Ivrify Data Limited (“Ivrify Data”, “we”, “us”, “our”) provides Origin Secure, a supply-chain traceability and verification platform for producers, exporters, and their partners.
This Privacy Policy explains how we handle personal data when you:
This Policy also applies to our website and business enquiries relating to other Ivrify Data products (such as Impact Secure) unless a separate notice applies.
If you do not agree with this Policy, please do not use our services.
Contact us
Email: partnerships@ivrifydata.io
Website: https://www.ivrifydata.io
Address: The Enclave Apartments, Lower Kabete Road, Nairobi, Kenya (00100)
Origin Secure is used in two main ways:
A. Our own services
For our website, demo experience, sales enquiries, and platform operations, Ivrify Data is the data controller.
B. Services we provide to client organisations
Many customers (such as exporters, cooperatives, brands, and their partners) use Origin Secure to manage their own supply-chain data. In those cases:
If you are a field agent, administrator, or other user working for a client organisation, questions about how your organisation uses your data should be directed to that organisation in the first instance. We will support our clients in responding to valid requests where applicable.
We do not sell personal data.
When you visit our website or contact us, we may collect:
If you use the mobile app as an authorised user of a client organisation, we may process:
The app may request permission to use your camera (for setup and capture), location, photos/files, and notifications. You can manage these in your device settings.
If you use the web dashboard as an administrator or authorised user of a client organisation, we may process:
Dashboard data relates to the client organisation you work for and is handled on that organisation's behalf.
When a verification code is scanned or a verification page is opened, we may automatically collect:
Account registration is not required to verify a product or batch.
We offer a demonstration version of Origin Secure so prospective users can explore the platform.
Exploring the demo
When you use demo mode, we may collect:
Demo content is illustrative. Please do not enter real personal data about yourself or others into demo fields unless prompted by a contact form described below.
Requesting Origin Secure for your organisation
If you choose “Get Origin Secure for your organisation” (or similar) within the demo, we collect the contact details you submit, which may include:
We use this information to respond to your enquiry, follow up about Origin Secure, and understand interest in our services. With your consent or where permitted by law, we may also send you relevant product or commercial information. You can opt out of marketing at any time by contacting partnerships@ivrifydata.io.
Demo operational data is reset periodically, including on a scheduled basis, and must not be treated as permanent or client production data.
Origin Secure may connect to third-party services that support compliance, risk assessment, and regulatory workflows. Depending on the services enabled for a client organisation, this may involve sharing limited necessary data, such as geolocation boundaries, plot identifiers, batch references, and related supply-chain metadata, with providers such as:
We only share data with these providers where required to deliver the relevant feature, under appropriate contractual safeguards, and in line with the client organisation's instructions where we act as processor.
We may update the categories of integrations over time. Material changes to how we use personal data will be reflected in updates to this Policy.
We use personal data to:
Legal bases (Kenya Data Protection Act, 2019): consent; performance of a contract; legitimate interests (such as security and service improvement); and legal obligation. Where we process data on behalf of a client organisation, that organisation determines the primary legal basis for operational processing.
We share personal data only where necessary:
| Recipient type | Why |
|---|---|
| Client organisations | Operational data is handled for the organisation that authorised your use of Origin Secure |
| Infrastructure and hosting providers | Secure hosting, storage, backups, and operations |
| Authentication and security providers | User login, access control, and fraud prevention |
| Notification services | Mobile alerts where you have opted in |
| Mapping and location-display services | Showing maps and location context in the app |
| Compliance and verification partners | Risk assessment, due diligence, and regulatory submissions where enabled (see Section 3.6) |
| Website and business tools | Analytics, scheduling, and communications for our website and sales process |
| Professional advisers | Legal, audit, and compliance support |
| Regulators and authorities | Where required by law or valid legal process |
Service providers may only use personal data to perform services for us or our clients and must protect it appropriately.
We do not sell personal data.
Personal data may be processed or stored outside Kenya, including in countries where our service providers operate. Where required, we use appropriate safeguards under applicable law, including contractual protections with processors.
We keep personal data only as long as needed for the purposes described:
| Data category | Retention approach |
|---|---|
| Website and sales enquiries | Typically up to 24 months after last contact, unless a longer period is needed for legal or business purposes |
| Demo session analytics | Typically up to 12 months |
| Demo contact requests (“Get Origin Secure…”) | Typically up to 24 months, or until the enquiry is resolved and any applicable follow-up period ends |
| Demo operational content | Reset periodically; not retained as production data |
| Client operational data | Retained according to the client organisation's instructions, contract, and applicable law |
| Security and access logs | Typically up to 12 months |
| Verification access logs | Typically up to 24 months |
When data is no longer needed, we delete or anonymise it in accordance with our retention procedures and contractual obligations.
We apply appropriate technical and organisational measures, including access controls, encryption in transit, secure storage practices, and monitoring. No method of transmission or storage is completely secure; please protect your account credentials and device.
Under the Kenya Data Protection Act, 2019, you may have the right to:
How to exercise your rights
We may need to verify your identity. Some rights may be limited by law or by our role as processor on a client's instructions.
If you are in the European Economic Area and personal data is processed in connection with EU-related compliance workflows (such as product verification or due-diligence features), you may also have rights under applicable data protection law. Contact partnerships@ivrifydata.io.
Origin Secure is a business platform for authorised users. It is not directed at children under 18, and we do not knowingly collect personal data from children. If you believe a child has provided personal data, please contact partnerships@ivrifydata.io.
Our website and apps may link to third-party websites or services. Their privacy practices are governed by their own policies. Compliance and verification integrations are operated by third parties under their own terms and privacy notices, in addition to the protections described in this Policy.
This section applies to www.ivrifydata.io only.
We use cookies and similar technologies to operate the website, remember preferences, and understand how visitors use our site.
Essential cookies
Required for the website to function (for example, session and security cookies).
Analytics cookies
Help us understand website traffic and usage, including through services such as Google Analytics and Apollo.io.
Functional cookies
Support features such as scheduling (for example, Calendly) and preference storage.
Marketing and conversion cookies
Where enabled, may include Google Ads conversion tracking to measure the effectiveness of our marketing campaigns.
Third-party cookies
Some cookies are set by third-party services on our pages. Their use is governed by those providers' policies.
When you first visit our website, you can accept or reject non-essential cookies through our cookie banner. You can also manage cookies in your browser settings; disabling some cookies may affect website functionality.
Third parties we use on the website:
We do not use the Origin Secure mobile app for cross-app advertising tracking.
Origin Secure is distributed through the Apple App Store and Google Play. Store operators may collect data under their own policies. Our in-store privacy disclosures reflect the categories of data described in this Policy. You can manage app permissions in your device settings.
Privacy Policy URL: https://www.ivrifydata.io/privacy
We may update this Policy to reflect legal, technical, or business changes, including new integrations or features. Updates will be posted at https://www.ivrifydata.io/privacy with a revised “Last updated” date. Where required, we will provide additional notice.
Privacy enquiries, demo contact, and rights requests
Email: partnerships@ivrifydata.io
Address: The Enclave Apartments, Lower Kabete Road, Nairobi, Kenya (00100)
ODPC (Kenya)
https://www.odpc.go.ke