1. Who we are
ESA Organics, Inc.(“ESA Organics”, “we”, “us”, or “our”) is a Florida-based holding company and the parent operator of three sibling brands: Ag Tech Manufacturing (proprietary indoor-farming hardware), Organic Aqua Fresh, Inc. (commercial-scale aquaponic operations), and STEM Turnkey (K-12 Ag Tech curriculum and infrastructure). This Privacy Policy applies to esaorganics.com and any related sub-domains (collectively, the “Site”). Each sibling brand operates its own website with its own posted privacy policy; this policy covers only activity on the ESA Organics parent site.
2. Information we collect
We collect only what is necessary to respond to inquiries and operate the Site securely.
2.1 Information you submit
- Contact form data: name, email address, the role you self-select (Investor, Commercial Distributor, Educational Partner, Press / Media, or General Inquiry), and any free-text message you choose to include.
- Email correspondence: if you reply to a confirmation message or email us directly, we retain the message and any attachments.
2.2 Information collected automatically
- Request metadata: IP address, browser user-agent string, and approximate geolocation derived from your IP — used for spam prevention, abuse mitigation, and aggregate traffic analysis.
- Local browser storage: small key-value entries used to remember UI preferences (e.g., dismissed banners). This data never leaves your device.
3. How we use information
- Respond to investor, partnership, and general inquiries submitted through the contact form.
- Send program materials, investor decks, or follow-up correspondence you have requested.
- Maintain Site security, detect fraudulent submissions, and prevent abuse.
- Comply with legal obligations (subpoenas, tax records, regulatory requests).
We do not sell, rent, or trade your personal information. We do not share email addresses with third-party marketing networks and we do not use contact-form data to build advertising profiles.
4. Third-party service providers
We rely on a small number of trusted infrastructure vendors. Each is bound by its own privacy commitments:
- Vercel Inc. — hosts the Site, terminates TLS, and serves static assets. See vercel.com/legal/privacy-policy.
- Resend — handles transactional email delivery for contact-form notifications. See resend.com/legal/privacy-policy.
We do not authorize any provider to use your data for its own independent marketing purposes.
5. Data retention
- Contact-form submissions: retained for up to 24 months from submission, after which they are archived or deleted. If you become a partner, vendor, or investor, contractual records may be retained longer to comply with Florida record-keeping and tax-reporting requirements.
- Server access logs: retained for up to 90 days for security auditing.
6. Your rights
Depending on your jurisdiction, you may have rights regarding your personal information. We honor these rights for all visitors regardless of location.
6.1 GDPR (EEA / UK)
You have the right to: access the data we hold about you, request correction, request deletion, restrict or object to processing, request a portable copy, withdraw consent, and lodge a complaint with your local data-protection authority. Our lawful bases are legitimate interests, consent, and contract performance.
6.2 CCPA / CPRA (California)
California residents have the right to know what personal information we collect, request deletion, request correction, opt out of any “sale” or “sharing” of personal information, and not be discriminated against for exercising those rights. ESA Organics does not sell or share personal information as those terms are defined under the CCPA/CPRA.
6.3 How to exercise your rights
Email privacy@esaorganics.com with the subject line “Privacy Request.” We will respond within 30 days (45 for CCPA requests, with notice if an extension is required).
7. Children’s privacy
The Site is directed to adult decision-makers (investors, partners, vendors, press) — not to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has submitted information through the Site, email privacy@esaorganics.com and we will promptly delete it.
8. Security
We use industry-standard safeguards: TLS in transit, encrypted storage at rest with our infrastructure providers (Vercel, Resend — each maintaining SOC 2 Type II or equivalent), access controls, least-privilege access, secrets stored in encrypted environment variables and rotated on schedule. No internet system is 100% secure, but we maintain a high standard and will disclose any material breach to affected parties without undue delay as required by Florida Statutes § 501.171 and any applicable federal or state notification laws.
9. International data transfers
ESA Organics is based in the State of Florida, United States. If you access the Site from outside the U.S., your information will be transferred to and processed in the United States. By submitting information through the Site you consent to this transfer.
10. Cookies and similar technologies
The Site uses only strictly necessary first-party storage. We do not use advertising cookies, cross-site tracking pixels, or third-party fingerprinting tools. You can clear local storage at any time through your browser settings.
11. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date above. Material changes will be announced via a banner on the Site or by email to active contacts. Continued use of the Site after a change constitutes acceptance of the revised policy.
12. Governing law
This Privacy Policy is governed by the laws of the State of Florida, United States, without regard to its conflict-of-law principles. Any disputes arising out of this policy will be resolved as set forth in our Terms of Service.