Waste Disposal Greenwich Customer Privacy Policy

This Privacy Policy explains how Waste Disposal Greenwich collects, uses, shares and protects personal data relating to our customers in the Greenwich area. It also explains your rights under the UK General Data Protection Regulation and the Data Protection Act 2018. This Privacy Policy applies to all Waste Disposal Greenwich customers and prospective customers located in the Greenwich area who use or enquire about our services, whether as private individuals, landlords, businesses or other organisations.

Data Controller

The data controller responsible for your personal data is Waste Disposal Greenwich. The data controller determines how and why your personal data is processed. References in this Privacy Policy to we, us or our mean Waste Disposal Greenwich as the data controller.

Personal Data We Collect

We collect and process different types of personal data about you when you contact us, use our services, or interact with us in any other way. The categories of data we may collect include:

Identification and contact data such as your name, address, service address, billing address, email address, telephone number and, where relevant, your job title and the name of your organisation.

Service and contract data such as details of the waste disposal or related services you request, quotations we provide, bookings and service schedules, access instructions, notes about particular service requirements, and information about your use of our services.

Financial and payment data such as bank account details or payment card details provided for payment processing, payment history, invoice records, and credit notes. We do not retain full card details when payments are processed via secure payment providers.

Communications data such as emails, letters, phone call notes, messages and any feedback or complaints you submit to us.

Technical and usage data such as information about how you access our website or online tools, including your IP address, browser type, and interaction with pages, where this is collected via essential or consented cookies or similar technologies.

Other data that you choose to provide to us when contacting us or using our services, to the extent it is relevant for the performance of our services or to respond to your queries.

How We Collect Your Data

We may collect personal data directly from you when you request a quote, make a booking, call or email us, complete a form, create or update an account, give us feedback, or otherwise communicate with us.

We may also collect data automatically when you visit our website through the use of cookies or similar technologies, where this is necessary for the functioning of the site or where you have given your consent.

In some cases, we may receive personal data about you from third parties, such as letting agents, property managers, facilities managers, or other intermediaries who request services on your behalf, or from payment service providers when you make a payment.

Purposes and Lawful Bases for Processing

We process personal data only where we have a lawful basis under the UK GDPR. The main purposes and corresponding lawful bases are:

To provide quotations, set up accounts, deliver waste disposal and related services, manage bookings, issue invoices and process payments. The lawful basis is performance of a contract or taking steps at your request before entering into a contract.

To manage our ongoing relationship with you, including handling queries, complaints or service issues, and notifying you of changes to our terms or services. The lawful basis is performance of a contract and our legitimate interests in running our business and providing customer service.

To maintain proper business records, comply with legal, regulatory and tax obligations, and respond to lawful requests from authorities. The lawful basis is compliance with legal obligations and our legitimate interests in protecting our business.

To improve our services, monitor usage, and carry out internal reporting and analysis. The lawful basis is our legitimate interests in managing, developing and growing our business, provided that your interests and fundamental rights do not override those interests.

To send you relevant information about our services that are similar to those you have already purchased or enquired about. The lawful basis is our legitimate interests in promoting our services to existing customers. You can object to this marketing at any time.

To send other marketing communications where required by law. The lawful basis is your consent. Where we rely on consent, you can withdraw it at any time.

Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected and to meet our legal, accounting and reporting requirements.

Customer account and contract data relating to the provision of waste disposal services is usually retained for up to seven years after the end of the relevant contract or last service, in line with legal and tax record keeping obligations.

Financial and invoicing records are retained for as long as required under applicable tax and accounting laws.

Communications and correspondence may be kept for as long as necessary to resolve any issues and to maintain an audit trail of our interactions, generally up to six years.

Where data is processed solely on the basis of your consent and there is no other legal basis for retaining it, we will delete or anonymise the data when you withdraw your consent or when the data is no longer needed for the specific purpose.

Data Processors and Sharing of Personal Data

We may share your personal data with trusted third parties who act as data processors on our behalf, strictly in accordance with our instructions and for the purposes described in this Privacy Policy.

These processors may include providers of information technology services, hosting and maintenance services, customer relationship management systems, payment processing services, accounting and billing platforms, and customer communication tools.

We may also share your personal data with third parties who act as independent data controllers where necessary. These may include insurers, professional advisers, lawyers, auditors, banks and payment providers, as well as public authorities, regulators and law enforcement agencies where we are legally required or permitted to do so.

Where we engage third party processors, we put in place data processing agreements to ensure that your personal data is protected, processed securely, and used only in accordance with our instructions and applicable data protection laws.

We do not sell your personal data.

International Transfers

Where we or our processors transfer personal data outside the UK or European Economic Area, we will ensure that appropriate safeguards are in place to protect your data, such as using standard contractual clauses approved by relevant authorities or ensuring that the country has an adequacy decision. Further information about these safeguards can be obtained by contacting us.

Data Security

We take the security of your personal data seriously and use appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, destruction or damage. These measures may include access controls, encryption, secure storage, staff training, and regular review of our security procedures.

Your Data Protection Rights

Under the UK GDPR, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These rights include:

The right of access. You can request confirmation as to whether we process your personal data and obtain a copy of the data we hold about you.

The right to rectification. You can request correction of inaccurate personal data and completion of incomplete data.

The right to erasure. In certain circumstances you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected or where you withdraw consent.

The right to restriction of processing. You can ask us to restrict the processing of your data in certain situations, for example while we verify its accuracy.

The right to data portability. You can request that we provide you with personal data you have given us in a structured, commonly used and machine readable format, and you may ask us to transmit that data to another controller where technically feasible.

The right to object. You can object to processing based on our legitimate interests and you have an absolute right to object to direct marketing at any time.

The right not to be subject to a decision based solely on automated processing, including profiling, if such a decision produces legal or similarly significant effects for you. Waste Disposal Greenwich does not currently carry out such automated decision making in relation to customers.

To exercise any of these rights, please contact us using the details provided in our customer correspondence or invoices. We may need to verify your identity before responding to your request. You also have the right to lodge a complaint with the Information Commissioner’s Office if you consider that your data protection rights have been infringed.

Scope and Updates to This Privacy Policy

This Privacy Policy applies to all Waste Disposal Greenwich customers and prospective customers in the Greenwich area who use or request our services. By engaging with us, you acknowledge that you have read and understood this Privacy Policy.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. Any updated version will be made available through our usual communication channels, and the revised Privacy Policy will apply from the date it is issued.