Privacy Policy

This Privacy Policy explains what personal information the Innovation Hub collects, why we collect it, who we share it with and the choices you have. The Hub is operated by Agri-Tech Organics (PNG) Limited (“we”, “us”). It applies to ihub.atopng.com, your member dashboard and our physical hubs. Please read it together with our Terms of Service.

At a glance

We collect what we need to run your membership, your learning and hub check-ins. We never sell your personal information.
Card payments are handled by Stripe. We never see or store your full card number.
You can view and update most of your details in your dashboard, and ask us to correct or delete your data at any time.

1. Information we collect

Information you give us

Account details: first and last name, email address, mobile number, password (stored encrypted), province, home hub, what describes you (for example student or SME owner) and your learning interests.
Payment details: your chosen tier, payment method and receipts or references you give us for offline payments. Online card details go directly to Stripe.
Messages you send us, for example support emails or hub requests.

Information created when you use the Hub

Membership data: your membership number, tier, renewal dates and the QR code linked to your account.
Hub check-ins: the date, time and hub of each visit, the facilitator who scanned your card, and whether access was granted or denied (with the reason).
Learning activity: courses you enrol in, lessons completed, XP, levels and certificates.
“Notify me” requests for hubs that are opening soon.
Technical data: log-in cookies, IP address and browser type, used for security and to keep you signed in.

Information stored only on your device

Some tools (for example the Lean Business Canvas) save your work in your own browser so you don’t lose it. That information stays on your device and is not sent to us.

2. How we use your information

To create and manage your account, membership card and tier.
To check you in at hubs, apply visit limits and keep members and staff safe.
To deliver courses, track your progress, award XP and issue certificates.
To process payments and renewals, and to handle offline payment requests.
To send you service emails (welcome, upgrades, receipts, hub openings you asked about, important changes).
To recommend relevant courses based on your interests.
To understand how the Hub is used and improve it, using combined or anonymised statistics (for example the number of visits per hub, or members per province) that do not identify you.
To prevent fraud and misuse (for example forged or shared membership cards) and to meet legal obligations.

Hub facilitators and staff see your name, membership number, tier, home hub, province and visit count when they scan your card, so they can let you in and help you.
Service providers who help us run the Hub, only for that purpose: Stripe (payments), our website host and email delivery provider.
Partner organisations: if you join through a school, employer or sponsor on a Partner membership, they may receive your course progress and attendance for that program. We will tell you when this applies.
Authorities where we are required by law, or where needed to protect someone’s safety.

We may publish impact reports (for example “1,200 members trained in Morobe”) using combined statistics only.

4. How we protect it

Passwords are encrypted and the site uses HTTPS.
Membership QR codes are digitally signed, and can be reissued at any time to cancel an old code.
Only authorised staff can access member records, and only as far as their role requires.

No system is perfectly secure. If we become aware of a breach that affects you, we will let you know.

5. How long we keep it

We keep your account information while your membership is active.
If you close your account, we delete or anonymise your personal information within 90 days, except records we must keep for tax, accounting or legal reasons (such as payment records, which are kept for up to 7 years).
Hub check-in logs are kept for up to 2 years for safety and reporting, then deleted or anonymised.

6. Your choices and rights

Access and correct: update your details anytime in Dashboard → Profile, or ask us for a copy of the information we hold about you.
Delete: ask us to close your account and delete your data.
Emails: service emails are part of membership, but you can ask us not to send optional updates.
Your card: reissue your QR card from Dashboard → Membership card whenever you want.

To make a request, email admin@ihub.atopng.com. We may need to confirm your identity first, and we aim to respond within 30 days.

7. Young people

Members aged 16 and 17 need permission from a parent or guardian. We do not knowingly create accounts for children under 16. Younger participants take part through supervised Partner programs, and their information is managed with the school or organisation responsible for them. If you believe a child under 16 has registered, contact us and we will remove the account.

8. Cookies

We use essential cookies to keep you logged in and protect forms from misuse. We do not use advertising cookies. Some tools store your work in your own browser’s local storage, which you can clear at any time.

9. Where your data is stored

Our website and service providers may store data on secure servers outside Papua New Guinea (for example Stripe’s payment systems). We only use providers that protect personal information to a high standard.

10. Changes to this policy

We may update this policy as the Hub grows. We will post changes here with a new “last updated” date and tell members about significant changes.

11. Contact us

Questions, requests or concerns about your privacy? Email admin@ihub.atopng.com or speak to a facilitator at any hub.