Privacy Policy

1. Who is responsible

For information about visitors to this website and prospective customers, Landalog is the responsible party. For personal information inside a customer's tenant — driver profiles, client contact details, signatures, GPS coordinates and similar operational records — the waste-management operator is the responsible party and Landalog acts as operator, processing that information on the operator's instructions.

Our Information Officer can be reached at privacy@landalog.co.za.

2. What we collect

Depending on how you interact with Landalog, we process:

• Contact and account details — name, work email, phone number, role, employer;
• Operational records captured by the platform — collection details, per-container weights, photographs, electronic signatures, GPS coordinates and timestamps at custody hand-offs;
• Technical data — device type, app version, IP address, error and crash reports;
• Demo and support enquiries — the details you submit through our forms;
• Email delivery records — which transactional notifications were sent and their delivery status.

3. Why we process it

We process personal information to provide the chain-of-custody service (the core purpose: proving who handled regulated waste, where and when), to operate and secure the platform, to provide support, to send transactional notifications, to improve the service using aggregated or de-identified data, and to comply with legal obligations, including waste-record retention requirements.

GPS coordinates and signatures are captured at the moment of a custody hand-off precisely because they evidence the hand-off. They are visible to the operator's authorised staff and appear on custody records; they are not used to track individuals outside of custody events.

4. Legal grounds

We rely on: performance of a contract (providing the platform), legitimate interests (securing and improving the service), compliance with legal obligations (statutory record-keeping), and consent where required (e.g. optional communications). Where the operator is the responsible party, it must ensure a lawful ground exists for the operational records it captures — including informing its drivers and client representatives.

5. Sharing

We share personal information only with:

• the operator whose tenant the information belongs to, and the client facilities entitled to their own collection records;
• service providers (hosting, email delivery, error monitoring) bound by written agreements consistent with POPIA section 21;
• regulators or authorities where disclosure is required by law;
• a purchaser in a corporate transaction, subject to equivalent protections.

6. Cross-border transfers

Some service providers process data outside South Africa. Where they do, we ensure the recipient is subject to laws, binding corporate rules or contracts providing an adequate level of protection substantially similar to POPIA (section 72).

7. Retention

Chain-of-custody records are retained for as long as the operator's subscription continues and thereafter per the operator's instructions and statutory waste-record retention periods. Website enquiry data is kept for up to 24 months. Technical logs are kept for up to 12 months. We delete or de-identify information when no longer required.

8. Security

We apply appropriate, generally accepted security practices: encryption in transit, tenant isolation enforced at the database layer, role-based access, immutable audit logging, and access on a need-to-know basis. No system is perfectly secure; we will notify affected parties and the Information Regulator of any compromise as required by POPIA section 22.

9. Your rights

Subject to POPIA, you may request access to, correction of, or deletion of your personal information, object to processing, and complain to the Information Regulator (inforegulator.org.za). Requests go to privacy@landalog.co.za; where the operator is the responsible party we will refer your request to it and assist. Our PAIA Manual describes the formal access-request procedure.

10. Changes

We will post any changes to this policy here and, for material changes, notify account holders by email. This policy was last updated on the date shown above.