Rubbish Collection Waterloo Privacy Policy

This Privacy Policy explains how Rubbish Collection Waterloo collects, uses, stores and protects personal data relating to our customers in our service area. It is written to comply with the UK General Data Protection Regulation and the Data Protection Act 2018. This policy applies to all customers who use our rubbish collection, waste removal, and related services within the Waterloo area, whether you contact us by phone, email, online forms, or in person.

By using our services, you acknowledge that you have read and understood this Privacy Policy. We may update this policy from time to time and will always process your personal data in line with the version in force at the time of processing.

Data Controller and Contact Details

The data controller for the personal data described in this Privacy Policy is Rubbish Collection Waterloo. We are responsible for determining how and why your personal data is processed. If you have any questions about this Privacy Policy or about how we handle your personal data, you can contact us using the details provided on our usual communication channels.

Personal Data We Collect

We only collect personal data that we need in order to deliver our services, manage our business, and meet legal and regulatory obligations. The personal data we may collect includes the following categories.

Identification and contact data such as your name, address, telephone number, email address, and, where applicable, details of the property where waste is to be collected.

Service and contract data such as records of the services you request, quotations, bookings, service dates and times, instructions you provide, and any related correspondence.

Payment and billing data such as billing address, payment amount, payment method details to the extent necessary to process transactions, and records of invoices and receipts. Card payment details are handled securely and, where possible, are processed directly by our payment service providers.

Communication data including emails, messages, call notes and any feedback or complaints you send to us.

Technical and usage data such as information about how you interact with our website or digital services, including your IP address, browser type, and device information. This may be collected using cookies or similar technologies, where permitted by law.

Purposes and Lawful Bases for Processing

We process your personal data only where we have a lawful basis under data protection law. For each main purpose, we rely on one or more of the following lawful bases.

To provide and manage our services. We use your identification, contact and service data to set up and manage bookings, collect rubbish, send confirmations, and handle support queries. Our lawful basis is performance of a contract or taking steps at your request before entering into a contract.

To handle payments and accounting. We use your payment and billing data to process payments, issue invoices, and maintain our financial records. Our lawful bases are performance of a contract and compliance with legal obligations relating to tax and accounting.

To communicate with you. We use your contact and communication data to respond to your queries, send service-related messages such as reminders or changes to services, and manage complaints. Our lawful bases are performance of a contract and our legitimate interests in managing customer relationships and ensuring service quality.

To improve and protect our business. We may use service, communication and technical data to monitor service performance, troubleshoot issues, improve our processes, and keep our systems secure. Our lawful basis is our legitimate interests in running and protecting our business and services.

Marketing communications. If we send you marketing communications about our services, we will do so on the basis of your consent where required by law, or our legitimate interests where consent is not required and you have not opted out. You can opt out of marketing at any time by following the instructions in the message or by contacting us.

Data Retention

We keep personal data only for as long as is necessary for the purposes for which it was collected, or for as long as we are required to keep it by law. We take into account the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, and whether we can achieve those purposes through other means.

Customer and service records are generally kept for a period consistent with limitation periods for legal claims so that we can address any queries, complaints or disputes that may arise after the service has been provided.

Financial and transaction data is retained for a period required by tax and accounting laws.

Marketing data relating to your communication preferences is retained until you opt out or withdraw your consent, or until we determine that it is no longer necessary for the relevant purpose.

When personal data is no longer required, we will securely delete, anonymise or destroy it in accordance with our data retention procedures.

Data Processors and Sharing of Personal Data

We may share your personal data with trusted third parties who act as data processors and who provide services that help us operate our business. These processors only process your personal data on our documented instructions and are subject to contractual obligations to protect your data.

Typical categories of data processors include payment service providers who process card and online payments, IT and hosting providers who store or support our systems and data, and customer management or communication service providers that help us organise bookings and send service notifications.

We may also share personal data with professional advisers, such as accountants or legal advisers, where reasonably necessary for the establishment, exercise or defence of legal claims or for compliance with legal obligations.

In limited circumstances we may be required to share your personal data with public authorities or law enforcement agencies where we are legally obliged to do so or where such disclosure is necessary to protect our rights or the safety of others.

We do not sell your personal data to third parties. If we ever intend to share your data for a new purpose or with a new category of recipient, we will inform you in advance where required by law.

International Transfers

Where any of our data processors or service providers transfer personal data outside the United Kingdom, we will ensure that appropriate safeguards are in place. These may include using countries that have been recognised as providing an adequate level of data protection or using standard contractual clauses approved under data protection law, together with additional protections where required.

Security of Your Personal Data

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure. These measures include access controls, staff training, secure storage and transmission of data, and regular review of our security practices. While no system can be guaranteed as completely secure, we take reasonable steps to minimise the risks to your personal data.

Your Data Protection Rights

As a customer of Rubbish Collection Waterloo within our service area, you have a number of rights in relation to your personal data under data protection law. These rights may be subject to certain conditions and legal exceptions.

You have the right of access, which allows you to request confirmation of whether we process your personal data and to obtain a copy of that data, along with certain information about how it is processed.

You have the right to rectification, which allows you to ask us to correct or complete any inaccurate or incomplete personal data we hold about you.

You have the right to erasure, sometimes known as the right to be forgotten, which allows you to request the deletion of your personal data where there is no good reason for us to continue processing it, subject to legal and contractual obligations.

You have the right to restriction of processing in certain circumstances, for example while we verify the accuracy of data or consider an objection to processing.

You have the right to object to processing that is based on our legitimate interests, including profiling, and to object at any time to the processing of your personal data for direct marketing.

You have the right to data portability in respect of certain personal data that you have provided to us and that we process by automated means with your consent or for the performance of a contract. This allows you to request that such data be transferred to you or to another controller in a commonly used, machine-readable format.

Where we rely on your consent as the lawful basis for processing your personal data, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

If you wish to exercise any of your rights, please contact us using our published contact details. We will respond to your request in accordance with applicable data protection law and may ask you to provide information to verify your identity before we act on your request.

Complaints

If you have concerns about how we handle your personal data, we encourage you to contact us first so that we can try to resolve the issue. You also have the right to lodge a complaint with the relevant supervisory authority for data protection in the United Kingdom if you believe that your data protection rights have been infringed.

This Privacy Policy applies to all customers of Rubbish Collection Waterloo within our service area and is intended to provide clear and transparent information about how we protect your personal data and respect your privacy.