Privacy Policy
Last Updated: May 2026 — Effective Immediately
Data Controller: Continental Harvest Co. — Registered at 128 City Road, London, EC1V 2NX, United Kingdom (Company No. 15639739) and 305C St NE, Washington, DC 20002, United States (File No. 3917378, incorporated in Delaware). For privacy inquiries: privacy@continentalharvest.co.
Table of Contents
1. Scope & Application
This Privacy Policy applies to all personal data collected by Continental Harvest Co. through our website, email communications, telephone (SMS) correspondence, and any related services. This policy is governed by the UK Data Protection Act 2018, the EU General Data Protection Regulation (GDPR), and where applicable, the California Consumer Privacy Act (CCPA) and the Nigeria Data Protection Regulation (NDPR).
By using our website or services, you acknowledge that you have read and understood this policy. If you do not agree, you must discontinue use immediately.
2. Categories of Personal Data Collected
2.1 Information You Provide Voluntarily
- Identity Data: Full name, company name, job title.
- Contact Data: Email address, telephone number, postal address.
- Transaction Data: Details of inquiries, quotations, contracts, and payment instructions.
- Communications: All correspondence including emails, SMS messages, and contact form submissions.
2.2 Information Collected Automatically
- Technical Data: IP address, browser type and version, operating system, device type, screen resolution.
- Usage Data: Pages visited, time spent on pages, referring website URLs, exit pages.
- Server Logs: Timestamp, request method, status codes, data transferred.
2.3 Data We Do NOT Collect
We do not collect sensitive personal data (race, religion, health, biometrics), credit card details (payments are processed externally), or social media profiles.
3. Purpose & Legal Basis for Processing
| Purpose | Legal Basis |
|---|---|
| Responding to inquiries and providing quotations | Consent; Pre-contractual steps |
| Negotiating and executing commodity contracts | Contractual necessity |
| Sending market updates and trade information | Legitimate interest |
| KYC compliance and sanctions screening | Legal obligation |
| Website security and fraud prevention | Legitimate interest |
| Improving website performance and user experience | Legitimate interest |
4. Cookies & Tracking Technologies
Our website uses exclusively essential cookies required for basic functionality. We do not deploy:
- Advertising or retargeting cookies
- Third-party analytics trackers (Google Analytics, Facebook Pixel, etc.)
- Social media plugins or widgets
- Cross-site tracking mechanisms
You may disable cookies via your browser settings; however, this may impair certain website functions.
5. Data Sharing & Third-Party Disclosure
We do not sell, rent, lease, or trade personal data. Data may be shared only in the following circumstances:
Data stored on secure servers. Providers bound by confidentiality and data processing agreements.
Disclosure when required by law, court order, or governmental regulation in any jurisdiction where we operate.
Lawyers, auditors, insurers under strict confidentiality obligations.
In the event of merger, acquisition, or asset sale, data may be transferred subject to this policy.
6. International Data Transfers
As a multinational entity with operations in the United Kingdom, United States, Nigeria, Brazil, and France, your personal data may be transferred across borders. We ensure that all international transfers comply with applicable data protection laws through:
- Standard Contractual Clauses (SCCs) approved by the European Commission
- UK International Data Transfer Agreement (IDTA)
- Adequacy decisions where applicable
7. Data Retention
| Data Type | Retention Period |
|---|---|
| Contact form submissions | 3 years from last correspondence |
| Trade communications & contracts | 6 years from contract completion |
| Server logs | 12 months |
| KYC documentation | 5 years after business relationship ends |
8. Security Measures
We implement the following technical and organizational measures to protect your data:
- 256-bit SSL/TLS encryption for all data in transit
- Content Security Policy (CSP) headers to prevent XSS and injection attacks
- Strict access controls with role-based permissions
- Regular security audits and vulnerability assessments
- Firewall protection and intrusion detection systems
- Secure data center facilities with physical access controls
9. Your Legal Rights
Under applicable data protection laws, you have the following rights:
Request a copy of your personal data we hold.
Correct inaccurate or incomplete data.
Request deletion under certain conditions.
Limit how we use your data in specific cases.
Receive your data in a structured format.
Object to processing based on legitimate interests.
Withdraw consent at any time where processing is consent-based.
Contact the ICO (UK) or your local supervisory authority.
To exercise any of these rights, email privacy@continentalharvest.co. We will verify your identity and respond within 30 calendar days, as required by law.
10. Children's Privacy
Our services are exclusively B2B and directed at business professionals. We do not knowingly collect or process data from individuals under 18 years of age. If we become aware that we have inadvertently collected such data, it will be promptly deleted.
11. Policy Updates
We reserve the right to modify this Privacy Policy at any time. Material changes will be communicated via a notice on our website. Continued use of our services after changes constitutes acceptance of the revised policy. We recommend reviewing this page periodically.
12. Contact & Complaints
Data Protection Officer
Continental Harvest Co.
128 City Road, London, EC1V 2NX, United Kingdom
Email: privacy@continentalharvest.co
Supervisory Authority
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, UK
www.ico.org.uk
This Privacy Policy is governed by the laws of England and Wales. Any disputes arising under this policy shall be subject to the exclusive jurisdiction of the courts of England and Wales.