Privacy Policy

1. Introduction

Eco-Mali Exchange Limited ("EcoMali", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our digital waste exchange platform.

This Privacy Policy complies with the Kenya Data Protection Act (2019) and GDPR-aligned data protection standards. By using our Platform, you consent to the data practices described in this policy.

2. Information We Collect

EcoMali collects user data including:

2.1 Personal Information

• Name and Contact Information: Full name, email address, phone number, and mailing address
• Location Data: Physical address, geolocation coordinates for waste pickups, and service areas
• Account Information: Username, password (encrypted), account preferences, and user role (generator, recycler, partner)
• Organization Details: Company name, registration number, and business address (for business accounts)

2.2 Waste-Related Data

• Waste Uploads: Images, videos, and descriptions of waste materials
• Waste Details: Type, quantity (kg), quality, location, and pickup preferences
• Transaction Records: Bidding history, completed transactions, payment information, and commission records
• Geolocation Data: GPS coordinates for waste collection points and pickup locations

2.3 Usage and Technical Data

• Device Information: IP address, browser type, device type, and operating system
• Platform Analytics: Pages visited, features used, time spent on platform, and interaction patterns
• Cookies and Tracking: Session data, preferences, and authentication tokens

3. How We Use Your Information

We use collected data to:

3.1 Platform Operations

• Facilitate Waste Pickups: Connect waste generators with recyclers, manage listings, and coordinate collections
• Match Users with Recyclers: Use location, waste type, and preferences to create optimal matches
• Process Transactions: Handle payments, calculate commissions, and manage financial records
• Account Management: Create and maintain user accounts, authenticate users, and provide customer support

3.2 Analytics and Reporting

• Generate Analytics for Counties: Provide aggregated waste management data and trends to county governments
• Platform Optimization: Analyze usage patterns to improve platform functionality and user experience
• Impact Reporting: Generate reports on environmental impact, waste diversion, and circular economy metrics

3.3 Compliance and Safety

• Ensure Compliance: Verify compliance with waste management regulations and platform rules
• Safety Measures: Monitor for fraudulent activity, illegal dumping, or safety violations
• Legal Requirements: Comply with legal obligations, respond to legal requests, and protect our rights

3.4 Communication

• Send transaction notifications, bid updates, and platform alerts
• Provide customer support and respond to inquiries
• Send newsletters, updates, and marketing communications (with consent)

5. Data Sharing and Disclosure

We may share your information in the following circumstances:

5.1 With Your Consent

We share information when you explicitly consent, such as when you accept a bid or complete a transaction.

5.2 Service Providers

We may share data with trusted service providers who assist in platform operations, including:

• Payment processors
• Cloud hosting providers
• Analytics services
• Customer support platforms

All service providers are contractually obligated to protect your data and use it only for specified purposes.

5.3 Government and Regulatory Bodies

We may disclose aggregated, anonymized data to county governments and regulatory bodies (such as NEMA) for waste management planning and compliance purposes. Personal identifiers are removed from such reports.

5.4 Legal Requirements

We may disclose information if required by law, court order, or government regulation, or to protect our rights, property, or safety, or that of our users.

6. Data Security

EcoMali implements industry-standard security measures to protect your data:

• Encryption of sensitive data in transit and at rest
• Secure authentication and access controls
• Regular security audits and vulnerability assessments
• Employee training on data protection
• Compliance with ISO 27001 information security standards

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Your Rights and Choices

Under the Kenya Data Protection Act (2019) and GDPR-aligned standards, you have the following rights:

7.1 Access and Portability

• Request access to your personal data
• Request a copy of your data in a portable format

7.2 Correction and Deletion

• Request correction of inaccurate or incomplete data
• Request deletion of your account and full data removal

7.3 Objection and Restriction

• Object to processing of your data for certain purposes
• Request restriction of data processing

7.4 Withdraw Consent

• Withdraw consent for data processing where consent is the legal basis

To exercise these rights, please contact us at: privacy@ecomaliexchange.co.ke

8. Data Retention

We retain your personal data for as long as necessary to:

• Provide services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain accurate transaction records (as required by law)

When you request account deletion, we will delete or anonymize your personal data within 30 days, except where retention is required by law.

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to:

• Maintain your session and authentication
• Remember your preferences
• Analyze platform usage
• Improve user experience

You can control cookies through your browser settings. However, disabling cookies may limit platform functionality.

10. Children's Privacy

Our Platform is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

11. International Data Transfers

Your data is primarily stored and processed in Kenya. If we transfer data internationally, we ensure appropriate safeguards are in place to protect your data in accordance with applicable data protection laws.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on our Platform
• Sending an email notification to registered users
• Updating the "Last Updated" date

Your continued use of the Platform after changes constitutes acceptance of the updated Privacy Policy.

13. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us: