Privacy Policy - Waste Removals Services

This Privacy Policy explains how Waste Removals Services collects, uses, stores, shares, and protects personal data when providing services to customers in the area. It applies to all Waste Removals Services customers in area and is designed to meet the requirements of the UK GDPR and the Data Protection Act 2018. By using our services, you acknowledge that we process personal data as described below.

1. Who We Are

Waste Removals Services is a provider of waste collection, removal, disposal, and related service coordination. In the context of data protection law, we are the data controller for the personal data we collect and use for our own business purposes. This means we decide why and how your personal data is processed.

2. Personal Data We Collect

We only collect personal data that is relevant and necessary for delivering our services, managing our business, and meeting legal obligations. The information we collect may include:

Identity details such as name or business name
Contact details such as phone number, email address, and service address
Service information including booking requests, site access details, collection instructions, and waste type information
Billing and payment data such as invoice records and transaction details
Communication records including emails, messages, notes from service interactions, and complaints
Technical data such as device or usage information when you interact with our digital systems
Proof and compliance records such as photographs, signatures, or records needed to demonstrate lawful waste handling

We do not intentionally collect special category data unless it is unavoidable and relevant, such as where it is contained in a communication you send to us and we are required to process it for a legitimate reason. We ask customers to avoid sharing unnecessary sensitive information.

3. How We Use Personal Data

We process personal data for the following purposes:

To provide and manage waste removal services
To confirm bookings, schedule collections, and coordinate site access
To issue invoices, process payments, and maintain financial records
To communicate with customers about service updates, changes, or issues
To handle complaints, disputes, or service enquiries
To comply with waste management, tax, accounting, and other legal requirements
To protect our business, staff, customers, and property from fraud, misuse, or unlawful activity
To improve our services, systems, operations, and customer experience

We will only use personal data in ways that are compatible with the purposes for which it was collected, unless we are required or permitted by law to use it otherwise.

4. Lawful Basis for Processing

Under GDPR, we must have a lawful basis to process personal data. We rely on one or more of the following lawful bases:

Contract

We process personal data when it is necessary to perform a contract with you or to take steps at your request before entering into a contract. This includes managing bookings, carrying out collections, issuing invoices, and delivering the waste removal service.

Legal Obligation

We process personal data where required to comply with legal obligations, including accounting duties, tax records, waste transfer documentation, environmental compliance, and record-keeping requirements.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include customer administration, service improvement, fraud prevention, internal reporting, security monitoring, and protecting our business operations.

Consent

In limited situations, we may rely on your consent, for example where consent is required for a specific type of communication or optional processing. Where we rely on consent, you may withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

5. Sharing Personal Data and Processors

We may share personal data with trusted third parties where necessary to operate our business and provide services. These parties may act as processors or, in some cases, independent controllers. We ensure that any processor handling personal data on our behalf is subject to appropriate contractual safeguards and processes data only on our instructions.

Typical processors and recipients may include:

IT and hosting providers who support our systems, storage, and communications
Payment service providers who assist with transaction processing
Accounting and bookkeeping providers who help manage financial records and compliance
Customer management and scheduling software providers
Professional advisers such as lawyers, insurers, or auditors where necessary
Regulators, law enforcement, or public authorities where we are legally required to disclose information
Waste disposal and logistics partners where disclosure is necessary for service delivery

We do not sell your personal data. If we transfer data outside the UK or European Economic Area, we will use appropriate safeguards to protect it, such as standard contractual clauses or other legally recognised transfer mechanisms.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, and reporting requirements. Retention periods may vary depending on the type of data and the reason for processing.

As general guidance:

Service records are retained for as long as needed to manage the customer relationship and resolve disputes
Invoice and payment records are retained for the period required by tax and accounting law
Compliance records may be retained for a longer period where required by environmental or waste management obligations
Communication records are retained for a reasonable period after service completion unless needed longer for legal claims or support

When personal data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you.

7. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, misuse, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and procedures for responding to incidents. While no system is completely secure, we work to reduce risk and handle information responsibly.

8. Your Rights Under GDPR

You have a number of rights in relation to your personal data. These rights are not absolute and may be subject to legal conditions or exemptions. Your rights include:

Right of access – to request a copy of the personal data we hold about you
Right to rectification – to ask us to correct inaccurate or incomplete data
Right to erasure – to ask us to delete your data in certain circumstances
Right to restrict processing – to ask us to limit how we use your data in certain cases
Right to object – to object to processing based on legitimate interests or direct marketing
Right to data portability – to receive certain information in a structured, commonly used format
Right to withdraw consent – where processing is based on consent

You also have the right to lodge a complaint with the Information Commissioner’s Office or your local supervisory authority if you believe your data protection rights have been infringed.

9. Children’s Data

Our services are not directed to children, and we do not knowingly collect personal data from children except where it is incidentally provided by an adult customer in the course of using our services. If we become aware that we have collected data from a child without a lawful basis, we will take appropriate steps to delete it.

10. Automated Decision-Making

We do not use fully automated decision-making that produces legal or similarly significant effects on customers. If this position changes, we will update this Privacy Policy and provide any required information about the logic involved and your rights.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. The most current version will apply to all Waste Removals Services customers in area. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

12. Summary of Key Commitments

We only collect data needed for service delivery, legal compliance, and legitimate business operations. We use lawful bases under GDPR, including contract, legal obligation, legitimate interests, and consent where appropriate. We retain data only as long as necessary, share it only with trusted processors and required authorities, and respect your legal rights regarding your personal data.

This policy is intended to ensure transparency, accountability, and fair handling of personal data for all Waste Removals Services customers in area.