Privacy Policy
Last updated: 3 April 2026

Privacy Policy

Waste2Wealth Africa (Pty) Ltd is committed to protecting your personal information in accordance with the Protection of Personal Information Act (POPIA) and international best practices.

Effective date: 3 April 2026

Table of Contents

  1. 1. Introduction
  2. 2. Information We Collect
  3. 3. How We Use Your Information
  4. 4. Data Sharing and Disclosure
  5. 5. Data Security
  6. 6. Your Rights Under POPIA
  7. 7. Data Retention
  8. 8. Cookies and Tracking
  9. 9. Changes to This Policy
  10. 10. Contact Us

1. Introduction

Waste2Wealth Africa (Pty) Ltd ("we", "us", "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Waste2Wealth Africa platform, website, and related services (collectively, the "Platform").

By accessing or using the Platform, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, please discontinue use of the Platform immediately.

This policy is governed by the Protection of Personal Information Act 4 of 2013 (POPIA) of South Africa and applicable international data protection standards.

2. Information We Collect

We collect the following categories of personal and business information:

2.1 Information You Provide Directly

  • Full name, email address, phone number, and job title
  • Company name, business type, and number of operational sites
  • Demo booking requests and inquiry messages
  • Account registration details and authentication credentials
  • Waste collection records, site data, and operational inputs
  • Carbon project data, evidence files, and MRV submissions

2.2 Information Collected Automatically

  • IP address, browser type, device identifiers, and operating system
  • Usage data including pages visited, features used, and session duration
  • Log data and error reports for platform stability and security
  • Geolocation data (only when explicitly enabled for site mapping features)

2.3 Information from Third Parties

  • Authentication data from OAuth providers (Waste2Wealth Africa Auth)
  • Integration data from connected third-party services (where authorised)

3. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide, operate, and maintain the Waste2Wealth Africa Platform
  • To process demo requests and respond to inquiries
  • To manage user accounts, authentication, and access control
  • To generate waste intelligence reports, carbon impact analytics, and MRV certificates
  • To send transactional notifications, platform updates, and support communications
  • To improve platform functionality, performance, and user experience
  • To detect, prevent, and investigate fraud, security incidents, and unauthorised access
  • To comply with legal obligations under POPIA and applicable South African law
  • To enforce our Terms of Service and protect our intellectual property

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

4. Data Sharing and Disclosure

We may share your information in the following limited circumstances:

Service Providers: We engage trusted third-party service providers (cloud hosting, analytics, authentication) who process data on our behalf under strict confidentiality agreements.
Consortium Partners: Where you participate in a waste management consortium on the Platform, aggregated and anonymised operational data may be shared with consortium members as configured by your administrator.
Legal Requirements: We may disclose information when required by law, court order, or government authority, or to protect the rights, property, or safety of Waste2Wealth Africa, our users, or the public.
Business Transfers: In the event of a merger, acquisition, or sale of assets, personal information may be transferred as part of that transaction, subject to equivalent privacy protections.

5. Data Security

We implement industry-standard technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

  • Encrypted data transmission using TLS/HTTPS across all platform surfaces
  • Role-based access control (RBAC) with least-privilege principles
  • Comprehensive audit logging of all sensitive data access and modifications
  • Secure cloud infrastructure with regular security assessments
  • JWT-based session management with secure cookie handling
  • Regular security reviews and vulnerability assessments

While we take all reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but commit to notifying affected users promptly in the event of a data breach as required by POPIA.

6. Your Rights Under POPIA

As a data subject under the Protection of Personal Information Act (POPIA), you have the right to:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete personal information
  • Deletion: Request deletion of your personal information, subject to legal retention requirements
  • Objection: Object to the processing of your personal information for specific purposes
  • Restriction: Request restriction of processing in certain circumstances
  • Portability: Receive your personal information in a structured, machine-readable format
  • Complaint: Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days as required by POPIA.

7. Data Retention

We retain personal information for as long as necessary to fulfil the purposes outlined in this policy, unless a longer retention period is required by law. Specifically:

  • Account data is retained for the duration of your account and 3 years thereafter
  • Waste collection and MRV records are retained for 7 years for regulatory compliance
  • Audit logs are retained for 5 years
  • Demo request and inquiry data is retained for 2 years
  • Financial and subscription records are retained for 7 years

Upon account deletion, personal information is anonymised or deleted within 90 days, except where retention is required by law.

8. Cookies and Tracking

We use cookies and similar tracking technologies to operate the Platform and improve your experience. These include:

  • Essential cookies: Required for authentication, session management, and core functionality
  • Analytics cookies: Used to understand how users interact with the Platform (anonymised)
  • Preference cookies: Used to remember your settings and preferences

You can control cookie settings through your browser. Disabling essential cookies may affect Platform functionality.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify registered users of material changes via email or in-platform notification at least 14 days before the changes take effect. Continued use of the Platform after the effective date constitutes acceptance of the updated policy.

10. Contact Us

For privacy-related queries, data subject requests, or to report a concern, please contact our Information Officer:

Waste2Wealth Africa (Pty) Ltd

Crown Mines, Johannesburg, Gauteng, South Africa

[email protected]

+27 21 753 5860 · +27 79 521 3156

You may also lodge a complaint with the Information Regulator of South Africa.

© Waste2Wealth Africa. All rights reserved. · Trademark, copyright, and proprietary IP protected. · Powered by FutureMindsAI.

Terms of ServiceContact Us