Introduction
TerraFerm Africa (Pty) Ltd ("TFA," "we," "our," or "us") respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website terraferm.africa (the "Site") or use our services.
By using the Site, you consent to the practices described in this Privacy Policy. If you do not agree with this policy, please do not access or use our Site.
1. Information We Collect
1.1 Information You Provide
We collect information you voluntarily provide when you:
- Request access to our Investor Portal
- Submit contact forms or inquiries
- Subscribe to our newsletter or updates
- Register for site tours or events
- Upload documents or materials
This may include:
- Name, title, and organization
- Email address and phone number
- Company information and role
- Professional credentials
- Investment preferences and criteria
- Communications with our team
1.2 Automatically Collected Information
When you visit our Site, we automatically collect:
- IP address and device information
- Browser type and version
- Pages visited and time spent
- Referring website or source
- Operating system and screen resolution
- Cookie identifiers (see Cookie Policy)
1.3 Third-Party Analytics
We use analytics services (Vercel Analytics, PostHog) to understand how users interact with our Site. These services may collect:
- Session recordings and heatmaps
- Click patterns and scroll depth
- Performance metrics and error logs
2. How We Use Your Information
2.1 Business Operations
- Processing Investor Portal access requests
- Responding to inquiries and providing information
- Scheduling site visits and meetings
- Delivering requested materials and documents
2.2 Communications
- Sending operational updates about our projects
- Providing weekly newsletters (with consent)
- Notifying you of relevant opportunities
- Responding to your questions and requests
2.3 Site Improvement
- Analyzing user behavior to improve functionality
- Identifying technical issues and performance
- Conducting A/B testing for optimization
- Enhancing security and preventing fraud
2.4 Legal Compliance
- Complying with applicable laws and regulations
- Responding to legal requests and proceedings
- Enforcing our Terms of Service
- Protecting our rights and property
3. Information Sharing and Disclosure
3.1 We Do NOT Sell Your Information
TFA does not sell, rent, or trade your personal information to third parties.
3.2 Service Providers
We share information with trusted service providers who assist our operations:
- Hosting: Vercel (website infrastructure)
- Database: Convex (data storage)
- Email: Resend (transactional communications)
- Analytics: PostHog, Vercel Analytics
- File Storage: Cloudflare R2 (investor documents)
- CMS: Sanity (content management)
These providers are contractually obligated to protect your information and use it only for specified purposes.
3.3 Business Transfers
If TFA is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
3.4 Legal Requirements
We may disclose information when required by law, legal process, or to:
- Comply with court orders or subpoenas
- Protect our rights, property, or safety
- Prevent fraud or security threats
- Enforce our Terms of Service
4. Data Retention
We retain your information for as long as necessary to:
- Fulfill the purposes described in this Privacy Policy
- Comply with legal obligations (typically 7 years for financial records)
- Resolve disputes and enforce agreements
You may request deletion of your information at any time (see Section 7).
5. International Data Transfers
TFA operates in South Africa, but our service providers may process data internationally. When we transfer data outside South Africa, we ensure:
- Adequate data protection measures (Standard Contractual Clauses)
- Compliance with POPIA (Protection of Personal Information Act)
- GDPR compliance for European Economic Area residents
6. Your Rights
Depending on your jurisdiction, you may have the following rights:
6.1 POPIA Rights (South Africa)
- Right to access your personal information
- Right to correct inaccurate information
- Right to delete your information
- Right to object to processing
- Right to lodge a complaint with the Information Regulator
6.2 GDPR Rights (European Union)
- Right to access, rectify, or erase your data
- Right to restrict or object to processing
- Right to data portability
- Right to withdraw consent
- Right to lodge a complaint with supervisory authorities
6.3 Exercising Your Rights
To exercise any of these rights, contact us at:
Email: privacy@terraferm.africa
Subject Line: "Privacy Rights Request"
We will respond within 30 days of your request.
7. Data Security
We implement industry-standard security measures to protect your information:
- Encryption: TLS/SSL for data transmission
- Access Controls: Role-based permissions and authentication
- Monitoring: Real-time security alerts and logging
- Backups: Regular encrypted backups
However, no method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.
8. Children's Privacy
Our Site is not intended for individuals under 18 years of age. We do not knowingly collect information from minors. If we become aware of such collection, we will delete the information immediately.
9. Third-Party Links
Our Site may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.
10. Changes to This Privacy Policy
We may update this Privacy Policy periodically. Changes will be posted on this page with a revised "Last Updated" date. Continued use of the Site after changes constitutes acceptance of the updated policy.
11. Contact Information
For questions or concerns about this Privacy Policy, contact us at:
TerraFerm Africa (Pty) Ltd
Email: privacy@terraferm.africa
Address: Brimstone Office, 39 Ferguson Rd, Ilovo 2196, Gauteng, South Africa
Phone: +27 63 479 2005
Data Protection Officer: Mareka Mokwatlo
12. Regulatory Information
Information Regulator (South Africa): https://www.justice.gov.za/inforeg/
GDPR Representative (EU): TBD
This Privacy Policy is governed by the laws of the Republic of South Africa.