Waste Disposal Croydon Privacy Policy

This Privacy Policy explains how Waste Disposal Croydon collects, uses, stores, and protects personal data relating to our customers and prospective customers. It applies to all Waste Disposal Croydon customers in the Croydon area who use our waste collection, disposal, recycling, or related services, whether domestic or commercial.

We are committed to complying with the UK General Data Protection Regulation and all applicable data protection laws. Please read this Privacy Policy carefully to understand how and why we process your personal data and the rights you have in relation to that data.

Data Controller and Scope

The data controller responsible for your personal data is Waste Disposal Croydon. We determine the purposes and means of processing personal information about our customers, suppliers, and business contacts.

This Privacy Policy covers personal data we collect when you contact us, request a quote, book a service, enter into a contract, visit our website, or otherwise interact with us as a customer, prospective customer, or business partner in the Croydon area.

Personal Data We Collect

We only collect personal data that is necessary for the delivery and administration of our services. The types of personal data we may collect include:

Contact details, such as your name, postal address, service address, email address, and telephone number.

Customer account information, such as details of services requested, service frequency, bin or skip size, access arrangements, visit history, and customer service interactions.

Billing and payment information, such as invoicing details, payment status, and partial payment information as required for processing transactions. We do not store full payment card details where third party payment processors are used.

Communications data, such as emails, phone call notes, and any messages you send us through forms or other channels.

Technical and usage data, such as your IP address, device information, and basic usage data if you visit our website, to help us manage security and improve our services.

In certain cases, where directly relevant to service delivery, we may record limited notes about access issues or special instructions, for example secure gate codes or contact preferences.

How We Collect Your Data

We collect personal data in several ways, including:

Directly from you when you request a quote, book a service, contact us by phone or email, or create or update an account with us.

Through our website when you submit an enquiry form or request information.

From your use of our services, such as records of collections, changes to service, or communications relating to your account.

From third party service providers, such as payment processors, where this is necessary for us to manage your account and provide our services.

Lawful Basis for Processing

We process your personal data only where we have a lawful basis under data protection law. Depending on the context, the lawful basis will be one or more of the following:

Performance of a contract. We process personal data to take steps at your request before entering into a contract and to perform our contractual obligations, such as providing waste disposal services, managing bookings, and handling billing.

Legal obligations. We may process personal data to comply with legal and regulatory requirements, including record keeping, tax and accounting obligations, and responding to lawful requests from public authorities.

Legitimate interests. We may process personal data where it is necessary for our legitimate business interests and where these are not overridden by your interests or fundamental rights and freedoms. This includes managing our customer relationships, improving our services, ensuring site and system security, recovering debts, and preventing fraud.

Consent. In limited cases, we may rely on your consent, for example for certain optional marketing communications. Where we rely on consent, you can withdraw it at any time.

How We Use Your Personal Data

We use personal data for the following purposes:

To set up and manage your customer account and to provide waste collection, disposal, and related services in the Croydon area.

To communicate with you about service arrangements, changes to collections, bookings, and customer support queries.

To issue invoices, process payments, and manage any queries or disputes relating to billing or service quality.

To maintain our business records, comply with legal and regulatory obligations, and respond to lawful requests from authorities.

To improve our services, including analysing service usage and customer feedback to enhance efficiency, safety, and customer satisfaction.

To send you service-related information and, where permitted, carefully selected marketing communications about similar services, which you may opt out of at any time.

Data Sharing and Processors

We may share your personal data with trusted third parties where necessary for the operation of our business and the provision of our services. These third parties act either as data processors on our behalf or as independent controllers, depending on the circumstances.

Data processors may include:

Payment processing providers who handle card or electronic payments securely.

IT and cloud service providers who host or support our systems, email, and data storage.

Customer relationship management and communications service providers who assist us in managing contact with our customers.

Operational partners, such as logistics or subcontracted collection partners, where required to complete scheduled services.

We require our processors to handle your personal data securely, use it only in accordance with our instructions, and comply with applicable data protection laws.

We may also share data with professional advisers, such as accountants or legal advisers, where necessary, and with law enforcement or regulatory bodies where required by law.

International Data Transfers

Where any of our service providers or systems are located outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your personal data, such as standard contractual clauses or equivalent protection measures in line with applicable law.

Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected and to meet legal, accounting, or reporting requirements.

Customer account and service records are typically retained for the duration of your relationship with us and for a period afterwards in line with legal limitation periods, usually up to six years from the end of the contract or last interaction, unless a longer period is required by law.

Billing and financial records are retained for the period required by tax and accounting regulations.

Enquiry data for prospective customers may be retained for a limited period where necessary to follow up on requests, but will be deleted or anonymised when no longer required.

When retention periods expire, we will either securely delete or irreversibly anonymise your personal data.

Security of Your Data

We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include access controls, secure storage, staff training, and regular review of our security practices.

Your Data Protection Rights

As a data subject, you have a number of rights under data protection law in relation to your personal data. Subject to certain conditions and exemptions, these include the right to:

Access your personal data and obtain a copy of the information we hold about you.

Request correction of inaccurate or incomplete personal data.

Request erasure of your personal data where there is no longer a lawful basis for us to keep it.

Object to processing based on our legitimate interests, and to object at any time to processing for direct marketing.

Request restriction of processing in certain circumstances, for example while a complaint or accuracy dispute is being investigated.

Request the transfer of your personal data to you or to another provider where technically feasible and where the legal requirements for data portability are met.

Where processing is based on consent, withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

You also have the right to lodge a complaint with the relevant supervisory authority if you believe that your data protection rights have been infringed. We encourage you to contact us first so we can try to resolve any concerns directly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. Any changes will be published in the latest version of this Privacy Policy. Your continued use of our services after any update will be taken as acceptance of the revised terms.