Privacy Policy

1. Who we are

Agri-Tech Organics (PNG) Limited (“Agri-Tech”, “we”, “us” or “our”) is a technology company based in Port Moresby, Papua New Guinea, providing software development, blockchain and DLT, AI and LLM solutions, project management, web hosting and domains, and business development services. We are responsible for the personal information described in this policy.

We handle personal information in accordance with the laws of Papua New Guinea, including the right to privacy recognised in the Constitution, and we follow internationally recognised privacy principles. Where other privacy laws apply to our dealings with you, we will also comply with them.

2. Information we collect

2.1 Information you give us

• Contact and enquiry details — your name, email, phone number, organisation, the service you are interested in and your message when you use our contact form, book a consultation or email or call us.
• Client and billing details — names and contact details of client representatives, billing addresses, TIN and payment records.
• Newsletter subscriptions — your email address and subscription preferences.
• Account and profile details — for portal users, your name, job title, department, phone numbers and login details.
• Recruitment — CVs and related information if you apply to work with us.

2.2 Information collected automatically

When you visit our website we, and our hosting provider, automatically record technical information such as your IP address, browser and device type, pages visited, referring website and the date and time of your visit. This is collected through server logs and cookies (see section 4).

2.3 Information from other sources

We may receive information about you from your employer or organisation when they engage us, from business partners and referrers, and from publicly available sources such as company registries and professional networking sites.

3. How we use your information

Purpose	Examples
Responding to you	Answering enquiries, preparing proposals and scheduling consultations.
Delivering our services	Managing projects, providing hosting, domains, email and support, and communicating about your engagement.
Billing and administration	Issuing invoices, processing payments, keeping accounting and tax records.
Security and operations	Protecting our website, portals and systems, preventing fraud and misuse, and troubleshooting.
Improving our website and services	Understanding how visitors use the website so we can make it better.
Marketing (with your consent)	Sending newsletters and updates about our services. You can unsubscribe at any time.
Legal obligations	Complying with laws, regulatory requirements, court orders and lawful requests from authorities.

We use your information only for the purpose for which it was collected, a directly related purpose you would reasonably expect, or another purpose you have agreed to or the law permits.

4. Cookies and similar technologies

Cookies are small text files stored on your device. We use:

• Essential cookies — required for the website and our portals to work, for example to keep you signed in and to protect forms against misuse.
• Preference cookies — remember choices such as settings you have selected.
• Analytics cookies — where used, help us understand how visitors use the website in aggregate.

You can block or delete cookies through your browser settings. If you block essential cookies, parts of the website and the portals may not work.

5. When we share information

We do not sell or rent personal information. We share it only as follows:

• Service providers who act on our behalf under confidentiality obligations — such as website and email hosting, cloud storage (including Google Drive for Agri-Drive), domain registries, payment processors, accounting software and IT support.
• Subcontractors and technology partners working with us on your project, only to the extent they need it.
• Professional advisers such as lawyers, accountants and auditors.
• Authorities where required by law, court order or a lawful request, or to protect the rights, property or safety of Agri-Tech, our clients or others.
• Business transfers to a buyer or successor if all or part of our business is reorganised, merged or sold, subject to this policy.

6. International transfers

Some of our service providers, including cloud hosting, email and Google services, store or process data on servers outside Papua New Guinea. When information is transferred overseas, we choose reputable providers and take reasonable steps to ensure it is protected to a standard comparable to this policy.

7. How we protect your information

We use administrative, technical and physical safeguards appropriate to the sensitivity of the information, including:

• encryption in transit (HTTPS/TLS) across our website, portals and mail services;
• encryption of stored credentials, such as mailbox passwords and cloud access tokens;
• role-based access controls, so staff see only the information their role requires;
• sign-in throttling, activity logging and regular software updates; and
• confidentiality obligations for our staff and contractors.

No method of transmission or storage is completely secure. If we become aware of a data breach that is likely to cause you serious harm, we will notify you and take prompt steps to contain it.

8. How long we keep information

Type of information	Typical retention period
Enquiries that do not lead to an engagement	Up to 2 years after our last contact
Client, project and contract records	For the engagement and up to 7 years afterwards
Invoices, payments and tax records	At least 7 years, as required for tax and accounting purposes
Newsletter subscriptions	Until you unsubscribe
Website server logs	Up to 12 months
Portal accounts and stored files	While the account is active, then deleted or returned within 90 days of closure unless the law requires otherwise

When information is no longer needed, we delete it securely or anonymise it.

9. Your rights and choices

Subject to applicable law, you may ask us to:

• access the personal information we hold about you;
• correct information that is inaccurate, out of date or incomplete;
• delete information we no longer need or have no lawful reason to keep;
• restrict or object to certain uses, including direct marketing; and
• withdraw consent where we rely on it, without affecting earlier processing.

To make a request, email support@atopng.com. We may need to verify your identity, and we aim to respond within 30 days. We do not charge for reasonable requests.

10. Data we process for our clients

When we build, host or support systems for clients, we may process personal information on their behalf — for example, records in a client’s database, website or mailbox. In those cases our client controls that information and its own privacy policy applies. We process it only on the client’s instructions and under the confidentiality and security commitments in our Terms & Conditions. If you have a question about such information, please contact the relevant organisation first.

11. Staff Portal, WebMail and Agri-Drive

Authorised users of our Staff Portal, ERP, WebMail and Agri-Drive should note that:

• we keep your profile details (name, title, department and phone numbers) to operate the portal, the team directory and your email signature;
• mailbox passwords used for WebMail and Agri-Drive sign-in are verified with our mail server and stored only in encrypted form;
• files uploaded to Agri-Drive are stored in the company’s Google Drive and are subject to Google’s security and privacy terms;
• sign-ins and key actions are logged for security and audit purposes; and
• portal systems and company email are business resources and may be accessed by authorised administrators where necessary for security, legal or operational reasons.

12. Children

Our website and services are intended for businesses and adults. We do not knowingly collect personal information from children under 18. If you believe a child has provided us with information, please contact us and we will delete it.

13. Third-party websites

Our website may contain links to other websites and social media pages, such as LinkedIn and Facebook. We are not responsible for their privacy practices, and we encourage you to read their privacy policies.

14. Changes to this policy

We may update this Privacy Policy to reflect changes in our services or the law. The current version will always be published on this page with its “Last updated” date. Where changes are significant, we will take reasonable steps to let you know.

15. Contact us and complaints

If you have a question, request or complaint about how we handle personal information, please contact our privacy contact. We will acknowledge your complaint within 5 Business Days and aim to resolve it within 30 days. If you are not satisfied with our response, you may seek further advice or raise the matter with the relevant authority in Papua New Guinea.