Privacy Policy

<

About Us

GBA Solutions (formerly GBA Consulting) is a business incorporated in Ireland with company number 643759 and having a registered office at Naas, Co Kildare, Ireland ("we" / "us" / "our" / "GBA Solutions"). We develop and maintain TillageTrack on behalf of Isaac Wheelock, who has contracted our services. TillageTrack is a mobile application designed specifically for Irish tillage farmers to simplify record-keeping and ensure compliance with agricultural regulations. While GBA Solutions provides the technical development and support for the application, Isaac Wheelock is the service provider and owner of TillageTrack.

About Our Privacy Policy

We respect your right to privacy and take seriously our responsibilities in relation to the processing of personal data. We do not collect or process personal data unnecessarily. This privacy policy (the "Policy") together with our Terms of Service sets out important information about your rights in relation to the processing of your personal data, and the basis on which any personal data we collect from you, or that you provide to us, will be processed in connection with your use of the TillageTrack application ("the App") and our website ("the Site"). We do not knowingly attempt to solicit or receive information from children.

Controller

Under this Policy, and unless the circumstances otherwise require, we will be what's known under the General Data Protection Regulation (EU) 2016/679 (the "GDPR") as the "controller" of the personal data you provide to us.

The Information We Collect

We will collect and process the following data about you for the following purposes:

Information You Provide

• Account Information: When you register for TillageTrack, we collect your name, email address, and password.
• Farm Data: Information about your farm including farm name, size, location, herd numbers, IGAS numbers, and other identifiers required for agricultural compliance.
• Activity Records: Data you enter about farming activities such as ploughing, sowing, fertilizer application, spraying, and harvesting.
• Equipment Details: Information about your farm machinery and equipment.
• Field Information: Data about your fields, blocks, soil types, and crops.
• Photos and Documents: Any images or documents you upload to the App, such as soil sample reports or field conditions.

Information We Collect Automatically

• Technical Data: Information about your device, including IP address, device type, operating system, app version, and other technical identifiers.
• Usage Data: Information about how you use the App, including features accessed, time spent, and actions taken.
• Crash Reports: If the App experiences a technical issue, we may collect data about the crash to help us improve the App's stability.

How We Use Your Information

We will only use your personal information when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

• To Provide the Service: To set up and maintain your account, store your farm records, and deliver the core functionality of TillageTrack.
• For Communication: To send you important notifications about the App, including updates, changes to our terms, and security alerts.
• For Improvement: To analyze usage patterns, identify bugs, and develop new features that better meet farmers' needs.
• For Support: To respond to your questions, provide technical assistance, and resolve issues.
• For Legal Compliance: To comply with legal obligations, including responding to lawful requests from public authorities.

Our Technology Partners

TillageTrack is built using several Google Cloud Platform (GCP) and Firebase services. These services help us provide a secure, reliable application:

• Firebase Authentication: Manages secure user sign-in and account management.
• Firebase Realtime Database: Stores and synchronizes your farm data across devices.
• Firebase Storage: Securely stores photos and documents you upload.
• Firebase Hosting: Delivers our website content.
• Firebase Functions: Powers backend processes like report generation.
• Firebase Crashlytics: Helps us identify and fix app crashes to improve stability.

These services operate under Google's privacy policy and security standards. Your data is stored on Google's secure servers, primarily located in the EU and US. Google participates in and has certified its compliance with the EU-US Privacy Shield Framework.

How Long We Keep Your Information

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. This means that the period of time for which we store your personal data may depend on the type of data we hold.

To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.

If you delete your account, we will delete or anonymize your personal data, except where we need to retain certain information for legal or compliance purposes.

Disclosure of Your Information

We do not sell your personal information to third parties. We may disclose information to third parties in the following circumstances:

• Service Providers: We share data with trusted third parties who provide services on our behalf, such as Google (Firebase/GCP) for hosting and data storage.
• Business Transfers: If GBA Solutions or substantially all of its assets are acquired by a third party, personal data held by it about its customers will be one of the transferred assets.
• Legal Requirements: We may disclose your information if required to do so by law or in response to valid requests by public authorities.
• Protection of Rights: We may share information to protect our rights, property, or safety, or the rights, property, or safety of our users or others.

Security Measures

We take data security seriously and implement appropriate technical and organizational measures to protect your personal data:

• Secure Servers: Your data is stored on secure Firebase servers with physical and electronic safeguards.
• Encryption: Data is encrypted during transmission using SSL/TLS protocols.
• Access Controls: We limit access to your personal data to those employees and agents who need to know it.
• Regular Testing: We regularly test and evaluate our security measures to ensure ongoing protection.

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

Your Rights

Under the GDPR, you have several rights regarding your personal data:

• Access: You can request a copy of the personal data we hold about you.
• Rectification: You can ask us to correct inaccurate or incomplete data.
• Erasure: In certain circumstances, you can ask us to delete your personal data.
• Restriction: You can ask us to restrict the processing of your personal data.
• Data Portability: You can request the transfer of your personal data to another service.
• Objection: You can object to our processing of your personal data in certain circumstances.

To exercise any of these rights, please contact us at privacy@gbasolutions.ie. We will respond to your request within one month.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. If we make material changes, we will notify you through the App or by email.

Questions or Complaints

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: privacy@gbasolutions.ie
Website: https://gbasolutions.ie

If you are not satisfied with our response, you have the right to lodge a complaint with the Irish Data Protection Commission or another relevant data protection authority.