Waste Removal Camberwell Privacy Policy
This Privacy Policy explains how Waste Removal Camberwell collects, uses, stores and protects your personal data when you use our waste removal, junk clearance and related services in the Camberwell area. It also explains your rights under the UK General Data Protection Regulation and the Data Protection Act 2018. This Privacy Policy applies to all Waste Removal Camberwell customers in our service area, including residential, commercial and one off customers.
Who We Are And How To Contact Us
Waste Removal Camberwell is a waste management service provider operating in the Camberwell area. We are the data controller in relation to the personal data we collect about you. This means we decide how and why your personal data is used.
If you have any questions about this Privacy Policy or how we handle your personal data, or if you wish to exercise any of your rights, you can contact us using the contact details provided on our main customer communication channels.
Personal Data We Collect
We collect and process different types of personal data in connection with our services. The personal data we may collect includes:
Identification and contact details such as your name, address, email address, telephone number and any other contact details you choose to provide when you enquire about or book our services.
Service and contract information such as details of the services you request, property access instructions, service notes, photographs of waste taken for quotation or service verification purposes, and related communications.
Payment and billing information such as payment method details, partial card information processed through our payment provider, billing address, invoices, payment history and records of any refunds or credits. We do not store full card details; these are processed by our payment processors.
Communication data such as emails, messages, phone call details and any feedback or complaints you submit to us.
Technical and usage data such as your IP address, device details, browser type, approximate location, and information about how you interact with our website, where this is collected via cookies or similar technologies.
Any other information you choose to provide to us voluntarily where it is relevant to providing our services, such as special instructions, access notes or contact details for third parties at the service address.
How We Use Your Personal Data And Lawful Bases
We process your personal data only where we have a lawful basis under data protection law. The main purposes and lawful bases for our processing are:
To provide and manage our services. We use your contact details, service and contract information, payment details and communication data to provide our waste removal services, manage bookings, send confirmations, coordinate collections, issue invoices and handle any customer service issues. The lawful basis is that processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.
To comply with legal and regulatory obligations. We may process your personal data to meet our legal obligations, including waste transfer documentation, accounting and tax requirements, and responding to lawful requests from public authorities. The lawful basis is compliance with a legal obligation.
To manage our business and improve our services. We may use service and communication data, as well as aggregated technical and usage data, to monitor service performance, improve our operations, train staff and develop new services. The lawful basis is our legitimate interests in running and improving our business, provided these interests are not overridden by your rights.
To communicate with you about your account and services. We use your contact details to send important information about your bookings, changes to our terms, service updates and similar messages. The lawful basis is performance of a contract and our legitimate interests in keeping you informed about services you have requested.
Marketing communications. We may send you marketing messages about our services only where permitted by law, for example where you have given your consent or where you are an existing customer and we are allowed to rely on our legitimate interests. You can opt out of marketing at any time by following the instructions in the message or by contacting us.
Data Retention
We will not keep your personal data for longer than necessary for the purposes described in this Privacy Policy.
Service and contract records, including invoices and waste transfer related documents, are typically kept for up to seven years after the end of the relevant financial year in order to comply with legal, tax and accounting requirements.
Customer contact details and communications linked to active services are kept while you remain a customer and for a reasonable period afterwards to handle any queries, complaints or legal claims. Where data is kept for legal claim purposes, we may retain relevant information for the limitation period allowed by law.
Marketing data, such as your contact details used for marketing purposes, will be kept until you withdraw your consent or object to receiving marketing, at which point we will remove you from our marketing lists. We may retain limited information to record that you have opted out.
Technical and usage data collected via cookies or similar technologies is retained in accordance with our internal retention rules, which set maximum retention periods that are appropriate for analytics and security purposes.
Sharing Your Personal Data And Processors
We may share your personal data with carefully selected third parties where necessary for the purposes set out in this Privacy Policy.
Service providers acting as data processors. These are companies who provide services to us and process personal data on our behalf, such as IT and hosting providers, payment processors, customer relationship and booking systems, communication platforms, accounting and administrative support. We ensure that data processors are bound by contracts that require them to protect your personal data and use it only on our instructions.
Professional advisers. We may share necessary information with our legal, accounting, insurance and other professional advisers where reasonably required for the establishment, exercise or defence of legal claims or for compliance and business management purposes.
Public authorities and regulators. We may disclose personal data when required by law, to comply with regulatory requirements or to respond to lawful requests from public bodies, including law enforcement and environmental authorities.
Business transfers. If we undergo a business reorganisation, sale, merger or similar event, we may share personal data with potential or actual buyers or partners, in which case the recipient will be required to use your personal data only for the purposes described in this Privacy Policy.
We do not sell your personal data to third parties. Where we transfer data outside the UK or the European Economic Area, we will ensure that appropriate safeguards are in place as required by data protection law.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights apply in many situations, although they may be subject to certain legal limitations.
Right of access. You have the right to request confirmation that we process your personal data and to obtain a copy of the personal data we hold about you, together with information about how we use it.
Right to rectification. You can ask us to correct or complete any inaccurate or incomplete personal data we hold about you.
Right to erasure. In certain circumstances, you may request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected or where you withdraw consent and there is no other lawful basis for processing.
Right to restriction. You have the right in some cases to request that we restrict the processing of your personal data, for example while we are investigating a data accuracy or objection request.
Right to data portability. Where processing is based on your consent or on a contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine readable format and to request that we transmit it to another organisation where technically feasible.
Right to object. You can object at any time to processing that is based on our legitimate interests, including profiling, and we will stop processing unless we can demonstrate compelling legitimate grounds. You always have the right to object to direct marketing, and we will stop sending marketing communications when you do so.
Rights in relation to automated decision making. We do not carry out automated decision making that produces legal or similarly significant effects on you. If this changes, we will update this Privacy Policy and inform you where legally required.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you are concerned about how we handle your personal data. We encourage you to contact us first so we can try to resolve any concerns.
Security Of Your Personal Data
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or damage. These measures include restricting access to personal data to staff and processors who need it for their role, using secure systems and applying suitable security controls. While we take reasonable steps to safeguard your data, no system can be completely secure and we cannot guarantee absolute security.
Changes To This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations or how we process personal data. Any updates will be made available through our usual customer communication channels. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
