Overview
Edscon Investment LTD ("we", "us", or "our") operates the Thamani System — a digital waste management and traceability platform accessible at this website and through our mobile and web applications. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you access our services.
By using the Thamani platform in any capacity — whether as an administrator, waste collector, kitchen manager, distributor, or customer — you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use of the platform.
This policy applies to all users of the platform operating within Kenya and other African markets where Edscon Investment provides services.
Information We Collect
1.1 Account Information
When you register on the Thamani platform, we collect your full name, email address, phone number, assigned role (e.g. waste collector, kitchen manager, distributor, customer), and zone/area of operation.
1.2 Operational Data
In the course of using the platform, we collect data necessary for service delivery, including:
- Waste collection records (weight, type, collection point, date/time)
- Biodigester and kitchen operational data (input volumes, biogas output, fertilizer yield)
- Gas cylinder distribution records and delivery logs
- Customer accruals, payment records, and subscription status
- Traceability data used for carbon credit verification
1.3 Device & Usage Data
We automatically collect information about your device and usage patterns, including IP address, browser type, pages visited, time spent, and referring URLs. This helps us maintain platform integrity and improve user experience.
1.4 IoT & Sensor Data
Where IoT devices are deployed, the Thamani platform may collect real-time sensor readings such as gas flow rates, temperature, and fill levels. This data is attributed to the relevant operational unit, not to individual persons.
How We Use Your Data
We use the information we collect for the following purposes:
- Service delivery — to operate the Thamani waste collection, processing, and distribution workflows
- Account management — to create, manage, and secure your user account and role-based access
- Traceability & reporting — to generate operational reports, track waste lifecycle data, and support carbon credit verification
- Payments — to record and process accruals, subscriptions, and financial transactions
- Communication — to send operational notifications, alerts, and platform updates
- Analytics & improvement — to measure platform performance and improve our services
- Legal compliance — to fulfil obligations under Kenyan law and relevant regulations
Data Security
We implement industry-standard technical and organisational measures to protect your personal information from unauthorised access, alteration, disclosure, or destruction, including:
- Encrypted data transmission (HTTPS/TLS) across all platform endpoints
- Password hashing and secure authentication mechanisms
- Role-based access controls ensuring users only access data relevant to their assigned function
- Regular security audits of platform infrastructure
- Secure server environments for data storage
While we strive to protect your information, no method of transmission over the internet is 100% secure. We encourage users to maintain strong, unique passwords and report any suspected security incidents to info@edsconinvestment.com.
Data Retention
We retain your personal data for as long as your account is active or as needed to provide you with our services. Operational and traceability data may be retained for up to 7 years to meet carbon credit audit requirements and Kenyan financial record-keeping obligations.
Upon account deletion or at your request, we will delete or anonymise your personal data within a reasonable period, except where retention is required by law.
Your Rights
Subject to applicable Kenyan law and the Kenya Data Protection Act 2019, you have the following rights regarding your personal data:
- Right of access — Request a copy of the personal data we hold about you
- Right to rectification — Request correction of inaccurate or incomplete data
- Right to erasure — Request deletion of your personal data where permitted by law
- Right to restrict processing — Request limitation of how we use your data
- Right to data portability — Request a structured copy of your data in a common format
- Right to object — Object to processing of your data for certain purposes
To exercise any of these rights, contact us at info@edsconinvestment.com with the subject line "Data Rights Request". We will respond within 30 days.
Children's Privacy
The Thamani platform is designed for use by adults and organisations. We do not knowingly collect personal information from individuals under the age of 18. If we become aware that we have collected data from a minor without appropriate consent, we will take immediate steps to delete that information.
Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or platform capabilities. When we make significant changes, we will notify active users via email or a prominent notice on the platform. The "Last updated" date at the top of this page indicates when the policy was last revised.
We encourage you to review this policy regularly. Continued use of the platform after any changes constitutes acceptance of the updated policy.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us: