Waste Disposal Highbury Privacy Policy

This Privacy Policy explains how Waste Disposal Highbury collects, uses, stores and shares personal data relating to our customers and prospective customers. It also explains your rights under the UK General Data Protection Regulation and the Data Protection Act 2018. This policy applies to all Waste Disposal Highbury customers and service users in our service area, whether you contact us online, by phone, in person, or through any other channel.

We are committed to handling personal data lawfully, fairly and transparently, and to putting in place appropriate safeguards to protect your information.

Who We Are

Waste Disposal Highbury is a waste management and disposal service provider operating in the Highbury area. For the purposes of data protection law, Waste Disposal Highbury is the data controller in respect of the personal data described in this Privacy Policy. This means that we decide why and how your personal data is processed.

Personal Data We Collect

We only collect personal data that we need in order to provide and manage our services, operate our business, meet our legal obligations and improve our operations. The information we collect can include the following categories:

Identity and contact details, such as your name, title, address, email address, telephone number and any additional contact person details you provide.

Service and account information, such as details of the waste collection or disposal services you request, service frequency, access instructions, property type, billing details, and any communications we have with you about your account.

Payment information, such as payment method, transaction records and billing history. We do not store full card details if you pay by card; these are processed securely by our payment processors.

Communications and correspondence, including emails, letters, text messages, phone call notes, web form submissions and any complaints, feedback or queries you submit to us.

Technical and usage data, which may include your internet protocol address, device identifiers, browser type, and basic usage data when you visit our website or interact with our online services. This is generally processed in an aggregated or pseudonymised form wherever possible.

Operational and on-site data, such as access notes, photographs related to waste collections or contamination issues where necessary for service delivery or to resolve a query or dispute.

How We Use Your Personal Data

We use your personal data for the following purposes:

To provide our waste disposal and related services to you, including setting up and managing your account, arranging collections, processing payments, issuing invoices, and communicating with you about your service.

To respond to your enquiries, requests, complaints or feedback and to provide customer support.

To manage our relationship with you, such as notifying you of service changes, appointment reminders, or important information about your account or our terms.

To manage our business operations, including record keeping, financial management, staff training, service planning, monitoring service quality and improving our services.

To comply with our legal and regulatory obligations, including record retention, tax and accounting requirements, and cooperating with law enforcement or regulatory authorities where required by law.

To protect our legal rights and interests, for example in relation to unpaid invoices, disputes about service provision, or the enforcement of our terms and conditions.

Lawful Basis For Processing

We process your personal data only when we have a lawful basis for doing so under data protection law. Depending on the specific processing activity, the lawful bases we rely on include:

Contract. We process personal data because it is necessary in order to enter into or perform a contract with you, for example to provide waste disposal services, manage your account, and take steps at your request before entering into a contract.

Legal obligation. We process certain information because we are legally required to do so, for example for tax, accounting and record-keeping purposes, and to comply with health, safety and environmental regulations.

Legitimate interests. We process certain data where it is necessary for our legitimate interests as a business, or those of a third party, and where your interests and fundamental rights do not override those interests. Examples include managing and improving our services, preventing fraud, recovering debts, handling complaints, and ensuring network and information security.

Consent. In limited cases we may rely on your consent, for example where we send certain types of optional marketing communications or where we use optional cookies or similar technologies. Where we rely on consent, you have the right to withdraw your consent at any time.

Data Sharing and Processors

We do not sell your personal data. We only share it when this is necessary for the purposes described in this Privacy Policy, when required by law, or when you have given your permission.

We may share your data with trusted third party service providers acting as data processors, who provide services to us such as payment processing, information technology support, website hosting, communications services, customer relationship management systems, document storage, and professional advisors such as accountants or lawyers. These processors are only permitted to use your data in accordance with our instructions and must implement appropriate security measures.

We may also share personal data with third parties acting as independent data controllers in specific circumstances, for example with banks and payment providers to process transactions, with law enforcement or regulatory bodies when required to do so, and with debt recovery agencies or courts in order to recover monies owed or protect our legal rights.

Where we engage processors or share data with third parties, we take steps to ensure that appropriate contractual safeguards and security measures are in place.

Data Retention

We keep personal data for no longer than is necessary for the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements.

In practice, this means that most customer account and transaction records are retained for a period consistent with tax and accounting rules, usually for up to six years after the end of the financial year in which the transaction took place or your account is closed. Operational records, service notes and correspondence may be retained for similar periods where needed to manage our relationship with you, resolve disputes or demonstrate compliance.

We may keep certain core information, such as your name, basic contact details and key transaction history for a longer period where there is a continuing need, for example to respond to future queries or claims, or as required by law. When personal data is no longer required, we will delete it securely or anonymise it so that it can no longer be linked back to an identifiable individual.

Data Security

We take the security of your personal data seriously. We use appropriate technical and organisational measures designed to protect your information from unauthorised access, accidental loss, destruction or damage. These measures include access controls, secure storage, staff training, and procedures for managing and responding to potential data incidents.

Your Data Protection Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights apply to all Waste Disposal Highbury customers and service users in our area, although they may be subject to certain legal conditions and exemptions. Your rights include:

The right of access. You can request a copy of the personal data we hold about you and information about how we process it.

The right to rectification. You can ask us to correct any inaccurate or incomplete personal data we hold about you.

The right to erasure. In certain circumstances, you can ask us to delete your personal data, for example when it is no longer needed for the purposes for which it was collected and we have no legal reason to keep it.

The right to restrict processing. You can ask us to suspend the processing of your personal data in certain situations, for example if you contest its accuracy or you have objected to our use of it.

The right to object. You can object to our processing of your personal data where we are relying on legitimate interests as the lawful basis. You also have the absolute right to object to direct marketing.

The right to data portability. Where our processing is based on consent or contract and is carried out by automated means, you can ask us to provide your personal data in a structured, commonly used and machine readable format, or to transmit it directly to another controller where technically feasible.

The right to withdraw consent. Where we rely on your consent, you may withdraw it at any time. This will not affect the lawfulness of processing based on consent before it was withdrawn.

If you wish to exercise any of these rights, you can contact us using the contact details we make available through our usual customer communication channels. We may need to verify your identity before responding to your request.

Changes To This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services or our data processing practices. When we make significant changes, we will take reasonable steps to bring these to your attention. The most current version of this Privacy Policy will always apply to the personal data we hold about you.

Contacting Us About Privacy

If you have any questions about this Privacy Policy, how we handle your personal data, or if you wish to make a complaint or exercise any of your rights, you can contact us using the details published in our customer communications and on our service materials. We will do our best to respond promptly and to resolve any concerns you may have about how we use your personal data.