Privacy Policy

Last Updated: June 2026 — Effective Immediately

1. Scope & Application

This Privacy Policy applies to personal data collected by Continental Harvest Co. through the Infrastructure Division website (infrastructure.continentalharvest.com), our email communications, and telephone (SMS) correspondence. This policy is governed by the UK Data Protection Act 2018, the EU General Data Protection Regulation (GDPR), and where applicable, the California Consumer Privacy Act (CCPA).

By using our website or services, you acknowledge that you have read and understood this policy. If you do not agree, you must discontinue use immediately.

2. Categories of Personal Data Collected

2.1 Information You Provide Voluntarily

• Identity Data: Full name, company name, job title.
• Contact Data: Email address, telephone number.
• Project Data: Project location, surface area, timeline, and technical requirements for bio-stabilization.
• Communications: All correspondence including emails, SMS messages, and contact form submissions.

2.2 Information Collected Automatically

• Technical Data: IP address, browser type and version, operating system, device type.
• Usage Data: Pages visited, time spent on pages, referring website URLs.
• Server Logs: Timestamp, request method, status codes, data transferred.

2.3 Data We Do NOT Collect

We do not collect sensitive personal data (race, religion, health, biometrics), credit card details (payments are processed externally), or social media profiles.

3. Purpose & Legal Basis for Processing

Purpose	Legal Basis
Responding to inquiries and providing quotations	Consent; Pre-contractual steps
Negotiating and executing bio-stabilization contracts	Contractual necessity
Sending technical data sheets and mix design studies	Legitimate interest
Website security and fraud prevention	Legitimate interest
Improving website performance and user experience	Legitimate interest

4. Cookies & Tracking Technologies

Our website uses exclusively essential cookies required for basic functionality. Your privacy is fully respected. No data is shared with any third party.

You may disable cookies via your browser settings; however, this may impair certain website functions.

5. Data Sharing & Third-Party Disclosure

We do not sell, rent, lease, or trade personal data. Data may be shared only in the following circumstances:

6. Data Retention

Data Type	Retention Period
Contact form submissions	3 years from last correspondence
Trade communications & contracts	6 years from contract completion
Server logs	12 months

7. Security Measures

We implement the following technical and organizational measures to protect your data:

• 256-bit SSL/TLS encryption for all data in transit
• Content Security Policy (CSP) headers to prevent XSS and injection attacks
• Strict access controls with role-based permissions
• Regular security audits and vulnerability assessments
• Firewall protection and intrusion detection systems

8. Your Legal Rights

Under applicable data protection laws, you have the following rights:

To exercise any of these rights, email privacy@continentalharvest.co. We will verify your identity and respond within 30 calendar days, as required by law.

9. International Data Transfers

As a multinational entity with operations in the United Kingdom, United States, Nigeria, Brazil, and France, your personal data may be transferred across borders. We ensure that all international transfers comply with applicable data protection laws through Standard Contractual Clauses (SCCs) approved by the European Commission and the UK International Data Transfer Agreement (IDTA).

10. Contact & Complaints

This Privacy Policy is governed by the laws of England and Wales. Any disputes arising under this policy shall be subject to the exclusive jurisdiction of the courts of England and Wales.