Effective date: 23 September 2026. We will publish any material change to this policy on this page.
1. Introduction
Tera Farms Investment ("Tera Farms", "we", "us") respects your privacy. This policy explains what personal data we collect through this website, why we collect it, how we keep it safe and the rights you have. We process personal data in accordance with the Nigeria Data Protection Act 2023 (the "NDPA") and the guidance of the Nigeria Data Protection Commission.
For the purposes of the NDPA, Tera Farms Investment is the data controller for the personal data described in this policy.
2. Personal data we collect
Contact form. When you send an enquiry we collect your name, email address, optional telephone number, the subject and type of your enquiry, and the message you write. We also record the date and time of your submission, the browser identifier sent by your device and a one-way hashed form of your IP address, which cannot be turned back into the address itself and is used only to detect abuse.
Technical data. Our web server keeps standard access logs containing IP addresses, requested pages, timestamps and browser identifiers for security and troubleshooting.
Cookies. The website sets only the cookies that are strictly necessary for it to function. We do not use advertising, analytics or tracking cookies. Because these cookies are essential, no consent banner is required; you can block them in your browser at the cost of some features not working.
| Cookie | Purpose | Duration |
|---|---|---|
| Session cookie | Keeps you on the same session as you move between pages and, for staff, keeps you signed in to the administration area | Expires after 2 hours of inactivity, or when the browser closes |
| Security token | Protects forms against cross-site request forgery | Same as the session |
We do not knowingly collect personal data from children, and the website is not directed at them.
3. Why we use your data and our lawful basis
| Purpose | Data | Lawful basis under the NDPA |
|---|---|---|
| Responding to your enquiry and keeping a record of our correspondence | Contact form data | Your consent, given by ticking the consent box, and our legitimate interest in handling enquiries |
| Protecting the website against abuse, spam and unauthorised access | Hashed IP address, browser identifier, server logs | Our legitimate interest in security |
| Complying with legal obligations, including record-keeping and responding to lawful requests | Any of the above | Legal obligation |
We do not sell personal data. We do not use it for marketing unless you ask us to keep you informed, and you may withdraw that request at any time.
4. Who can see your data
Your enquiry is visible only to authorised Tera Farms staff whose role requires it. Access is controlled by individual accounts and permissions, and every access to or change of an enquiry is recorded in an audit log.
We may share personal data with:
- service providers that host the website, deliver email or store backups, who act on our instructions and are bound by confidentiality;
- professional advisers such as lawyers and accountants where necessary; and
- regulators, courts or law-enforcement bodies where the law requires it.
We do not transfer personal data outside Nigeria except where our hosting or email providers process it in other countries, in which case we ensure that appropriate safeguards required by the NDPA are in place.
5. How long we keep your data
| Data | Retention period |
|---|---|
| Contact form enquiries and reply notes | 24 months after the enquiry is closed, unless a longer period is required to establish, exercise or defend legal claims |
| Web server access logs | 90 days |
| Administration audit log entries that reference your enquiry | 12 months |
When data is no longer needed it is deleted or anonymised. Backups containing personal data are overwritten on a rolling schedule.
6. How we protect your data
Personal data is transmitted over encrypted connections and stored on secured servers. Uploaded documents are held outside the public area of the website and can be accessed only through permission-checked downloads. Passwords are stored using strong one-way hashing. Staff access is role-based and logged. No method of transmission or storage is completely secure, but we take reasonable technical and organisational measures appropriate to the data we hold.
7. Data breaches
If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will notify the Nigeria Data Protection Commission within the period required by the NDPA and, where the risk is high, inform you directly without undue delay.
8. Your rights
Under the NDPA you have the right to:
- access the personal data we hold about you and receive a copy;
- correct data that is inaccurate or incomplete;
- delete your data where there is no lawful reason for us to keep it;
- restrict or object to processing in certain circumstances;
- withdraw consent at any time where consent is the basis for processing, without affecting processing that took place before withdrawal;
- data portability, where processing is based on consent or contract and carried out by automated means; and
- not be subject to decisions based solely on automated processing that produce legal or similarly significant effects. We do not make such decisions.
To exercise any of these rights, contact us through the contact form and select "General information". We may need to verify your identity before acting on a request. We will respond within the time required by the NDPA.
If you are not satisfied with how we handle your data or your request, you have the right to lodge a complaint with the Nigeria Data Protection Commission.
9. Links to other websites
This policy applies only to this website. Other websites we link to have their own privacy practices, which we do not control.
10. Changes to this policy
We may update this policy to reflect changes in the law or in how we operate. The effective date at the top shows when it was last changed.
11. Contact
Data protection enquiries may be sent through the contact form. A dedicated data protection contact and postal address will be published on this website once confirmed by management.
Last updated 23 September 2026. Approved for publication 23 September 2026.