Waste Disposal Catford Privacy Policy

This Privacy Policy explains how Waste Disposal Catford collects, uses, stores and protects personal data relating to our customers and prospective customers in the Catford area. It also explains your rights under applicable data protection law, including the UK General Data Protection Regulation and the Data Protection Act 2018. This Privacy Policy applies to all Waste Disposal Catford customers and enquirers in our service area, regardless of how you contact us or engage our services.

Who We Are

Waste Disposal Catford provides waste removal and related services to residential and commercial customers in and around Catford. For the purposes of data protection law, we act as the data controller for the personal data we collect about you. This means we determine the purposes and means of processing your personal information.

Personal Data We Collect

We may collect and process the following categories of personal data about you when you contact us, request a quote, make a booking, or use our services:

Identification and contact details such as your full name, address, email address, telephone number and, where relevant, business name and role.

Service details including property type, access instructions, waste description, service history, preferred dates and times, and information necessary for safe and lawful waste collection.

Payment details including limited payment card details where required for processing a transaction, along with billing address and records of payments made. Where a third party payment processor is used, they will handle most payment card information on our behalf.

Communication records including emails, telephone call notes, text messages, contact form content, and any feedback or complaints that you submit to us.

Technical and usage data such as your IP address, device and browser type, approximate location, and how you interact with our website or online content, where this is collected through cookies or similar technologies.

How We Obtain Your Personal Data

We typically obtain your personal data directly from you when you contact us by phone, email or online form, request a quotation, make a booking, or engage with us through advertising and marketing campaigns.

We may also receive personal data from third parties where this is necessary to provide our services, for example from partner businesses referring work to us, online directories where you have submitted your details, or payment and invoicing services we use in the course of our business.

Lawful Basis For Using Your Data

We only process your personal data when we have a lawful basis to do so. Depending on the context, we may rely on the following legal grounds:

Contractual necessity: We process your personal data where this is required to enter into or perform a contract with you, such as arranging collections, issuing quotations, sending confirmations, delivering services, invoicing and managing your account.

Legitimate interests: We may process your personal data where this is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This includes managing and improving our services, handling customer queries, monitoring service quality, and pursuing or defending legal claims.

Legal obligations: We process certain personal data to comply with legal requirements, including waste transfer documentation, record keeping, tax and accounting obligations, and responding to lawful requests from regulatory or enforcement authorities.

Consent: In some limited circumstances, we rely on your consent, for example for certain marketing communications. Where we rely on consent, you may withdraw it at any time.

How We Use Your Personal Data

We may use your personal data for the following purposes:

To provide quotations, confirm bookings, deliver waste disposal and related services, and manage ongoing customer relationships.

To communicate with you about your enquiries, bookings, service updates, changes to terms or this Privacy Policy, and important safety or service information.

To process payments, issue invoices, manage refunds and handle billing queries.

To comply with waste management regulations and demonstrate proper handling, transfer and disposal where record keeping is required.

To improve and develop our services, including analysing service usage, gathering feedback and monitoring customer satisfaction.

To send you relevant information about our services and offers where we are permitted to do so in accordance with data protection and electronic marketing laws, and where you have not opted out.

To protect our business, investigate potential fraud or misuse of our services, and to establish, exercise or defend legal claims.

Data Sharing And Processors

We do not sell your personal data. We may share your information with trusted third parties where necessary for the purposes described in this Privacy Policy. These third parties act as data processors or independent controllers depending on their role.

Processors that may handle your data on our behalf include payment processing providers, IT and hosting service providers, customer relationship management platforms, and administrative support services. These processors are only permitted to process your data according to our instructions and must implement appropriate security measures.

We may also share personal data with independent service partners or subcontractors where required to deliver the waste disposal service to you, with professional advisers such as accountants or legal advisers, and with regulators, law enforcement or public authorities where we are legally required or permitted to do so.

Data Retention

We keep your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting and reporting requirements.

Service and contract records, including invoices, waste transfer notes and booking information, are generally retained for a minimum period required by law, which may be up to several years after the end of the relevant tax or regulatory period.

Contact details used for service communication and legitimate marketing may be retained while you remain a customer or actively engaged with us, and for a reasonable period afterwards, unless you request deletion or object to further processing where applicable.

When no longer required, personal data is securely deleted, anonymised or otherwise disposed of so that you can no longer be identified.

International Transfers

Where any of our service providers or systems involve the transfer of personal data outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect your information, such as using countries with adequate data protection laws or implementing standard contractual clauses approved by relevant authorities.

How We Protect Your Data

We take appropriate technical and organisational measures to protect your personal data from accidental loss, unauthorised access, alteration or disclosure. These measures include access controls, secure storage, staff training, and regular review of our security practices. While no system can be guaranteed as completely secure, we work to ensure a level of security appropriate to the risks associated with the processing of your data.

Your Data Protection Rights

Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions:

The right of access: You can request a copy of the personal data we hold about you and certain information about how we process it.

The right to rectification: You can ask us to correct inaccurate or incomplete personal data.

The right to erasure: You can request that we delete your personal data where there is no good reason for us to continue processing it, for example where it is no longer needed for the purpose collected and we are not required to keep it.

The right to restrict processing: You can ask us to suspend processing of your personal data in certain situations, for example while we verify its accuracy or our legitimate interests.

The right to object: You can object to processing based on our legitimate interests and you have an absolute right to object to direct marketing at any time.

The right to data portability: You can request that certain personal data is provided to you or another organisation in a structured, commonly used and machine readable format.

The right to withdraw consent: Where we rely on consent to process your data, you can withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

Exercising Your Rights And Contacting Us

If you wish to exercise any of your data protection rights or have questions about this Privacy Policy or how we handle your personal data, you can contact us using the details published on our usual customer communication channels. We may need to confirm your identity before acting on your request. We aim to respond to all legitimate requests within one month, or within the period allowed by law where an extension is necessary.

If you are unhappy with how we have handled your personal data, you also have the right to lodge a complaint with the UK data protection supervisory authority. We would, however, appreciate the chance to address your concerns before you approach any authority, so please contact us in the first instance where possible.

Changes To This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or data protection practices. Any significant changes will be made available through our normal customer communication channels. Your continued use of our services after an updated version is issued will be treated as your acknowledgment of the changes, to the extent permitted by law.