Waste Removal London Privacy Policy
This Privacy Policy explains how Waste Removal London collects, uses, stores and protects personal data belonging to its customers and prospective customers. It also explains your rights under the UK General Data Protection Regulation and related data protection laws. This policy applies to all Waste Removal London customers and service users within our operating area.
Who We Are
Waste Removal London provides waste collection and related services to residential and commercial customers. For the purposes of data protection law, Waste Removal London is the data controller in respect of the personal data we collect and process about you.
Personal Data We Collect
We collect and process personal data that you provide to us directly, that arises from our services to you, or that we obtain from third parties in the course of operating our business. The types of data we may collect include the following categories.
Identification and contact details, such as your name, address, email address, telephone number and business contact details where relevant.
Service and booking information, such as collection address, access instructions, dates and times of collections, type and volume of waste, photographs of waste for quotation or compliance purposes, vehicle tracking information related to your service and notes relating to your booking.
Payment and billing information, such as partial card details processed through our payment provider, billing address, invoices, records of payments, and information relating to payment disputes or refunds. We do not store full card details.
Communication records, such as emails, messages, telephone call notes, complaint records, enquiries, feedback and any other correspondence you have with us.
Technical and usage data, such as your IP address, device information, approximate location data derived from your device or browser, and information about how you use our website and online booking tools.
Marketing preferences, including your choices about receiving marketing communications from us and records of consent or objection.
How We Use Your Personal Data
We use your personal data for the following purposes.
To provide waste removal services, including processing bookings, confirming service details, carrying out collections, issuing invoices, and handling payments.
To manage our relationship with you, including responding to enquiries, providing customer support, handling complaints and service issues, and notifying you of changes to our services or policies.
To comply with legal and regulatory obligations, including waste transfer documentation, duty of care requirements, accounting, taxation and responding to requests from competent authorities.
To improve and develop our services, including monitoring service performance, training staff, analysing trends and carrying out internal reporting and forecasting.
To send you marketing communications about our services and related offers, where permitted by law and in line with your communication preferences.
To protect our business, including preventing fraud, enforcing our contractual terms, and defending legal claims.
Lawful Basis for Processing
We process your personal data only where we have a lawful basis to do so under data protection law. Depending on the context, our lawful bases include the following.
Contract. We process your data when it is necessary to enter into or perform a contract with you, for example to manage your bookings, deliver waste removal services and process payments.
Legal obligation. We process data to comply with legal and regulatory requirements, such as maintaining waste transfer notes, tax records and financial accounts.
Legitimate interests. We process data for our legitimate business interests, provided your interests and fundamental rights do not override these. This includes improving our services, preventing fraud, managing our operations, maintaining accurate records and sending marketing communications to existing customers within the bounds of applicable law.
Consent. In some cases we rely on your consent, for example for certain types of marketing communications where consent is required. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to meet our legal, accounting and reporting obligations.
Service and contract records, including booking details, invoices and waste documentation, are typically kept for the duration of your relationship with us and for a period afterwards in line with statutory limitation periods and financial record keeping requirements.
Payment and billing information is retained for as long as necessary to complete the transaction, handle chargebacks or disputes, and comply with tax and accounting rules.
Communication records are kept for a period that allows us to manage enquiries, complaints and service history, and then either securely deleted or anonymised.
Marketing data, such as your contact details and preference information, is kept until you opt out of marketing or object to such processing, or until we determine that the information is no longer accurate or relevant.
When personal data is no longer required, we will securely delete it or anonymise it so that it can no longer be associated with you.
Data Sharing and Processors
We may share your personal data with third parties where this is necessary for the purposes set out in this Privacy Policy, where required by law, or where we have another lawful basis for doing so.
We use carefully selected third party service providers as data processors who process personal data on our behalf. These may include payment processors, IT and cloud hosting providers, customer relationship management systems, communication and messaging platforms, route planning and vehicle tracking providers, and professional advisers such as accountants or legal advisers.
All processors are required to handle your data securely, use it only in accordance with our instructions, and maintain appropriate technical and organisational measures to protect it.
We may also share personal data with other third parties in specific circumstances, for example with regulators, law enforcement, or public authorities where disclosure is required by law, or with our insurers or legal representatives in connection with claims or disputes.
We do not sell your personal data to third parties.
International Data Transfers
Where we use service providers located outside the United Kingdom or the European Economic Area, your personal data may be transferred to countries that do not have the same level of data protection laws. In such cases we will ensure that appropriate safeguards are in place, such as standard contractual clauses or equivalent lawful transfer mechanisms, so that your data remains adequately protected.
Your Data Protection Rights
Under data protection law you have a number of rights in relation to the personal data we hold about you. These rights apply subject to certain conditions and exemptions.
Right of access. You can request confirmation of whether we process your personal data and obtain a copy of the data we hold about you.
Right to rectification. You can ask us to correct inaccurate or incomplete personal data.
Right to erasure. You can request that we delete your personal data where there is no good reason for us continuing to process it, for example where it is no longer needed for the original purpose and we have no legal obligation to retain it.
Right to restriction. You can ask us to restrict the processing of your data in certain circumstances, for example while we verify its accuracy or assess an objection you have raised.
Right to object. You can object to our processing of your personal data where we rely on legitimate interests as our lawful basis. You also have an absolute right to object at any time to the use of your personal data for direct marketing.
Right to data portability. In some cases you can request that we provide your personal data to you, or to a third party you have chosen, in a structured, commonly used and machine readable format.
Right to withdraw consent. Where we rely on your consent to process personal data, you may withdraw that consent at any time.
If you wish to exercise any of these rights, please contact us using the details provided on our website or your service documentation. We may need to verify your identity before responding to your request.
Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or damage. Measures may include access controls, encryption, secure storage, staff training and regular reviews of our security practices. While we take reasonable steps to safeguard your data, no system can be guaranteed as completely secure.
Marketing Communications
We may use your contact details to send you information about our services, offers and updates that we think may be of interest to you. You can opt out of receiving marketing communications at any time by following the instructions in our messages or by contacting us directly. Even if you opt out of marketing, we may still send you service or administrative messages relating to your bookings or our contractual relationship with you.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services or legal obligations. Any changes will take effect when the updated policy is published. We encourage you to review this policy periodically to stay informed about how we handle your personal data.
Contact and Complaints
If you have any questions about this Privacy Policy or how we process your personal data, or if you wish to exercise your data protection rights, please contact us using the contact details provided on our website or your service documentation.
You also have the right to lodge a complaint with the UK Information Commissioners Office or your local supervisory authority if you believe that your data protection rights have been infringed. We would, however, appreciate the opportunity to address your concerns before you approach a supervisory authority, so please contact us in the first instance where possible.
