Privacy Policy
Effective Date: September 1, 2026 • Document Revision 2026.1 • RanstadPlus Compliance Desk
Data Protection & Privacy Commitment
This policy sets out the statutory rights and data processing protocols implemented by RanstadPlus Enterprise. We operate strictly under Ghana Data Protection Act 2012 (Act 843) principles and international GDPR standards. We do not sell personal records or operate invasive behavioral tracking networks.
RanstadPlus operates on privacy-by-design principles: we do not maintain persistent user account databases or track users across third-party websites. Inquiries submitted through our product catalog and custom quote builders are securely transmitted directly to our sales operations team to facilitate commercial B2B trade quotations and contract fulfillment.
1. Scope & Applicability
This Privacy Policy applies to all digital interactions across ranstadplus.com, including our commodity catalog, online quote forms, sample request dispatches, direct trade correspondence (via email, WhatsApp, and phone), and export logistics documentation.
This policy does not apply to third-party websites, external payment gateways, or independent inspection agencies linked from our services.
2. Who We Are (Data Controller)
RanstadPlus Enterprise is a licensed commercial enterprise registered under the laws of the Republic of Ghana, specializing in the ethical sourcing, quality testing, and international export of West African agricultural commodities.
For all data protection legislation, RanstadPlus Enterprise serves as the Data Controller:
Legal Entity: RanstadPlus Enterprise
Postal/Operating Address: AK-077-7058, Tafo–Kumasi, Ashanti Region, Ghana
Commercial Registration: Registrar General’s Department, Accra, Ghana
Data Protection Officer / Desk: privacy@ranstadplus.com
3. Categories of Data We Collect
We practice strict data minimization. We only collect the technical and commercial data necessary to generate accurate price quotes, prepare export customs declarations, and communicate with commercial buyers:
| Category | Data Elements | Collection Source |
|---|---|---|
| Trade & Quote Inquiries | Full name, company name, corporate email, phone, destination country, commodity requirements, volume, incoterm preference, trade notes | Directly submitted via quotation and contact forms |
| Technical & Diagnostic | Anonymized IP address, browser type, device OS, request timestamps, edge routing headers | Standard edge web server infrastructure logs |
| Consent Records | Cookie consent preferences (stored locally as cookieConsent) | Direct interaction with our cookie banner |
| Commercial Correspondence | Email history, proforma invoice acceptances, export certificate references | Direct sales correspondence and order execution |
We do not collect sensitive personal data (e.g. biometrics, political beliefs, medical information) and we do not process or store payment card numbers on our servers.
4. Purposes of Processing & Lawful Bases
Under Ghana Data Protection Act 2012 §18 and GDPR Article 6, every processing activity is justified by a valid lawful basis:
| Processing Purpose | Lawful Ground (Act 843 §18 / GDPR Art. 6) |
|---|---|
| Preparing proforma invoices, FOB/CIF pricing, and shipping schedules | Pre-contractual necessity & Contract execution |
| Customs export documentation (Phytosanitary, GSA COA, Customs clearance) | Compliance with statutory legal obligations (Ghana Export Law) |
| Aggregated anonymous site performance & visitor counting | Affirmative Consent (cookie banner opted-in) |
| Anti-spam bot rejection, honeypot validation, and network security | Legitimate Interest (protecting network integrity) |
6. Communication & Form Processing
When you submit a quote request or contact message:
- Input fields are strictly validated in your browser against Zod schemas.
- An automated honeypot check silences automated spam submissions without exposing your private details.
- The payload is encrypted in transit over TLS 1.3 to our operational email accounts.
- A unique traceable reference number (e.g.
RQP-XXXX-YYYYMMDD) is generated to track your trade file. - If API relay services experience downtime, our system offers an immediate pre-formatted mailto client fallback.
7. Data Retention Schedules
We retain commercial records strictly in accordance with statutory accounting and trade requirements:
| Record Classification | Retention Duration | Statutory & Business Purpose |
|---|---|---|
| Inquiries (No Contract Formed) | 24 Months | Facilitates harvest cycle updates, seasonal requotes, and buyer re-engagement |
| Executed Contracts & Invoices | 6 Years (72 Months) | Ghana Revenue Authority (GRA) tax audit and international customs regulations |
| Trade Correspondence | 36 Months | Quality dispute resolution and client support records |
| Technical Server Logs | 12 Months | Infrastructure diagnostics and network security analysis |
8. Your Statutory Rights
Under Ghana Data Protection Act 2012 (Act 843 §§32–38) and the GDPR, you possess the following rights:
- Right of Access: Request a copy of all personal data held regarding your business entity.
- Right to Rectification: Request prompt correction of out-of-date or incomplete information.
- Right to Erasure: Request the deletion of records where retention is no longer legally mandated.
- Right to Object / Restrict: Object to specific processing activities or withdraw consent at any time.
To exercise any statutory right, contact our Compliance Officer at privacy@ranstadplus.com. We acknowledge all requests within 48 hours and fulfill verified requests within 30 calendar days.
10. Technical & Organizational Security
We maintain industry-standard security safeguards to protect personal data from unauthorized access, loss, or alteration:
- Mandatory TLS 1.3 encryption across all public web traffic.
- Strict HTTP Content Security Policy (CSP) and security headers (HSTS, X-Frame-Options, X-Content-Type-Options).
- Client-side rate throttling and honeypot defenses to prevent automated spam and credential attacks.
- Least-privilege administrative access policies restricted to designated trade officers.
11. Children’s Privacy
Our website and trade services are designed exclusively for B2B commercial enterprises and trade professionals. We do not knowingly collect or process personal data relating to individuals under 18 years of age.
12. Automated Decisions & Profiling
We do not conduct automated decision-making or behavioral profiling that produces legal or financial consequences for buyers. All commercial pricing quotes and trade agreements are prepared and verified manually by our trade desk.
13. Policy Revisions & Notice
We review our privacy practices periodically to reflect updates in Ghanaian trade legislation, international data regulations, and operational improvements. Any material modifications will be posted directly to this page with an updated effective date.
14. Contact Information & Supervisory Authority
For inquiries or data subject requests, please contact our compliance desk:
Email: privacy@ranstadplus.com
Phone: +233 (0) 244 949 447
Physical Address: AK-077-7058, Tafo–Kumasi, Ashanti Region, Ghana
If you believe your data has been handled inconsistently with the law, you have the right to lodge a formal complaint with the statutory regulator:
Data Protection Commission (DPC), Republic of Ghana
P.O. Box CT 7195, Cantonments, Accra, Ghana
Official Website: dpc.gov.gh
Annex: Ghana Data Protection Act 2012 (Act 843) Summary
- Lawful Processing (§18): Data processing requires a clear legal basis, legitimate interest, statutory requirement, or affirmative consent.
- Data Minimization & Quality (§19–22): Information collected must be adequate, relevant, accurate, and not excessive.
- Direct Legal Recourse (§32–42): Individuals maintain direct rights to request access, correction, erasure, and notification of processing.
docs/legal/privacy-policy.md • Annual compliance review cycle • RanstadPlus Enterprise.