Last updated: 24 August 2026

Privacy Policy

This Privacy Policy explains how Ecoplastile Limited (registration number 80020002388682), of Namanve Industrial Park, Plot 3237 Sonde Road, Kampala, Uganda ("WastePays", "we", "us") collects, uses, shares and protects personal data when you use the WastePays platform, including sign-in with Google.

1. Who this applies to

This policy covers clients — individual households and corporate offices/businesses — as well as collection agents and administrators who register for or use WastePays, whether via email/phone registration or Google Sign-In.

2. Information we collect

Depending on how you use WastePays, we may collect:

Identity and contact data — name, email address, phone number, physical address, gender, country, and profile photo.
Google account data — when you sign in with Google, we receive your Google account ID, name, email address, verified-email status and, where applicable, Workspace domain, so we can match or create your WastePays account.
Agent/business onboarding data — for collection agents: operating area, collection areas, business registration details, nature of business, recycling volumes, pricing, worker counts and demographics, and related operational information you submit during onboarding.
Corporate/business client data — for corporate offices and businesses that register as clients: company name, business registration details, collection-site address(es), and the name and contact details of authorised representatives.
Transaction and wallet data — deliveries and offtakes of accepted materials (electronics/e-waste, plastics, paper & cardboard, metals, used cooking oil, home appliances & scrap, and expired plastic cards), redemptions, loan requests and repayments, wallet balances, points, and payout/top-up records processed through our payment partners.
Location data — precise GPS coordinates you submit when requesting a pickup or offtake, and approximate location derived from your IP address.
Device and usage data — device push-notification token, app usage and login activity, and technical data such as IP address.

Expired plastic cards. Where you hand over expired bank, ID or similar cards for recycling, we collect the physical card only for material-recycling purposes. We do not read, extract or store any data encoded on a card's chip or magnetic stripe. You remain responsible for deactivating any such card with its issuer and removing or destroying any sensitive data on it before handing it over.

3. How we use your information

To create and authenticate your account, including via Google Sign-In.
To operate the material collection, wallet, points and loan features of WastePays.
To process payouts and top-ups through our payment partners.
To arrange collection, processing and, where applicable, resale of collected materials, including using location data to coordinate pickups and offtakes.
To communicate with you about your account, transactions and service updates.
To meet our legal, regulatory, tax and fraud-prevention obligations.
To improve and secure the platform.

We share personal data with our payment and financial infrastructure partners — which may change from time to time — strictly to process wallet transactions and payouts, with Google for authentication, with regulators and law enforcement where legally required, and with service providers who support our operations under confidentiality obligations. We also share limited transaction data (such as material type, quantity and collection site) with our downstream processing partners — including recycling factories, refurbishment and scrap partners, and biofuel/biodiesel processors — as needed to fulfil collection and processing logistics. We do not sell personal data.

5. Data retention

We keep personal data only for as long as we need it for the purpose it was collected for. In practice, this means:

Identity, KYC and transaction data (wallet, deliveries, offtakes, redemptions, loans and repayments) — for as long as your account is active, and for 10 years after your account closes or your last transaction, whichever is later.
Business/agent onboarding data — for as long as your account is active, and for 7 years afterwards to meet accounting and dispute-resolution obligations.
Device, push-notification and usage data — for as long as your account is active, and deleted within 90 days of account closure.

Where we no longer need personal data for any of the above, we delete or anonymise it, unless we are required by law to keep it longer.

6. Your rights

Subject to applicable law — including Uganda's Data Protection and Privacy Act, 2019 — you may have rights to access, correct, delete, or restrict use of your personal data, and to withdraw consent. To exercise these rights, contact us using the details in Section 9.

7. Data security

We apply administrative, technical and physical safeguards designed to protect your personal data. No system is completely secure, and we cannot guarantee absolute security of information transmitted to or stored on our platform.

8. Children

WastePays is not directed at children and is not intended for use by anyone under 18.

9. Contact us

For privacy questions or to exercise your data rights, contact us at info@ecoplastile.com or +256 393 248 288, or write to us at Namanve Industrial Park, Plot 3237 Sonde Road, Kampala, Uganda.

10. Changes to this policy

We may update this policy from time to time. We will post the updated version here with a new "Last updated" date, and where changes are material we will provide additional notice.

See also our Terms of Use, FAQ, Account Deletion, and Data Deletion pages.