Privacy Policy

1. Who we are and scope of this Policy

This Privacy Policy describes how GREENHAUL SOLUTION LTD collects, uses, and protects your personal data when you use:

• Our website (https://greenhaulsolution.com/)

• Our GreenHaul mobile app.

GREENHAUL SOLUTION LTD. is the data controller for the personal data processed under this Policy.

If you have any questions, you can contact us at:
Email: latifabdulai2414@yahoo.com

2. Personal information we collect

We collect information in three main ways: information you provide, information collected automatically, and information from partners/service providers.

2.1 Information you provide directly

Depending on how you use the Service, you may give us:

• Account and contact details

  • First name, last name

  • Phone number

  • Email address

  • City/area or address (where you choose to provide it)

• Scrap submissions

  • Item name and description

  • Comments and notes

  • Photos and videos of scrap items

  • Preferred pick‑up location information

• In‑app messages and support

  • Messages you send to admins and field officers

  • Messages you send to our support channels

• Verification and security

  • Phone numbers used for OTP (one‑time password) verification

  • OTP codes (stored only temporarily until verified or expired)

• Payment and transaction details (if/when applicable)

  • Basic transaction information such as amounts and timestamps

  • We do not store full payment card numbers on our own servers; payment processors handle that information where required.

You can choose not to provide certain information, but this may limit your ability to use some features (for example, submitting scrap items or receiving OTP codes).

2.2 Information we collect automatically (“Device Information”)

When you visit our website or use the app, we automatically collect certain information, such as:

• IP address and approximate location (country/region)

• Browser type and version, operating system, device model

• Time zone, language settings

• Pages/screens viewed, click and navigation data, and referral URLs

• Cookies and similar technologies (see Section 7)

We use this information mainly to maintain security, improve performance, and understand how people use our Service. This information is not used to identify you personally unless it is combined with other information you provide.

2.3 Location data (optional)

With your permission, we may collect approximate or precise location data from your device when you use the app, for example to:

• Help field officers find pick‑up locations more accurately.

You can control location permissions in your device settings. If you disable location access, some location‑based features may not work.

2.4 Push notifications and device identifiers

To send you alerts and updates (for example, status changes on your submissions or new messages), we may collect:

• Device identifiers and push notification tokens from services like Google Firebase.

3. Why we process your data (purposes)

We process your personal data for the following purposes:

• To provide and operate the Service

  • Create and manage your account

  • Allow you to submit scrap items and manage their lifecycle (pending, collected, rejected, etc.)

  • Enable communication between you, admins, and field officers

  • Verify your phone number with OTP

• To communicate with you

  • Send OTP codes and important security notifications

  • Send status updates and service‑related notifications

  • Respond to your inquiries and support requests

• To improve and protect our Service

  • Monitor usage to understand performance and usability

  • Fix bugs, prevent fraud and abuse, and enhance security

  • Develop new features and improve existing ones

• To comply with legal obligations

  • Keep necessary records for accounting, tax, and regulatory purposes

  • Respond to lawful requests from authorities

• For marketing (where permitted)

  • With your consent (where required by law), we may send you information about new features or services. You can opt out at any time.

Our top priority is the security and confidentiality of customer data. We only collect data that is reasonably necessary for these purposes.

4. Legal basis for processing (for European users)

If you are in the European Economic Area (EEA) or the UK, we rely on the following legal bases:

• Contract – where processing is necessary to provide the Service and perform our agreement with you (e.g. to manage your account, process submissions, send OTP codes).

• Legitimate interests – such as improving the Service, preventing fraud, and ensuring security. We balance these interests against your rights and freedoms.

• Consent – for certain activities like marketing communications or optional location access, where required by law. You can withdraw consent at any time.

5. How we share your information

We may share your information with:

• Service providers (processors)
  Trusted third parties who help us operate the Service, such as:

  • Cloud hosting and database providers (e.g. Supabase / PostgreSQL)

  • Analytics and logging services

  • Push notification services (e.g. Firebase Cloud Messaging)

  • SMS providers (e.g. mNotify) for OTP and other transactional messages

  These providers may only process your data on our instructions and must protect it appropriately.

• Field officers and admins
  To coordinate pick‑ups and manage submissions, our staff and authorised field officers may see relevant data (e.g. your name, phone number, submission details and location).

• Legal and security reasons
  We may disclose your information where we believe in good faith that it is necessary to:

  • Comply with a legal obligation, court order, or government request

  • Protect the safety, rights, or property of you, us, or others

  • Investigate and prevent fraud, abuse, or security incidents

• Business transfers
  If we are involved in a merger, acquisition, or sale of all or part of our business, your information may be transferred as part of that transaction, subject to appropriate confidentiality protections.

We do not sell your personal information.

6. Data retention

We retain your personal data only for as long as reasonably necessary to:

• Provide and maintain the Service

• Comply with legal, tax, and accounting requirements

• Resolve disputes and enforce our agreements

For example:

• OTP codes are stored only temporarily and removed after verification or expiry.

• Scrap submission records and associated messages may be retained while your account remains active and for a reasonable period afterwards for legal and operational reasons.

When data is no longer required, we will delete or anonymise it.

7. Cookies and similar technologies

Our website and web app may use cookies and similar technologies to:

• Keep you signed in

• Remember your preferences

• Collect usage analytics

• Improve security and performance

You can control or delete cookies through your browser settings. However, disabling cookies may affect some features of the Service.

8. Your rights

If you are a European (EEA/UK) resident, you have the following rights regarding your personal data:

• Right to be informed – to know how your data is used.

• Right of access – to request a copy of the data we hold about you.

• Right to rectification – to ask us to correct inaccurate or incomplete data.

• Right to erasure – to request deletion of your data in certain circumstances.

• Right to restrict processing – to limit how we use your data in specific situations.

• Right to data portability – to receive your data in a structured, commonly used format.

• Right to object – to object to processing based on legitimate interests or for direct marketing.

• Rights related to automated decision‑making and profiling – where applicable.

To exercise any of these rights, or if you have questions about your data, contact us at:
Email: latifabdulai2414@yahoo.com

We may need to verify your identity before responding.

9. Links to other websites

Our website or app may contain links to third‑party websites or services that are not owned or controlled by us. We are not responsible for the privacy practices of those third parties. We encourage you to read the privacy policies of every site you visit.

10. Information security

We take reasonable administrative, technical, and physical measures to protect your personal data against:

• Unauthorized access or disclosure

• Loss, misuse, or alteration

These measures include access controls, encryption in transit, and secure storage. However, no method of transmission over the Internet or wireless network is completely secure, and we cannot guarantee absolute security.

11. Children

GreenHaul is not intended for children under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do:

• We will post the updated version on our website/app, and

• Update the “Last updated” date at the top.

Your continued use of the Service after any changes means you accept the updated Policy.

13. Contact information

If you would like to contact us to understand more about this Policy, or to exercise your rights, please use:

GREENHAUL SOLUTION LTD.
Email: latifabdulai2414@yahoo.com

14. Requesting deletion of your data

You can request deletion of your GreenHaul account and associated personal data at any time.

To do this, please contact us at latifabdulai2414@yahoo.com with the subject line “Delete my GreenHaul account” and include:

• The phone number you used to register in the app

• Your full name (optional, to help us locate your account)

Once we verify your request, we will:

• Delete or anonymise your account details, scrap submissions, and in‑app messages where possible

• Retain only the minimum information required by law or for legitimate business purposes (for example, basic records needed for fraud prevention, security, or accounting), which we will keep for no longer than necessary.

If you reinstall the app or use it again after deletion, you may need to register a new account.