Waste Collection Shoreditch Privacy Policy

This Privacy Policy explains how Waste Collection Shoreditch collects, uses, stores, and protects personal data relating to our customers and prospective customers in the Shoreditch area. It applies to all services we provide to individuals and organisations located in Shoreditch who use or enquire about our waste collection services.

We are committed to complying with the UK General Data Protection Regulation, the EU General Data Protection Regulation where applicable, and all relevant UK data protection laws. This Privacy Policy is intended to give you clear and transparent information about your personal data and your privacy rights.

Data Controller Details

The data controller responsible for your personal data is Waste Collection Shoreditch. We determine the purposes and means of processing your personal data when you use our services, contact us with an enquiry, or otherwise interact with us as a customer or potential customer.

If you have questions about this Privacy Policy or our data protection practices, you can contact us using the contact details provided on our main customer communications and service documentation.

Scope of this Privacy Policy

This Privacy Policy applies to all Waste Collection Shoreditch customers and service users in the Shoreditch area, including residential customers, commercial customers, and prospective customers who make enquiries. It applies whether you contact us by telephone, email, online forms, or in person, and whether the services are one-off or provided on a recurring basis.

Personal Data We Collect

We may collect and process the following categories of personal data:

Identification and contact details: This includes your name, business name where applicable, postal address, service address, email address, and telephone number.

Service information: This includes details about the type of waste collection services you request, frequency of collections, access instructions, property details relevant to service delivery, and records of services provided.

Billing and payment information: This includes invoicing details, payment status, payment method details as necessary for processing transactions, and records of payments. Where we use a payment processor, your full payment card details are usually handled directly by that processor on our behalf.

Communication records: This includes records of enquiries, complaints, feedback, and any other communications you have with us, whether by telephone, email, or other channels.

Technical and usage data: When you interact with our online services, we may collect technical data such as IP address, device and browser type, and basic analytics information about how you access and use our online content, to the extent necessary for security and service improvement.

Lawful Basis for Processing

We process your personal data only when we have a lawful basis under data protection law. Depending on the circumstances, we may rely on the following lawful bases:

Performance of a contract: We process your data to provide waste collection services you have requested, to enter into an agreement with you, and to manage our ongoing contractual relationship. This includes arranging collections, issuing invoices, and responding to operational queries.

Legal obligation: We may process your data where necessary to comply with legal obligations, such as record-keeping, tax requirements, health and safety regulations, or obligations to cooperate with competent authorities.

Legitimate interests: We may process your data where it is necessary for our legitimate business interests, and where those interests are not overridden by your rights and freedoms. These interests include managing and improving our services, handling enquiries and complaints, preventing and addressing fraud or misuse, and maintaining network and information security.

Consent: In some limited cases, we may rely on your consent, for example for certain types of direct marketing communications. Where we rely on consent, you have the right to withdraw that consent at any time.

How We Use Your Personal Data

We use your personal data for the following purposes:

To provide and manage waste collection services in Shoreditch, including scheduling collections, accessing your premises where authorised, and delivering agreed services.

To create and manage your customer account, including handling bookings, managing contact preferences, and keeping records necessary for service delivery.

To issue invoices, process payments, and manage billing queries or disputes.

To respond to your enquiries, requests for information, feedback, or complaints, and to provide customer support.

To manage our business operations, including planning routes, monitoring service levels, training staff, and improving our services.

To comply with applicable laws, regulatory requirements, and legal processes, and to protect our legal rights and the rights of others.

To send you essential service-related communications, such as changes to service schedules, terms, or this Privacy Policy. These communications are not generally subject to marketing consent, as they are necessary for the service.

Sharing Your Personal Data and Use of Processors

We do not sell your personal data. However, we may share your personal data with third parties where necessary for the purposes outlined in this Privacy Policy, subject to appropriate safeguards.

Service providers and processors: We may share your data with carefully selected third party processors who provide services on our behalf, such as payment processing, customer relationship management, IT support, cloud storage, email and communication services, and route planning software. These processors act only on our instructions and are contractually required to protect your data and use it only for the agreed purposes.

Professional advisers: We may share data with our professional advisers, such as accountants, auditors, or legal advisers, where necessary for the provision of their services and to meet our legal obligations.

Authorities and regulators: We may disclose your data when required by law or when necessary to protect our rights or the safety of our customers, staff, or others, for example to law enforcement or regulatory authorities.

In each case, we limit the data shared to what is strictly necessary for the relevant purpose and take steps to ensure that your data remains protected.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet any legal, accounting, or reporting obligations.

Service and contract records, including identification, contact details, and service information, are generally retained for the duration of your relationship with us and for a reasonable period afterward to deal with any queries, complaints, or legal issues.

Billing and transaction records are typically retained for a minimum period required by tax and financial regulations. This may be several years after the end of the financial year to which the records relate.

Communication records may be stored for a period appropriate to the nature of the communication, usually aligning with the retention period for service or billing records to which they relate.

When personal data is no longer needed, we will securely delete or anonymise it, ensuring that it can no longer be linked to you.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These measures include access controls, staff training, secure systems and storage, and regular review of our security practices.

While we take these steps to protect your data, no system can be entirely secure. You also play a role in keeping your information safe, for example by keeping any communication with us confidential where appropriate and informing us promptly if you suspect any misuse of your data in connection with our services.

Your Data Protection Rights

Under data protection law, and subject to certain conditions and exceptions, you have the following rights in relation to your personal data:

Right of access: You have the right to request confirmation that we process your personal data and to request a copy of the personal data we hold about you.

Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data we hold about you.

Right to erasure: In certain circumstances, you may have the right to request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected or where you withdraw consent and there is no other legal basis for processing.

Right to restriction of processing: You may have the right to request that we restrict the processing of your personal data in specific situations, for example while we verify its accuracy or consider an objection you have raised.

Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may have the right to request that we provide your personal data in a structured, commonly used, machine-readable format, and to transmit that data to another controller where technically feasible.

Right to object: You have the right to object, on grounds relating to your particular situation, to processing based on our legitimate interests, including profiling, and we will stop processing unless we can demonstrate compelling legitimate grounds which override your interests, rights, and freedoms. You also have the right to object at any time to direct marketing.

Right to withdraw consent: Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

If you wish to exercise any of these rights, please contact us using the details provided in our customer communications. We may need to verify your identity before processing your request.

Complaints and Contact

If you have concerns about how we handle your personal data, we encourage you to contact us first so that we can try to resolve the issue. You also have the right to lodge a complaint with the relevant data protection supervisory authority in the United Kingdom.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection practices. We will indicate the date of the latest revision and may notify you of significant changes through our usual communication channels. Your continued use of our services in Shoreditch after any changes take effect will be taken as acceptance of the updated Privacy Policy.