Last updated: 14 August 2026

E-Coli Waste Management Pvt. Ltd. (“E-Coli”, “we”, “us”, “our”) respects your privacy. This policy explains what personal information we collect through ecoliwaste.com (the “Site”) and our e-waste, plastic waste, and bio-medical waste pickup and EPR registration forms, how we use it, and the choices you have.

1. Information We Collect

Information you give us directly

When you request a waste pickup, register for EPR (Extended Producer Responsibility), or contact us, we collect:

• Name
• Email address
• Mobile number
• Household or corporate/organisation details, including organisation name
• Pickup location / address
• Type of waste (e-waste, plastic, or bio-medical) and EPR category (Producer, Manufacturer, Brand Owner, Importer, Recycler, etc.)
• Any remarks or additional details you choose to share

Information collected automatically

• Cookies and similar technologies (functional, preference, statistics, and marketing) as described in our Cookie Policy and managed through our consent banner
• Standard technical data such as IP address, browser type, device type, and pages visited

Information from third-party services

• Google reCAPTCHA, used to prevent spam submissions on our forms, which processes data subject to Google’s Privacy Policy
• Messages you send us via WhatsApp or social media (Facebook, Instagram)

2. How We Use Your Information

3. Cookies

Our Site uses cookies, grouped into Functional (always active), Preferences, Statistics, and Marketing categories. You can accept all cookies, reject non-essential cookies, or manage your preferences at any time using the cookie banner on the Site.

4. Sharing of Information

We do not sell your personal information. We may share it with:

• Government and regulatory bodies (e.g. GPCB, CPCB) where required for EPR, pollution control, or waste-handling compliance
• Our sister firm and authorised service partners involved in collection, transport, treatment, or recycling of waste
• Service providers who support our Site, forms, and communications (e.g. hosting, spam protection, WhatsApp Business)
• Authorities, where required by law or to protect our legal rights

5. Your Rights as a Data Principal (DPDP Act, 2023)

Under India’s Digital Personal Data Protection Act, 2023, you have the right to:

• Obtain a summary of the personal data we hold about you and the processing activities we carry out
• Request correction, completion, or updating of your personal data
• Request erasure of your personal data, where we are not required to retain it for legal, regulatory, or compliance reasons (e.g. EPR/GPCB/CPCB record-keeping)
• Withdraw consent at any time, as easily as it was given, without affecting the lawfulness of processing carried out before withdrawal
• Nominate another individual to exercise these rights on your behalf in the event of death or incapacity
• Register a complaint with our Grievance Officer, and, if unresolved, with the Data Protection Board of India

To exercise these rights, contact our Grievance Officer using the details in Section 13.

6. Grievance Officer

In accordance with the Digital Personal Data Protection Act, 2023, we have appointed a Grievance Officer to address your queries and concerns regarding the processing of your personal data.

We will endeavour to acknowledge and resolve grievances within the timelines prescribed under applicable law.

7. Cross-Border Data Transfer

Some of our third-party service providers (e.g. Google reCAPTCHA, WhatsApp Business, website hosting/analytics providers) may process or store data on servers located outside India. Where this occurs, we take reasonable steps to ensure such providers apply appropriate safeguards consistent with applicable Indian data protection law, including the Digital Personal Data Protection Act, 2023 and any rules or government notifications issued under it.

8. Data Breach Notification

In the event of a personal data breach, we will take prompt steps to contain and remedy the breach, and will notify the Data Protection Board of India and affected individuals as required under the Digital Personal Data Protection Act, 2023 and its rules.

9. Data Retention

We retain personal information for as long as needed to fulfil the purposes described above, including to meet record-keeping obligations under applicable e-waste, plastic waste, and bio-medical waste regulations, after which it is securely deleted or anonymised.

10. Data Security

We use reasonable administrative, technical, and physical safeguards to protect the information we hold. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children’s Privacy

Our Site and services are intended for businesses and adults, and are not directed at children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised “Last updated” date.

13. Contact Us