Legal

Privacy Policy

GlobalVersion 2026-10-01.2 (Global)

This policy applies to visitors to poultrydesk.com and to people using an Organization billed outside Kenya. If your Organization is billed in Kenya, the Kenya privacy policy applies.

Who we are

PoultryDesk is operated by POULTRYDESK SYSTEMS LIMITED, a company incorporated and registered in Kenya. For any privacy question or request, email privacy@poultrydesk.com.

We are the controller of the personal data in your account, billing and support records, and of data about visitors to our public pages. For the farm records your Organization captures, your Organization is the controller and we are its processor: we handle those records only to run the service for you. Data processing terms are available on request.

What we collect

Account details: name, email address, role, and the Organization and subdomain you belong to.
Farm records your Organization captures: lots, daily rounds, mortality, feed, eggs, health treatments, inventory, sales and expenses.
Technical data needed to run the service: device and session identifiers, sync state, and security and audit logs.
Billing records for paid plans: plan, invoices and payment status. We do not store full card numbers.

How we use it

We use your data to run the service you signed up for: to store and sync your records, control access and plan features, produce your reports, keep an audit trail for traceability, bill your subscription, and contact you about your account. We do not sell personal data.

Where your data is stored

The service is hosted with Amazon Web Services in the European Union (Ireland). Your data is therefore stored outside Kenya.

Who processes data for us

We use service providers for hosting (Amazon Web Services), email and SMS delivery, payments (Paddle, our merchant of record) and, only if you allow it, public-site analytics (Google Analytics). Each receives only what it needs to do its job. The full list is available on request.

Your rights

If you are in the European Economic Area or the United Kingdom, you have the right to access your personal data, to have it corrected, to have it deleted, to restrict or object to our processing, to receive a portable copy, and to complain to your data protection supervisory authority. We rely on these lawful bases:

Contract: running the service you signed up for.
Legitimate interests: keeping the service secure, preventing fraud, and sending service email.
Consent: public-site analytics.
Legal obligation: keeping tax and accounting records.

Wherever you live, you can ask us for access to, correction of, or deletion of your personal data. Email privacy@poultrydesk.com; we aim to acknowledge within 7 days and respond within one month. For farm records your Organization captured, contact your Organization first; we help it respond.

International transfers

We are based in Kenya and the service is hosted in the European Union. Where personal data from the European Economic Area or the United Kingdom is handled outside it, we rely on our providers' standard contractual clauses.

Optional public-site analytics

When enabled, Google Analytics 4 helps us understand visits to our public pages, documentation, blog and sign-up page on poultrydesk.com and poultrydesk.co.ke. It is off until you choose Allow cookies. Rejecting it does not affect access to the site or your account, and no analytics request is sent to Google before you allow it.

Analytics receives a public page category, which site you are on (Kenya or Global), which of our listed buttons and steps you use (for example a plan button, the monthly or yearly switch, starting the sign-up form, changing to a country in the other market, sending a demo request, or the site region suggestion), basic browser and device information, and a random identifier that lasts only while the analytics frame remains open. Google receives your IP address when your browser connects to its service and may process information outside your country. We do not send form entries, names, email addresses, Organization identifiers, query strings, URL fragments or referring URLs. Documentation and blog addresses are grouped into categories rather than sent individually. Analytics is not loaded on sign-in, activation, account handoff, tenant, custom-domain, staging or admin pages.

The analytics script runs on a separate analytics-only subdomain, in a frame isolated from the site's pages, forms, cookies and browser storage. A fresh random identifier is used on each page load rather than a persistent profile. Advertising consent and Google signals are disabled. For analytics we save only your allow or reject choice in your browser's local storage for the current public site, until you change it or clear that storage. Essential account and security cookies are separate from this choice.

Use Cookie settings in the site footer to change your choice at any time. Rejecting stops future collection; it does not delete data Google has already received. If analytics is disabled for the site, these controls are not shown. See Google's privacy policy.

Site region suggestion

On the home, pricing, sign-up and demo request pages we may suggest the other PoultryDesk site (Kenya or Global). Your browser decides this from your device's time zone and language settings, which are not sent to us or to anyone else. If you dismiss the suggestion or switch sites, we remember that on your device for 90 days. It is not sent to us.

Tenant isolation

Each Organization's farm records live in their own database schema. There is no shared table through which one Organization can read another's records. Access within an Organization is governed by roles and permissions that the Organization controls.

Retention

We keep farm records for as long as your Organization is active, so your traceability and audit history stay intact. When an Organization is closed, its records enter a defined retention window and are then deleted or anonymised. Some records, such as audit and food-safety trails and tax records, may be kept longer where the law requires it.