National Agricultural Research and Development Institute (NARDI)
1. Introduction
The National Agricultural Research and Development Institute (NARDI) is committed to protecting the privacy and personal data of all individuals who access and interact with this official website: https://www.nardi.org.bw
This Privacy Notice explains how NARDI collects, uses, stores, shares, and protects personal data in accordance with the Botswana Data Protection Act, 2024 and international best practices.
2. Data Controller
NARDI is the Data Controller responsible for personal data processed through this website.
Contact Details:
National Agricultural Research and Development Institute (NARDI)
NARDI Botswana
K33, Sebele Content Farm, Gaborone, Botswana
Postal Address:
P/Bag 33, Sebele
Gaborone
Tel: +2673117667
Email: dpo@nardi.org.bw
3. Categories of Personal Data Collected
3.1 Information You Provide Voluntarily
– Full name
– Email address
– Location
– Telephone number and contact details
– Information submitted via contact forms, enquiries, event registrations, or feedback
3.2 Information Collected Automatically
– IP address
– Browser type and version
– Device type and operating system
– Website usage data (pages visited, time spent, navigation patterns)
– Cookies and similar tracking technologies
3.3 Information from Third Parties
NARDI does not collect personal data from third-party sources through this website.
4. Purpose of Processing and Lawful Basis
| Purpose | Personal Data | Lawful Basis |
| Responding to enquiries submitted via website forms | Name, email, contact details, message content | Legitimate Interest (to respond to user enquiries) |
| Providing requested services or information | Identification and contact details | Public Task (performance of NARDI’s mandate) |
| Website security and fraud prevention | IP address, device data, usage logs | Legitimate Interest (ensuring system security and integrity) |
| Website analytics and performance improvement | IP address, browsing behaviour, cookies | Legitimate Interest (to improve user experience) |
| Sending institutional communications (where applicable) | Email address, contact details | Public Task or Consent (where required) |
| Compliance with legal obligations | Any relevant personal data | Legal Obligation |
5. Cookies and Tracking Technologies
This website uses cookies and similar technologies to enhance user experience and analyse website performance.
Types of Cookies Used:
– Essential Cookies
– Analytics Cookies
Users may control or disable cookies through their browser settings.
6. Data Sharing and Recipients
NARDI does not sell or trade personal data.
Personal data may be shared with:
– Authorised IT service providers
– Government authorities where required by law
– Professional service providers
7. Cross-Border Data Transfers
In certain circumstances, NARDI may transfer personal data outside Botswana, including to third-party service providers such as website hosting, cloud storage, or backup service providers.
Where such transfers occur, NARDI ensures that appropriate safeguards are implemented in accordance with the Botswana Data Protection Act, 2024, including:
- Ensuring that the recipient country provides an adequate level of data protection; or
- Entering into legally binding agreements with recipients to ensure the protection of personal data;
- Implementing appropriate technical and organisational security measures to safeguard the data.
Where applicable, personal data may be processed in jurisdictions such as South Africa or other locations where NARDI’s service providers operate.
Individuals may request further information regarding cross-border data transfers by contacting the Data Protection Officer.
8. Data Retention
NARDI retains personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, regulatory, and operational requirements, in accordance with the Botswana Data Protection Act, 2024.
Indicative retention periods include:
- Contact form enquiries: retained for up to 12 months to allow for follow-up, service improvement, and record-keeping
- Website analytics data: retained for up to 12–24 months to support performance analysis and security monitoring
Retention periods may be extended where necessary for:
- compliance with legal or regulatory obligations
- the establishment, exercise, or defence of legal claims
- ongoing investigations or audits
At the end of the applicable retention period, personal data is securely deleted, anonymised, or irreversibly destroyed in accordance with NARDI’s records management and data protection policie
9. Data Security
NARDI implements appropriate technical and organisational measures to ensure a level of security appropriate to the risk, in accordance with the Botswana Data Protection Act, 2024 and recognised standards such as ISO/IEC 27001.
These measures include:
Technical Measures
- Secure hosting environments and infrastructure protection
- Encryption of data where appropriate (in transit and at rest)
- Access control mechanisms, including role-based access restrictions
- System monitoring, logging, and intrusion detection
- Regular vulnerability assessments and security testing
- Data backup and recovery procedures
Organisational Measures
- Information security and data protection policies
- Staff confidentiality obligations and access controls
- Regular staff awareness and training on data protection
- Controlled access to personal data on a need-to-know basis
- Vendor and third-party security assessments
Incident Management
NARDI maintains procedures to detect, report, and respond to data security incidents and personal data breaches. Where required, such incidents are reported to the relevant authorities and affected individuals in accordance with applicable law.
10. Your Rights
In accordance with the Botswana Data Protection Act, 2024, you have the following rights in relation to your personal data:
- Right of Access:
You may request confirmation of whether NARDI processes your personal data and obtain a copy of that data. - Right to Rectification:
You may request correction of inaccurate or incomplete personal data. - Right to Erasure (Deletion):
You may request deletion of your personal data where it is no longer necessary for the purpose for which it was collected, subject to legal and regulatory requirements. - Right to Restrict Processing:
You may request that NARDI limits the processing of your personal data under certain circumstances. - Right to Object:
You may object to processing based on legitimate interests, particularly where your rights and interests override those of NARDI. - Right to Withdraw Consent:
Where processing is based on your consent, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. - Right to Lodge a Complaint:
You have the right to lodge a complaint with NARDI or with the Data Protection Commissioner if you believe your personal data has been processed unlawfully.
11. How to Exercise Your Rights
You may exercise your data protection rights by submitting a request to:
Email: dpo@nardi.org.bw
To help us process your request efficiently, please include:
- Your full name and contact details
- A clear description of your request
- Any relevant information to help us identify your data
NARDI may request proof of identity before processing your request to ensure the security of personal data.
NARDI will respond to your request within the timeframes prescribed under the Botswana Data Protection Act, 2024.
Where a request is complex or involves multiple records, the response period may be extended in accordance with applicable law, and you will be informed accordingly.
12. Complaints
If you have concerns about how your personal data is handled, you are encouraged to contact NARDI in the first instance so that we can address your concerns.
Contact:
Email: dpo@nardi.org.bw
NARDI will investigate complaints and respond within a reasonable timeframe in accordance with the Botswana Data Protection Act, 2024.
If you are not satisfied with NARDI’s response, you have the right to lodge a complaint with the Information & Data Protection Commissioner.
Information & Data Protection Commission
Contact Person: Theresa Rakgati
Email: krakgati@gov.bw
Telephone: +267 395 0998 / +267 75 510 702
Physical Address: Finance House, Khama Crescent, 4th Floor, Government Enclave, Gaborone
Postal Address: P/Bag 001, Gaborone
13. Children’s Privacy
This website is not intended for the collection of personal data from children under the age of 18 without the consent of a parent or legal guardian.
NARDI does not knowingly collect personal data from children through this website. Where it becomes aware that personal data relating to a child has been collected without appropriate consent, such data will be promptly deleted or otherwise handled in accordance with applicable legal requirements.
Parents or legal guardians who believe that a child has provided personal data through this website may contact NARDI to:
- request access to the data
- request correction or deletion of the data
- withdraw consent where applicable
NARDI takes appropriate measures to protect the privacy and personal data of children in accordance with the Botswana Data Protection Act, 2024.
14. Updates
NARDI may update this Privacy Notice from time to time to reflect changes in legal, regulatory, technical, or operational requirements.
Any updates will be published on this website, and the “Last Updated” date will be revised accordingly.
Where material changes are made that significantly affect how personal data is processed, NARDI will take appropriate steps to inform users, which may include prominent notices on the website or direct communication where feasible.
Users are encouraged to review this Privacy Notice periodically to stay informed about how their personal data is handled.
Last Updated: 20/01/2026