Privacy Policy

1. Who we are

Bolar Technologies ("Bolar", "we", "us") builds the payment and verification infrastructure that recycling operations run on. We are based in Lagos, Nigeria.

Company registration number: add RC number
Registered address: add registered address

For the purposes of the Nigeria Data Protection Act 2023 ("NDPA"), Bolar is a data controller for the information described in this policy, except where we act as a data processor on behalf of a recycling operator. Section 2 of our Data Protection page explains which role applies when.

2. What this policy covers

This policy covers personal information we handle when you:

• bring materials to a collection point that runs on Bolar, and get paid through us;
• run or work at a recycling operation that uses Bolar;
• buy verified carbon credits generated through the platform;
• use this website, request a demo, join the collection-point list, subscribe to our updates, or contact us.

It does not cover websites or services operated by other people, including any third-party site we link to.

3. Information we collect

If you are a collector

• Who you are: name, phone number, and the area or city you collect in.
• How you get paid: bank account details, mobile money wallet (OPay, PalmPay, Moniepoint) or the phone number for airtime.
• Identity verification: the information our verification partners need to confirm you are who you say you are, as required before we can move money to you.
• Your collections: material type, weight, collection point, date and time, the amount you were paid, and the totals and milestones that build up from them.
• Your account: language preference, tier status, and support messages you send us.

If you are an operator

• Business details, collection point locations, and the rates you set.
• Named accounts for you and your collection point staff.
• Wallet funding and payout activity.
• The collection and payment records generated across your operation.

If you use this website

• What you type into a form: the demo request, the collection-point list, the newsletter, and the contact form.
• Basic technical information your browser sends when it requests a page, such as IP address and browser type. Our Cookie Policy sets out exactly what this site does and does not place on your device.

We do not ask for, and do not want, information about your health, religion, political views, ethnicity, or trade union membership.

4. Why we use it, and our lawful basis

Under the NDPA we must have a lawful basis for every use of personal information. Here is ours, in full:

Where we rely on consent you can withdraw it at any time, and that does not affect anything we did lawfully beforehand.

5. Who we share it with

We do not sell personal information. We share it only where it is needed to run the service:

• Licensed payment partners and banks — to move money to the account, wallet or phone number you chose.
• Identity verification providers — to confirm identity before payouts.
• The operator you collect for — they see the collections and payments made at their own collection points.
• Infrastructure providers — hosting, storage and error monitoring, under contract and only on our instructions.
• Carbon credit buyers — who receive verified collection records as evidence behind the credits they purchase. See section 6.
• Regulators, auditors and law enforcement — where we are legally required to provide information.

6. The permanent record

Every collection processed through Bolar is written to a permanent, independently verifiable record: what was collected, how much it weighed, where, when, and what was paid. That record cannot be edited or deleted by anyone, including us. It is what makes a collector's proof of work real and an operator's carbon credits sellable.

You should understand what that means for your rights. A permanent record cannot be erased on request in the way an ordinary database entry can. We address this directly, including what we can still do for you, in Permanent records and the right to erasure on our Data Protection page. Please read it before you sign up.

7. How long we keep it

We keep personal information only as long as we have a reason to:

• Account details — while your account is active, and for a period afterwards to handle disputes.
• Payment and transaction records — for the period Nigerian financial and tax law requires.
• Identity verification records — for the period required of regulated payment activity.
• Website enquiries — for as long as needed to deal with your enquiry and a reasonable period after.
• Newsletter details — until you unsubscribe.

Exact retention periods are set out in the schedule on our Data Protection page.

8. Your rights

Under the NDPA you have the right to be informed, to get a copy of your information, to have inaccurate information corrected, to ask for erasure, to restrict or object to certain uses, to data portability, and not to be subject to a decision made solely by automated means that significantly affects you.

Exercising them is free and we will respond within one month. How to exercise each right is set out in full on our Data Protection page.

9. How we protect it

We encrypt personal information in transit and at rest, restrict access to staff who need it for their work, log administrative access, and require our suppliers to meet equivalent standards by contract.

The platform is built so that a collector still gets paid even when other parts of the system are having a bad day — and payout instructions that fail are retried automatically and refunded if they cannot complete.

No system is perfectly secure. If a breach occurs that is likely to result in risk to you, we will notify the NDPC within 72 hours and tell you directly where the risk is high.

10. Children

Bolar is not intended for children under 18. We do not knowingly create accounts for or make payments to children. If you believe a child has provided us with personal information, contact us and we will deal with it.

11. Changes to this policy

If we change this policy we will update the date at the top of the page. Where a change materially affects your rights we will tell account holders directly rather than relying on you to notice.

12. How to contact us

Questions about this policy, or about how we handle your information, go to our Data Protection Officer:

• Email: add DPO email before publishing
• Post: Bolar Technologies, add registered address, Lagos, Nigeria
• Or use the contact form and choose “Something else”.

If you are not satisfied with our response, you can complain to the Nigeria Data Protection Commission (NDPC), the authority that supervises data protection in Nigeria.