Privacy Policy

Last updated: January 2025

Your Privacy Matters

At Trace Food, we're committed to protecting your privacy and being transparent about how we collect, use, and protect your personal information. This policy explains our practices in plain English.

Information We Collect

Account Information

  • Email address (for account creation and communication)
  • Company name and business details
  • Billing information (processed securely by Stripe)
  • Profile preferences and settings

Product Data

  • Product information (names, descriptions, categories)
  • Batch details (numbers, dates, quantities)
  • Facility information (names, addresses, types)
  • Uploaded images and certification documents

Usage Analytics

  • QR code scan data (timestamps, general location, device type)
  • Dashboard usage patterns
  • Feature usage statistics
  • Performance and error logs

How We Use Your Information

  • Service Delivery: To provide food traceability services and maintain your account
  • Communication: To send important updates, security alerts, and support responses
  • Improvement: To analyze usage patterns and improve our platform
  • Compliance: To meet legal requirements and industry standards
  • Security: To protect against fraud and unauthorized access

Information Sharing

We do not sell your personal data. We may share information in these limited circumstances:

  • Public QR Pages: Product and batch information you choose to make publicly traceable
  • Service Providers: Trusted partners who help us operate (hosting, payment processing, analytics)
  • Legal Requirements: When required by law or to protect rights and safety
  • Business Transfers: In case of merger or acquisition (with notice to users)

Data Security

Security Measures

  • End-to-end encryption for data transmission
  • Encrypted data storage in EU-based servers
  • Regular security audits and vulnerability assessments
  • Multi-factor authentication options
  • Limited access controls for our team

Your Rights (GDPR)

Under GDPR and UK data protection laws, you have these rights:

Access & Portability

Request a copy of your data or export it to another service

Correction

Update or correct inaccurate personal information

Deletion

Request deletion of your personal data (right to be forgotten)

Restriction

Limit how we process your data in certain circumstances

To exercise these rights, contact us at privacy@tracefood.app

Cookies & Tracking

We use cookies and similar technologies to:

  • Keep you signed in to your account
  • Remember your preferences and settings
  • Analyze website performance and usage
  • Provide customer support

You can control cookies through your browser settings. See our Cookie Policy for details.

Data Retention

  • Account Data: Retained while your account is active, plus 30 days after deletion
  • Product/Batch Data: Retained as long as needed for traceability purposes
  • QR Scan Data: Aggregated data retained for analytics; individual scans for 2 years
  • Support Data: Communication records kept for 3 years for quality and legal purposes

International Transfers

Your data is primarily stored in EU servers. If we transfer data outside the EU, we ensure adequate protection through:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions by the European Commission
  • Other appropriate safeguards as required by law

Children's Privacy

Our service is not intended for children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Changes to This Policy

We may update this privacy policy to reflect changes in our practices or legal requirements. When we make significant changes:

  • We'll notify you by email
  • We'll post a notice in your dashboard
  • We'll update the "Last updated" date at the top

Questions About Privacy?

We're here to help you understand how we protect your data.