Privacy Policy

1. Introduction

FarmBiddy ("we", "us", or "our"), a company registered in Ireland, is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our platform and services, in compliance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Irish Data Protection Act 2018.

2. Data Controller

FarmBiddy is the Data Controller responsible for your personal data. If you have any questions about how we handle your data, you can contact us at:

contact@farmbiddy.ai

3. What Data We Collect

We may collect and process the following categories of personal data:

• Identity Data: Name, firm name, professional role.
• Contact Data: Email address.
• Professional Data: Number of active clients, primary area of advisory work, administrative challenges (when voluntarily provided via application forms).
• Technical Data: IP address, browser type and version, device information, time zone, operating system.
• Usage Data: Information about how you use our website and platform.
• Communication Data: Messages you send to us via contact forms.

4. How We Collect Your Data

We collect personal data through:

• Direct interactions: When you complete forms on our website (Founding Advisory Circle application, contact forms, demo requests).
• Automated technologies: When you interact with our website, we may automatically collect Technical Data and Usage Data through cookies and similar technologies. See our Cookie Policy for more details.

5. Legal Basis for Processing

Under the GDPR, we process your personal data on the following legal bases:

• Consent (Article 6(1)(a)): When you voluntarily submit your information via our forms or opt in to communications.
• Contractual Necessity (Article 6(1)(b)): When processing is necessary to provide you with access to our Service or to take steps at your request prior to entering into a contract.
• Legitimate Interests (Article 6(1)(f)): For improving our Service, ensuring security, and communicating relevant updates, provided these interests are not overridden by your rights.
• Legal Obligation (Article 6(1)(c)): Where we are required to process data to comply with Irish or EU law.

6. How We Use Your Data

We use your personal data to:

• Process and respond to your Founding Advisory Circle applications.
• Respond to contact form enquiries and demo requests.
• Provide, maintain, and improve the Service.
• Communicate with you about the Service, including updates and changes.
• Ensure the security and integrity of the platform.
• Comply with legal obligations.

7. AI and Automated Processing

In accordance with the EU Artificial Intelligence Act (Regulation (EU) 2024/1689) and GDPR Article 22, we are transparent about how AI is used within our platform:

• Our AI chat agent "Biddy" processes queries to provide educational information about farm schemes and practices. Interactions with Biddy may be processed to improve the quality and accuracy of responses.
• No solely automated decisions with legal or similarly significant effects are made about you without human oversight.
• You have the right to request human review of any AI-assisted output that affects you.
• AI features are classified and managed in line with the EU AI Act risk framework.

8. Third-Party Services

We use the following third-party services to operate and improve our platform:

• EmailJS: For processing form submissions and sending email notifications. EmailJS processes your name, email, and message content.
• Google Calendar: For demo scheduling. Subject to Google's own privacy policy.
• Vercel: For website hosting. Subject to Vercel's privacy policy and data processing agreement.

We ensure that all third-party processors provide adequate data protection safeguards in compliance with GDPR Article 28. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).

9. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Application data submitted via forms is retained for the duration of the pilot programme and any subsequent engagement, unless you request earlier deletion.

10. Your Rights Under GDPR

Under the GDPR and Irish Data Protection Act 2018, you have the following rights:

• Right of Access (Article 15): Request a copy of the personal data we hold about you.
• Right to Rectification (Article 16): Request correction of inaccurate or incomplete data.
• Right to Erasure (Article 17): Request deletion of your personal data ("right to be forgotten").
• Right to Restrict Processing (Article 18): Request that we limit how we use your data.
• Right to Data Portability (Article 20): Receive your data in a structured, commonly used, machine-readable format.
• Right to Object (Article 21): Object to processing based on legitimate interests or direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at contact@farmbiddy.ai. We will respond within 30 days as required by the GDPR.

11. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, in line with GDPR Article 32. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

12. Children

Our Service is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. In accordance with the Irish Digital Age of Consent, we require users to be at least 16 years old to provide consent for data processing, and at least 18 to use the Service.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date and, where appropriate, providing notice through the Service or via email. We encourage you to review this policy periodically.

14. Supervisory Authority

If you believe that our processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the Data Protection Commission (DPC), the Irish supervisory authority:

15. Contact Us

For any questions or concerns about this Privacy Policy or our data practices, please contact us at:

contact@farmbiddy.ai