Waste Collection Brompton Privacy Policy

This Privacy Policy explains how Waste Collection Brompton collects, uses, stores and protects personal data relating to customers in the Brompton area. It also describes your rights under the UK General Data Protection Regulation and the Data Protection Act 2018. This Privacy Policy applies to all Waste Collection Brompton customers in the Brompton area who use our services, contact us, or otherwise interact with us as a private or business customer.

Who we are and scope of this policy

Waste Collection Brompton provides waste collection and related services to residential and commercial customers in the Brompton area. For the purposes of data protection law, Waste Collection Brompton is the data controller in relation to the personal data described in this Privacy Policy. This means we decide how and why your personal data is processed.

This Privacy Policy covers personal data we collect from you directly, from your use of our services, from communications with us, or from third parties acting on your behalf in relation to our services.

Personal data we collect

We collect and process different types of personal data depending on how you use our services. This may include:

Identification and contact details, such as your name, address, email address, telephone number and contact preferences. Service and account information, such as service address, type of waste collection service, service frequency, bin or container identifiers, account numbers, billing details, payment history and customer service notes. Payment and transaction data, such as payment method, partial card details where applicable, bank transfer information, invoices, receipts and records of any refunds or chargebacks. Communication data, such as emails, letters, telephone call records where legally permissible, complaints, feedback, and enquiries sent to us. Technical and usage data, such as information about how you access our website or digital tools, your IP address, device identifiers, and log information generated by our systems. Operational data related to service delivery, such as records of collections, reports of missed collections, contamination notes, and photographs taken by operatives where required to evidence service issues or health and safety risks.

How we collect your data

We may collect personal data in the following ways: when you contact us by phone, email, online form or post to request a quote, set up a service, report a problem, or make a complaint. When you enter into a contract with us for waste collection or related services. When you pay for our services, including through bank transfer, card payment, or other accepted methods. When our operatives deliver services at your property or premises and record collection and operational information. When you use our website or interact with our online tools. From third parties, such as letting agents, property managers or business representatives who arrange our services on your behalf, and from payment service providers in relation to your transactions with us.

Lawful bases for processing your data

We process your personal data only where we have a lawful basis under data protection law. Depending on the context, we rely on one or more of the following lawful bases:

Contract: to take steps at your request before entering into a contract and to perform our contract with you, such as arranging collections, issuing invoices and managing your account. Legal obligation: to comply with legal and regulatory obligations, including waste management regulations, tax and accounting rules, and health and safety requirements. Legitimate interests: to pursue our legitimate business interests in a way that does not override your rights and freedoms. This includes managing and improving our services, handling enquiries and complaints, preventing fraud, ensuring the security of our systems and staff, and keeping records of service performance. Consent: where required, for example for certain types of marketing communications. Where we rely on consent, you can withdraw your consent at any time using the contact details in this policy.

How we use your personal data

We may use your personal data for the following purposes:

To provide and manage waste collection and related services you have requested, including scheduling, carrying out and recording collections. To set up and administer your customer account, including billing, payments, debt recovery and customer support. To respond to your enquiries, requests for information and complaints, and to keep records of our communications with you. To monitor service performance, investigate incidents such as missed collections or contamination, and improve our operations and customer experience. To comply with legal obligations, industry standards and requests from competent authorities where legally required. To protect our business, staff, customers and the public, including by preventing and detecting fraud or misuse of our services. To send you service messages, such as changes to collection dates, service disruptions, updates to this Privacy Policy or our terms and conditions. Where permitted, to send you information about related services that may be of interest, subject to your marketing preferences.

Data processors and sharing of your data

We may share your personal data with trusted third parties who act as data processors on our behalf. These processors only process your data in accordance with our instructions and for the purposes described in this Privacy Policy. They are required to keep your data secure and to comply with data protection law.

Common categories of processors include: IT and hosting providers who store data and provide software, communication and support tools. Payment processors and financial service providers who handle payments, refunds and transaction verifications. Customer service support providers who assist with call handling or enquiry management where applicable. Professional advisers such as accountants, auditors or legal advisers where necessary to support our business operations and comply with legal obligations.

We may also share your data with other third parties where we act as joint controllers or where there is an independent legal basis for the sharing. This may include regulators, local authorities, law enforcement or courts where required by law or where necessary to establish, exercise or defend legal claims.

We do not sell your personal data. We do not transfer your personal data outside the United Kingdom or European Economic Area unless appropriate safeguards are in place to protect your rights.

Data retention

We keep your personal data only for as long as necessary for the purposes for which it was collected and to meet legal, accounting or reporting obligations. Retention periods may vary depending on the category of data and the applicable legal requirements.

In general, we retain core customer account and billing information for a number of years after the end of your contract or last interaction with us, in line with statutory limitation periods and financial record keeping rules. Operational and service records may be kept for a shorter period where appropriate to manage service quality, handle complaints and defend potential claims. When personal data is no longer required, we will delete it or anonymise it so that it can no longer be linked to an identified or identifiable person.

Your data protection rights

As a customer of Waste Collection Brompton in the Brompton area, you have several rights under data protection law in relation to your personal data. Subject to certain conditions and exemptions, these rights include:

Right of access: you can request confirmation of whether we process your personal data and obtain a copy of that data, along with information about how we use it. Right to rectification: you can request correction of inaccurate or incomplete personal data we hold about you. Right to erasure: you can ask us to delete your personal data in certain circumstances, for example where it is no longer needed for the purposes for which it was collected or where you withdraw consent and there is no other lawful basis for processing. Right to restriction of processing: you can request that we restrict the processing of your personal data in certain circumstances, for example while we are verifying its accuracy or considering an objection you have raised. Right to data portability: in some cases, you can request that we provide your personal data in a structured, commonly used and machine readable format or transfer it to another controller where technically feasible. Right to object: you can object to our processing of your personal data where we rely on legitimate interests, including profiling based on those legitimate interests. You also have an absolute right to object to direct marketing. Rights in relation to automated decision making: where we carry out automated decision making that has legal or similarly significant effects on you, you have rights to request human intervention, to express your point of view and to contest the decision.

You can exercise your rights by contacting us using the details provided below. We may need to verify your identity before responding to your request. We will respond within the time limits set by data protection law.

Security of your personal data

We take appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. These measures include access controls, staff training, secure storage and regular review of our security practices. While we take reasonable steps to secure your data, no system is completely secure, and you should take care when sharing personal information with us, particularly by email or over unsecured networks.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or how we process personal data. When we make significant changes, we will take reasonable steps to notify you, for example by updating the date of the policy and making it available through our usual communication channels. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.

Contact and complaints

If you have any questions about this Privacy Policy, how we use your personal data or how to exercise your rights, you can contact us using our usual customer service contact details. If you are not satisfied with our response or believe that we are not processing your personal data in accordance with data protection law, you also have the right to lodge a complaint with the relevant supervisory authority in the United Kingdom.