1. Scope & agreement
This Privacy Policy explains how 035 F Arkoh Waste Management ("we", "us", "our") collects and handles personal information when you visit our website, register as a customer, use our waste collection services, or otherwise interact with us. By creating an account or using our services, you agree to the practices described here.
2. Who we are
035 F Arkoh Waste Management is a Ghanaian waste management company providing scheduled residential and commercial waste collection, recycling, and related services. We act as a data controller for personal information we collect directly from customers and visitors.
3. Information we collect
We only collect what we need to provide reliable service, bill you correctly, and keep your account secure.
3.1 Information you provide
- Account details — full name, email address, phone number, and a password (stored hashed; we never see your password in plain text).
- Service details — your residential or business address, GPS coordinates of the pickup point, chosen plan (Basic / Standard / Premium), bin type, collection day, and any emergency contact you provide.
- Profile image — optional, if you upload one.
- Communications — complaints, support messages, and feedback you send us.
3.2 Information generated as you use our service
- Collection records — scheduled pickup dates, status (picked / missed / rescheduled), driver notes, photo evidence captured by our drivers at pickup, and time-stamps.
- Billing records — invoices, payment status, paid amounts, and payment references.
- Notifications — SMS messages we have sent or attempted to send to you.
- Activity logs — sign-in events, IP address, and basic device/browser information, used for account security and abuse prevention.
3.3 Information from third parties
- Paystack — when you pay an invoice, Paystack handles the card or mobile-money transaction and shares the outcome (success/fail, masked reference) with us. We do not see or store your full card number, CVV, or mobile-money PIN.
- Cloudinary — we use Cloudinary to host profile and pickup-evidence images.
4. How we use information
We use your information to:
- Set up your account, assign you a driver, and schedule collections in your area;
- Send SMS notifications about upcoming pickups, completed pickups, missed pickups, password resets, payment receipts, and overdue invoices;
- Generate invoices and process payments through Paystack;
- Operate the driver and admin portals — for example, showing your address on a route map and surfacing your account to the admin team for support;
- Investigate complaints and improve service quality;
- Detect and prevent fraud, abuse, and security incidents;
- Comply with applicable laws and respond to lawful requests from authorities.
5. Legal basis
We process personal information on the following bases:
- Contract — to deliver the service you signed up for and to bill you for it.
- Legitimate interests — to keep accounts secure, prevent fraud, and improve our service, provided these interests don't override your rights.
- Consent — for optional features (e.g. marketing SMS, if and when offered). You can withdraw consent at any time.
- Legal obligation — to meet tax, accounting, and regulatory requirements in Ghana.
6. Sharing & disclosure
We do not sell your personal information. We share it only as needed to run the service:
- With our drivers — name, phone, address, GPS coordinates, and pickup status of the customers on their assigned route, so they can complete pickups.
- With Paystack — payment-relevant identifiers (email, amount, reference, customer name) needed to process the transaction.
- With Twilio / mNotify — your phone number and the message body for SMS delivery.
- With Cloudinary — image files you or our drivers upload.
- With MongoDB Atlas — the cloud database that hosts our service data.
- With authorities — when required by Ghanaian law or by a valid legal order.
- In a corporate event — if we restructure, merge, or are acquired, customer data may transfer as part of the assets, subject to this policy continuing to apply.
7. Payments
All online payments are processed by Paystack, a licensed payments provider. Payment instrument details (card numbers, CVVs, mobile-money PINs) are entered directly into Paystack's environment and are never sent to or stored on our servers. We retain only the transaction reference, amount, channel, and outcome for accounting and dispute purposes.
8. SMS & communications
By providing your phone number, you agree to receive service-related SMS messages, including welcome messages, pickup reminders, pickup confirmations, missed-pickup notifications, password reset codes, and payment receipts. Standard SMS rates from your network operator may apply. You may opt out of non-critical messages by contacting support; transactional messages (such as password resets) cannot be opted out of while your account is active.
9. Data retention
We keep personal information for as long as your account is active and for a reasonable period after it is closed, to:
- Comply with tax and accounting laws (typically 6 years for billing records);
- Resolve disputes and enforce our agreements;
- Maintain operational records of past pickups for quality assurance.
When data is no longer needed, we delete it or irreversibly anonymise it.
10. Security
We protect your information using industry-standard practices:
- Passwords are stored as salted hashes (bcrypt), never in plain text;
- Sessions use HTTP-only, secure cookies — your browser holds the token; our JavaScript never reads it;
- Inputs are validated and sanitised against injection and cross-site scripting;
- Webhooks from Paystack are verified via HMAC signatures using a constant-time comparison;
- Database traffic uses TLS, and the database itself is hosted on MongoDB Atlas with managed access controls.
No system is perfectly secure. If we discover a breach that affects your data, we will notify you and the appropriate authorities as required by law.
11. Your rights
You have the right to:
- Access — request a copy of the personal information we hold about you;
- Correct — update inaccurate or out-of-date information from your profile page, or by contacting us;
- Delete — close your account and request deletion of data we are not legally required to keep;
- Object / restrict — ask us to stop processing certain data for specific purposes;
- Portability — receive your data in a structured, machine-readable format where this applies.
To exercise any of these rights, contact us using the details at the bottom of this page. We may need to verify your identity before acting on a request.
12. Children
Our service is intended for adults (18+) and account holders responsible for a property. We do not knowingly collect personal information from children. If you believe a child has registered without parental consent, please contact us so we can remove the account.
13. Changes to this policy
We may update this Privacy Policy as our service evolves or as the law changes. The "Last updated" date at the top of this page shows when the policy was most recently revised. Material changes will be communicated via SMS or email to active customers.
14. Contact us
For privacy questions, data requests, or complaints about how your information is handled, contact:
- Email: support@wastemanagement.com
- Phone: 0800-WASTE (09273)
- Office: 123 Ring Road, Accra, Ghana