Privacy Policy

Last updated: 29 March 2026

1. Who We Are

Cane Planner is an agricultural operations platform operated by Tongaat Hulett Zimbabwe ("we", "us", "our") for managing sugar cane supply chain operations at our estates. This policy explains how we collect, use, and protect your personal information.

2. Information We Collect

We collect the following categories of personal information:

  • Identity Data: Name, grower code, employee number
  • Contact Data: Phone number, email address
  • Agricultural Data: Field locations, cane varieties, hectarage, delivery records, quality scores
  • Operational Data: Gate passes, weighbridge records, train run schedules, plant operations logs
  • Device Data: Device type, operating system, push notification tokens (for mobile app users)
  • Authentication Data: Login timestamps, session tokens (encrypted)

3. How We Use Your Information

Your information is used solely for legitimate business purposes:

  • Managing cane supply operations (allocations, gate passes, deliveries)
  • Scheduling harvesting, burning, and transport logistics
  • Quality monitoring and trust score calculations
  • Plant operations monitoring and reporting
  • Sending operational notifications (SMS, WhatsApp, push, email)
  • Generating regulatory and operational reports

4. Data Sharing

We do not sell your personal information. Your data may be shared with:

  • Mill operations staff: For supply chain management
  • Cell leaders and extension officers: For farmer support and coordination
  • Regulatory bodies: As required by law
  • Service providers: Twilio (SMS/WhatsApp), Firebase (push notifications), hosted on Rails Cloud infrastructure

5. Data Security

We protect your data with:

  • Encrypted data transmission (HTTPS/TLS)
  • Encrypted token storage on mobile devices
  • Bcrypt password hashing
  • Role-based access control
  • Audit logging of data access
  • Regular security reviews

6. Data Retention

Operational data is retained for the duration of the cane growing season plus 3 years for regulatory compliance. Account data is retained while your account is active. You may request deletion of your account by contacting your extension officer or mill administrator.

7. Your Rights

Under the Zimbabwe Data Protection Act 2021, you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion (subject to regulatory retention requirements)
  • Object to processing
  • Withdraw consent for optional notifications

8. Cookies

The web application uses a single essential session cookie (cane_session) for authentication. No tracking, analytics, or advertising cookies are used. This cookie is strictly necessary for the application to function and does not require consent.

9. Contact

For privacy inquiries, contact:
Data Protection Officer
Tongaat Hulett Zimbabwe
Hippo Valley Estates, Inyati Extension
P.O. Box 1, Chiredzi