Privacy and consent

Trace the produce.
Respect the person.

TRACRS is designed so credible first-mile evidence does not require turning farmers into public profiles. Privacy controls are part of the data model, not an afterthought.

Our farmer promise

Participation should increase agency—not surveillance.

01

Understand first

A plain-language notice is explained before collection, including what is required for the requested transaction and what is optional.

02

Choose by purpose

Traceability, public storytelling, program sharing and other uses are separate choices—not one blanket permission.

03

Share the minimum

A cooperative vetting a farmer receives only the consented claim snapshot, not the farmer’s private address, trades or precise coordinates.

04

Change your mind

Optional consent can be withdrawn. The system records the change and stops future optional disclosure while preserving records that must lawfully remain.

05

Correct the record

Corrections are linked and auditable. Completed evidence is not silently rewritten, and reputation ratings can be disputed and reviewed.

06

No hidden scoring

Reputation comes only from confirmed transactions, shows its evidence count and is not designed to make automatic credit or eligibility decisions.

Deliberate separation

Three data layers.
Three different audiences.

ON THE SMART TAG

Traceability pointer

Stable tag identity and a compact reference to the protected record. No phone number, price, full journey history or precise farm coordinates.

PUBLIC PASSPORT

Permissioned story

Approved origin region and product evidence. Farmer name, farm name and commercial details appear only when specifically allowed.

SECURE WORKSPACE

Protected operations

Identity, transactions, precise locations, program records and consent history remain behind organization-scoped access controls.

Compliance-supporting controls

Built for accountability.

Technology is only one part of compliance. TRACRS supplies enforceable controls and audit evidence; each deploying organization remains responsible for its lawful basis, notices, retention and legal obligations.

GDPR principles

Purpose limitation, data minimisation, accuracy, storage limitation, security, accountability and privacy by design shape the product model.

Meaningful consent

Consent is designed to be specific, informed, affirmative and as easy to withdraw as it is to give. A different lawful basis may apply where processing is necessary.

Farmer rights

Workflows support information, access, correction, deletion where applicable, restriction, portability, objection and human review.

Accountable organizations

Organizations define controller and processor roles, retention schedules, authorized users, incident procedures and cross-border transfer safeguards.

DPIA-ready records

Purpose codes, consent versions, access history, processing activities and risk decisions provide evidence for impact assessments and audits.

Local law matters

Deployments must map the operating country’s rules—including Ghana’s Data Protection Act, 2012 (Act 843)—alongside applicable GDPR obligations.

A defensible trust layer

Privacy can become a first-mile advantage.

Consent lineage, minimal disclosure, tenant isolation and explainable evidence let brands ask for credible proof without demanding unrestricted farmer data. That trust compounds across every program, transaction and product journey.

See the investment case

Primary guidance

Designed against current principles.

European Data Protection Board · GDPR principles European Data Protection Board · Lawful processing and consent European Data Protection Board · Individual rights Ghana Data Protection Act, 2012 (Act 843)

Build trust into the pilot

Evidence with boundaries.

Start with a clear purpose, a clear notice and only the data the journey needs.