Privacy policy

Who we are

Asepta Waste Services (Pty) Ltd (registration number 2026/450217/07) (“Asepta”) provides medical waste collection for homes and clinics in South Africa, from its registered office at 377 Wisteria Avenue, Faerie Glen, Pretoria East, Gauteng, 0180. For the purposes of POPIA, Asepta is the responsible party for the personal information described in this policy.

Our Information Officer is Mpho Tshepiso Sethole. For anything privacy-related, contact admin@asepta.co.za. Our manual under the Promotion of Access to Information Act is at asepta.co.za/paia.

What we collect

• Account details — your name, email address and phone number, so we can identify you and reach you about your collections.
• Collection addresses — where we pick up your containers.
• Booking and collection records — what was booked, collected, sealed, transported and destroyed, and when.
• Payment references — card payments are processed by Yoco. We keep a reference to each payment; we never store your card number.
• Driver location — for drivers only, while on an active route, so customers can see live tracking of their pickup. Location is not collected when a driver is off shift.
• Device tokens — so we can send you notifications about your pickups and certificates.

Why we collect it

• Providing the service — booking pickups, collecting your waste, issuing certificates and keeping you informed.
• Legal compliance — environmental law requires waste-tracking records to be retained for 5 years. These records show what was collected and destroyed.
• Safety — protecting our drivers, customers and the public while hazardous material is in transit.

In POPIA terms, we process personal information with your consent, because it is necessary to perform our contract with you, and where a legal obligation (waste-tracking law) requires it. We do not use your information for automated decision-making with legal effect, and we do not process children’s information — the service is for adults 18 and older.

Consent

We ask for your consent when you sign up, and we record it. You can revoke consent at any time in the app under Profile → Privacy & data. If you revoke consent we can no longer provide the service, but revoking is always available and self-service.

Your rights

Under POPIA you have the right to:

• Access and exportyour personal information — in the app under Profile → Privacy & data, you can download a copy of your data yourself.
• Correct information that is wrong or out of date.
• Delete your account — self-service, in the same place. Deletion anonymises your personal data after a 7-day grace period (in case you change your mind). Waste records we are legally required to keep are retained, but without your personal identifiers. See deleting your account.

Who we share it with

We share personal information only with service providers who help us run the service:

• Payments — Yoco (card processing; they see your card, we never do).
• Email and SMS delivery — Resend (email) and SMSPortal (SMS), so confirmations, codes and certificates reach you.
• Cloud hosting — Supabase (application database and files) and Vercel (web hosting), where the service runs.
• Maps— Google Maps renders the live-tracking map; the driver’s route position is shown on it during your pickup.

Each provider only receives what it needs to do its job. We do not sell your data, and we never will.

Where your information is stored

Our application database is hosted in the United Kingdom (London) and our web infrastructure in the EU/US, with our hosting providers. POPIA allows this cross-border storage because these providers are bound by contracts and laws that protect your information to a substantially similar standard (section 72). Your information is not transferred to anyone else outside South Africa.

Security

Your data is encrypted in transit. Access is restricted to the people and systems that need it, and our waste-tracking records are tamper-evident — changes to the record trail can be detected.

Cookies

This website sets no tracking cookies. It is a plain, informational website.

Complaints

If you are unhappy with how we handle your personal information, please contact us first at admin@asepta.co.za — we take this seriously and will respond quickly. You also have the right to lodge a complaint with the Information Regulator of South Africa: inforegulator.org.za.

Changes to this policy

If we change this policy in a way that matters, we will tell you in the app and update the effective date above. The current version always lives at this address.