Understand first
A plain-language notice is explained before collection, including what is required for the requested transaction and what is optional.
Privacy and consent
TRACRS is designed so credible first-mile evidence does not require turning farmers into public profiles. Privacy controls are part of the data model, not an afterthought.
Our farmer promise
A plain-language notice is explained before collection, including what is required for the requested transaction and what is optional.
Traceability, public storytelling, program sharing and other uses are separate choices—not one blanket permission.
A cooperative vetting a farmer receives only the consented claim snapshot, not the farmer’s private address, trades or precise coordinates.
Optional consent can be withdrawn. The system records the change and stops future optional disclosure while preserving records that must lawfully remain.
Corrections are linked and auditable. Completed evidence is not silently rewritten, and reputation ratings can be disputed and reviewed.
Reputation comes only from confirmed transactions, shows its evidence count and is not designed to make automatic credit or eligibility decisions.
Deliberate separation
Stable tag identity and a compact reference to the protected record. No phone number, price, full journey history or precise farm coordinates.
Approved origin region and product evidence. Farmer name, farm name and commercial details appear only when specifically allowed.
Identity, transactions, precise locations, program records and consent history remain behind organization-scoped access controls.
Compliance-supporting controls
Technology is only one part of compliance. TRACRS supplies enforceable controls and audit evidence; each deploying organization remains responsible for its lawful basis, notices, retention and legal obligations.
Purpose limitation, data minimisation, accuracy, storage limitation, security, accountability and privacy by design shape the product model.
Consent is designed to be specific, informed, affirmative and as easy to withdraw as it is to give. A different lawful basis may apply where processing is necessary.
Workflows support information, access, correction, deletion where applicable, restriction, portability, objection and human review.
Organizations define controller and processor roles, retention schedules, authorized users, incident procedures and cross-border transfer safeguards.
Purpose codes, consent versions, access history, processing activities and risk decisions provide evidence for impact assessments and audits.
Deployments must map the operating country’s rules—including Ghana’s Data Protection Act, 2012 (Act 843)—alongside applicable GDPR obligations.
A defensible trust layer
Consent lineage, minimal disclosure, tenant isolation and explainable evidence let brands ask for credible proof without demanding unrestricted farmer data. That trust compounds across every program, transaction and product journey.
See the investment casePrimary guidance
Build trust into the pilot
Start with a clear purpose, a clear notice and only the data the journey needs.