POPIA Privacy Policy

EcoSolve Recycling ("EcoSolve", "we", "us") is the responsible party for personal information processed through this website, WhatsApp, email, telephone and our collection, shredding, scanning, storage and recycling services.

Information Officer: Brett, EcoSolve Recycling. Telephone and WhatsApp: 063 024 0749. Email: ecosolverecycling@gmail.com.

Contact details: name, telephone number, email address, business name and collection address or suburb.

Service details: the service requested, estimated quantities, collection dates, access instructions, quotes, invoices, payment records and destruction or recycling certificates.

Communications: messages you send us by WhatsApp, email or telephone.

Website data: limited technical information such as browser type, device information and essential cookie preferences (see our Cookie Policy).

Documents and media entrusted to us for shredding, scanning or storage may contain personal information belonging to you or third parties. We handle that content as an operator on your behalf and do not read, copy or use it for any other purpose.

We process personal information only for specific, lawful purposes: to respond to enquiries and prepare quotes; to schedule and perform collections and services; to issue certificates, invoices and statements; to meet legal, tax, environmental and record-keeping obligations; to protect our business against fraud and security risks; and to improve our services.

Our lawful grounds under section 11 of POPIA include your consent, the conclusion or performance of a contract with you, compliance with an obligation imposed by law, and our or your legitimate interests.

We will only send direct marketing by electronic communication with your consent or where you are an existing customer, as required by section 69 of POPIA. Every marketing message will include a free way to opt out.

We do not sell personal information. We share it only where necessary with: service providers acting as operators (for example transport, IT, cloud, accounting and payment providers) under written confidentiality and security obligations; licensed downstream recyclers and processors, without personal details where not required; professional advisers; and regulators, law enforcement or courts where the law requires it.

Communications sent through WhatsApp or email are also processed by those platforms under their own privacy terms.

Some service providers, such as email, messaging and cloud platforms, may store information outside South Africa. We transfer personal information across borders only where section 72 of POPIA permits it, for example where the recipient is bound by laws or agreements that provide an adequate level of protection, or with your consent.

In line with section 19 of POPIA, we take appropriate, reasonable technical and organisational measures to prevent loss, damage, unauthorised destruction and unlawful access. These include access controls, secure transport and chain-of-custody procedures for documents and media, confidentiality undertakings from staff and operators, and secure destruction of records when they are no longer required.

If we have reasonable grounds to believe that your personal information has been accessed or acquired by an unauthorised person, we will notify you and the Information Regulator as soon as reasonably possible, as required by section 22 of POPIA.

We keep personal information only for as long as needed to achieve the purpose for which it was collected, or as required by law. For example, tax and accounting records are generally retained for at least five years under the Tax Administration Act and Companies Act. When retention is no longer required, records are securely destroyed or de-identified.

Under POPIA you have the right to: be told that your information is being collected; request access to the personal information we hold about you; request correction, deletion or destruction of inaccurate, irrelevant, excessive, outdated or unlawfully obtained information; object to processing on reasonable grounds, including for direct marketing; withdraw consent at any time (without affecting processing that already took place); and not be subject to decisions based solely on automated processing.

To exercise these rights, contact our Information Officer using the details above. We may need to verify your identity before acting on a request. Access requests are handled in line with PAIA.

Please contact us first so we can try to resolve your concern. You also have the right to lodge a complaint with the Information Regulator (South Africa): JD House, 27 Stiemens Street, Braamfontein, Johannesburg 2001. Complaints: POPIAComplaints@inforegulator.org.za. General enquiries: enquiries@inforegulator.org.za. Website: www.inforegulator.org.za.

Our services are aimed at businesses and adults. We do not knowingly collect personal information of children under 18 without the consent of a competent person, as required by section 35 of POPIA.

We may update this policy when our services, systems or legal obligations change. The latest version will always be published on this page with the date of the last review.