligation |
We will only use your personal information for the purposes for which we collected it, unless we reasonably consider that we need to use it for another compatible reason. If we need to use your personal information for an unrelated purpose, we will notify you and explain the legal basis that allows us to do so.
5. Cookies and Tracking Technologies
Our Sites use cookies and similar tracking technologies to enhance your browsing experience, analyze Site traffic, and understand where our visitors originate. A cookie is a small data file that is placed on your device when you visit a website.
5.1 Types of Cookies We Use
| Cookie Category | Purpose |
|---|---|
| Strictly Necessary | Required for the Sites to function properly — including session management, security, form submission, and load balancing. These cannot be disabled and do not require consent. |
| Functional / Preferences | Remember your choices such as language, region, and display preferences to personalize your experience. Optional; consent required in EU/UK jurisdictions. |
| Analytics / Performance | Help us understand how visitors use our Sites (pages viewed, time on site, referral sources) so we can improve. Typically Google Analytics or privacy-focused alternatives. Requires consent in EU/UK. |
| Marketing / Advertising | Track visitors across websites to deliver targeted advertising and measure campaign performance. Requires explicit opt-in consent in EU/UK. |
5.2 Managing Your Cookie Preferences
5.3 Do Not Track Signals
Some browsers offer a “Do Not Track” (DNT) signal. Because there is no industry standard for interpreting DNT signals, our Sites do not currently respond to DNT signals. You can still manage tracking through the cookie consent tools described above.
6. How We Share Your Information
We do not sell your personal information. We share your information only in the following circumstances:
6.1 Service Providers
We share information with third-party service providers who perform services on our behalf. These providers are contractually required to protect your information and use it only for the purposes we specify. Categories include:
- Website hosting and infrastructure providers
- Email delivery and marketing platform providers
- Customer relationship management (CRM) and farm management platforms
- Analytics providers (e.g., Google Analytics)
- Payment processors
- AI-powered crop diagnostic services (where you use platform features requiring such analysis)
- Security and fraud prevention services (e.g., reCAPTCHA)
- Professional advisors including lawyers, accountants, and auditors
6.2 Business Partners
In connection with our Producer-Buyer Exchange platform, we facilitate transactions between producers (farmers) and buyers (resorts, restaurants, distributors, retailers, and other purchasers). To facilitate these transactions, we share relevant profile information – such as farm details, product availability, and contact information – with the counterparties to whom you have chosen to connect. You control what information is shared through your profile settings.
6.3 Legal and Regulatory Disclosures
We may disclose your information when required by law, subpoena, court order, or governmental request, or when we believe in good faith that disclosure is necessary to:
- Comply with legal obligations under Dominican law or the laws of jurisdictions where we operate
- Respond to lawful requests from public authorities, including for national security or law enforcement purposes
- Protect and defend the rights, property, or safety of Green-Hydro, our users, or others
- Enforce our Terms of Service or investigate potential violations
6.4 Corporate Transactions
If Green-Hydro is involved in a merger, acquisition, financing, reorganization, sale of assets, or bankruptcy, your information may be transferred as part of that transaction. We will notify you of any such change in ownership and any resulting changes to this Privacy Policy.
6.5 With Your Consent
We may share your information for other purposes with your explicit consent.
7. Sharing with Government and Development Partners
Green-Hydro operates in partnership with the Government of Dominica, including the Invest Dominica Authority (IDA), the Ministry of Agriculture, and other agencies. In connection with our operations, we may share aggregated or anonymized data – and in limited cases, specific business information – with these partners for the following purposes:
- Reporting on production volumes, employment metrics, and export activities
- Demonstrating compliance with concessions terms and regulatory requirements
- Supporting national food security planning and agricultural development initiatives
- Facilitating access to development programs and international market opportunities
Where personal information is shared with government partners, we will do so only to the extent required by law or where necessary for legitimate operational purposes, and we will make reasonable efforts to inform you when practicable.
8. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying legal, regulatory, tax, accounting, or reporting requirements.
| Category of Information | Typical Retention Period |
|---|---|
| Account information | Duration of active account plus 7 years for records retention (per Dominican corporate and tax law) |
| Transaction records | 7 years from date of transaction (tax and audit requirements) |
| Marketing preferences | Until consent is withdrawn plus 30 days for administrative removal |
| Website analytics data | 26 months (Google Analytics default) unless anonymized sooner |
| Contact form submissions | 3 years from submission unless converted to account |
| Employment applications | 2 years from application date (successful applicants transferred to HR records) |
| Communications (email, chat) | 3 years from last interaction |
| Backups and archives | 12 months rolling retention on encrypted backup systems |
When your personal information is no longer needed, we will securely delete or anonymize it. In some cases, we may retain limited information as required by law or for the establishment, exercise, or defense of legal claims.
9. International Data Transfers
Green-Hydro is incorporated in Dominica and operates from Dominica, the United States, and other jurisdictions. Your personal information may be transferred to, stored in, and processed in countries other than the country from which you originally provided it. These countries may have data protection laws that are different from those in your country.
9.1 Safeguards for International Transfers
When we transfer personal information from the European Economic Area (EEA), the United Kingdom, or Switzerland to countries not deemed by the European Commission or UK authorities to provide adequate protection, we implement appropriate safeguards, which may include:
- Standard Contractual Clauses (SCCs) approved by the European Commission or UK Information Commissioner’s Office
- Binding Corporate Rules where applicable
- Adequacy decisions where such decisions apply to the destination country
- Your explicit consent to the transfer in appropriate circumstances
For visitors from the French Caribbean territories (Guadeloupe, Martinique, and other French Overseas Departments), you have the same rights under the GDPR as residents of continental France. Data processing is subject to the oversight of the French data protection authority (CNIL) where applicable.
9.2 Additional Information About Transfers
You may request additional information about the safeguards we use for international data transfers by contacting us at info@green-hydro.org.
10. Your Privacy Rights
You have rights regarding your personal information under applicable data protection laws. The specific rights available to you depend on the jurisdiction in which you reside.
10.1 Rights Available to All Users
Regardless of your location, you may:
- Access the personal information we hold about you
- Request correction of inaccurate or incomplete information
- Request deletion of your personal information, subject to legal retention requirements
- Withdraw consent for processing based on consent at any time
- Unsubscribe from marketing communications at any time
- Lodge a complaint with us or the appropriate data protection authority
10.2 Rights Under the Dominica Data Protection Act 2022
If you reside in the Commonwealth of Dominica, you have the following statutory rights:
- The right to be informed about the collection and use of your personal data
- The right of access to your personal data
- The right to rectification of inaccurate personal data
- The right to erasure of your personal data in certain circumstances
- The right to restrict processing of your personal data
- The right to data portability
- The right to object to processing based on legitimate interests
- Rights related to automated decision-making and profiling
- The right to complain to the Office of the Information Commissioner of Dominica
10.3 Rights Under the EU GDPR and UK GDPR
If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, you have the following rights under the GDPR and UK GDPR:
- Right of access (Article 15) – obtain a copy of your personal data
- Right to rectification (Article 16) – correct inaccurate data
- Right to erasure / “right to be forgotten” (Article 17)
- Right to restrict processing (Article 18)
- Right to data portability (Article 20) – receive your data in machine-readable format
- Right to object (Article 21) – including opt-out of direct marketing
- Rights related to automated individual decision-making, including profiling (Article 22)
- Right to withdraw consent at any time (Article 7)
- Right to lodge a complaint with a supervisory authority (Article 77)
10.4 Rights Under California Law (CCPA/CPRA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act:
- Right to know what personal information is collected, used, shared, or sold
- Right to delete personal information collected from you
- Right to correct inaccurate personal information
- Right to opt-out of the sale or sharing of personal information (Note: Green-Hydro does not sell personal information)
- Right to limit the use and disclosure of sensitive personal information
- Right to non-discrimination for exercising your privacy rights
We have not sold or shared personal information for cross-context behavioral advertising in the preceding 12 months.
11. How to Exercise Your Rights
To exercise any of your privacy rights, please contact us using the details provided in Section 16. We will respond to your request within the timeframe required by applicable law – generally within 30 days under GDPR/UK GDPR and within 45 days under CCPA/CPRA (with extensions permitted in complex cases).
11.1 Identity Verification
To protect your privacy and security, we will verify your identity before responding to your request. We may ask you to provide information that helps us confirm you are the person about whom we hold personal information. If you make a request through an authorized agent, we may require proof of authorization.
11.2 No Fees
We will not charge you a fee to access your personal information (or to exercise any of the other rights) unless your request is manifestly unfounded, repetitive, or excessive. In such cases, we may charge a reasonable fee or refuse to comply with your request. We will inform you of any such fee before proceeding.
11.3 What We May Need From You
We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal information (or to exercise any of your other rights). This is a security measure to ensure that personal information is not disclosed to any person who has no right to receive it. We may also contact you to ask for further information in relation to your request to speed up our response.
12. Data Security
We implement appropriate technical and organizational security measures to protect your personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include:
| Category | Measures |
|---|---|
| Encryption | TLS/SSL encryption for data in transit; encryption at rest for sensitive stored data |
| Access Controls | Role-based access controls; multi-factor authentication for administrative access |
| Network Security | Firewalls, intrusion detection systems, and regular security monitoring |
| Authentication | Strong password requirements; account lockout policies; secure session management |
| Personnel | Confidentiality obligations for all personnel and service providers with data access |
| Vendor Management | Security assessments of third-party service providers |
| Incident Response | Documented procedures for detecting, responding to, and recovering from security incidents |
| Training | Regular security awareness training for staff members |
NO GUARANTEE OF ABSOLUTE SECURITY: Despite our safeguards, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security. If you have reason to believe that your interaction with us is no longer secure, please notify us immediately.
12.1 Data Breach Notification
In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify affected individuals and applicable supervisory authorities as required by law. Notification will include information about the nature of the breach, the categories and approximate number of individuals affected, likely consequences, and measures taken or proposed.
13. Children's Privacy
Our Sites and services are not directed to individuals under the age of 18 (or the age of majority in your jurisdiction, whichever is higher). We do not knowingly collect personal information from children under 18. If we become aware that we have inadvertently collected personal information from a child under 18 without verified parental consent, we will take steps to delete such information as soon as possible.
If you believe that a child has provided us with personal information, please contact us at info@greenhydro.org so we can take appropriate action.
For visitors from the European Economic Area, the minimum age for consent to processing of personal information under the GDPR is 16 (or lower where set by individual EU member states, but not lower than 13). Users below this age require parental or guardian consent.
14. Third-Party Websites and Services
Our Sites may contain links to third-party websites, applications, or services that are not operated by Green-Hydro. This Privacy Policy does not apply to those third-party services. We are not responsible for the content, privacy practices, or terms of service of any third-party sites or services. We encourage you to review the privacy policies of any third-party sites you visit before providing them with your information.
Third-party services that may be integrated into our Sites include but are not limited to:
- Google Analytics (analytics)
- Google reCAPTCHA (security)
- Payment processors
- Social media platforms (share buttons, embedded content)
- Video hosting services (embedded video content)
- Email marketing platforms
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or for other operational reasons. When we make material changes, we will:
- Post the updated Privacy Policy on our Sites with a new “Last Updated” date
- Notify registered users by email or through prominent notice on our Sites
- Where required by law, seek your renewed consent for material changes to processing purposes
We encourage you to review this Privacy Policy periodically to stay informed about our data practices. Your continued use of our Sites after any modifications to this Privacy Policy constitutes your acceptance of the revised policy.
16. Contact Us
If you have questions, comments, or concerns about this Privacy Policy or our data practices, or if you wish to exercise your privacy rights, please contact us using the details below:
16.1 General Privacy Inquiries
| Contact Method | Details |
|---|---|
| info@green-hydro.org | |
| General Inquiries | info@greenhydro.com |
| Postal Mail |
Green-Hydro AgTech Inc Roseau, Commonwealth of Dominica |
| Phone | +1 (908) 265-7234 |
| Website | www.ghagtech.com |
16.2 Data Protection Officer
16.3 EU Representative
For visitors located in the European Economic Area, we will designate an EU Representative pursuant to Article 27 of the GDPR when required. Contact details for our EU Representative will be published on our Sites once appointed.
16.4 Supervisory Authorities
You have the right to lodge a complaint with a data protection supervisory authority. Depending on your location, relevant authorities include:
| Jurisdiction | Authority |
|---|---|
| Dominica | Office of the Information Commissioner, Commonwealth of Dominica |
| European Union | Your local Data Protection Authority (list available at edpb.europa.eu) |
| France (incl. Guadeloupe, Martinique) | Commission Nationale de l’Informatique et des Libertés (CNIL) |
| United Kingdom | Information Commissioner’s Office (ICO) – ico.org.uk |
| United States (California) | California Attorney General – oag.ca.gov/privacy |
We would appreciate the opportunity to address your concerns before you approach a supervisory authority – please contact us first at info@green-hydro.org .
OUR COMMITMENT
Green-Hydro AgTech Inc is committed to transparent and lawful handling of your personal information. As a company operating at the intersection of agriculture, technology, and sustainable development in Dominica and the wider OECS Islands, we recognize that trust is the foundation of the relationships we build with producers, buyers, investors, and communities. Protecting your privacy is essential to earning and maintaining that trust.
Thank you for taking the time to review this Privacy Policy.
