Waste Disposal Paddington Privacy Policy

This Privacy Policy explains how Waste Disposal Paddington collects, uses, stores and protects personal data relating to our customers and prospective customers. It applies to all Waste Disposal Paddington customers and service users within our operating area, including individual household customers, commercial clients and any person contacting us about our waste disposal services.

We are committed to complying with the UK General Data Protection Regulation and the Data Protection Act 2018. We process personal data lawfully, fairly and transparently, and we only collect data that is relevant and necessary for providing our services.

Data Controller Details

The data controller responsible for your personal data is Waste Disposal Paddington. This means we determine how and why your personal data is processed when you engage our services or communicate with us in relation to waste disposal, recycling or associated activities.

If you have any questions about this Privacy Policy or our data protection practices, you can contact us using the contact details provided on our main customer communication channels.

Personal Data We Collect

We collect different types of personal data depending on how you interact with us and which services you use. The categories of personal data we may collect include:

Identification and contact information such as name, title, address, email address, telephone number and business contact details where relevant.

Service and contract information such as service addresses, service type, collection schedules, waste container details, records of services provided, invoices, payment history and correspondence related to your contract or request.

Payment and billing information such as payment method, partial card or account details where required for processing payments, billing address and records of payments made and pending. We do not store full payment card details when processed by third-party payment providers.

Communication records such as emails, telephone call notes, SMS messages, online contact form submissions and complaints, feedback or queries you send to us.

Usage and technical information such as log records related to use of our website or online booking tools, including the date and time you accessed our services, the pages you visited and basic technical information provided by your browser or device.

Operational and safety information such as CCTV images or vehicle tracking data associated with service delivery, where used for security, safety or operational management.

How We Collect Personal Data

We collect personal data directly from you when you contact us by phone, email, online form or in writing to request a quotation, book a service or ask a question. We also collect data when you enter into a contract with us, make a payment or provide feedback or complaints regarding our services.

We may receive personal data indirectly from third parties who are acting on your behalf, such as managing agents, landlords, business partners or comparison and referral services, where they lawfully share your details to obtain waste disposal services for you.

We may also obtain personal data from public sources where appropriate and lawful, such as public registers or official records, to verify address details or company information for commercial customers.

Lawful Bases for Processing

We process your personal data only where we have a valid legal basis under data protection law. Depending on the circumstances, our lawful bases include:

Contract. We process your data where it is necessary to enter into or perform a contract with you, such as to provide waste collection services, manage bookings, issue invoices and handle customer support related to your service.

Legal obligation. We may process your data where required to comply with our legal obligations, including tax and accounting rules, waste management regulations, health and safety requirements and obligations to regulatory or enforcement authorities.

Legitimate interests. We may process your data for our legitimate business interests, provided these interests are not overridden by your rights and interests. This includes managing and improving our operations, responding to enquiries, preventing fraud, ensuring service security and sending important service updates that are relevant to existing customers.

Consent. In limited cases, we may rely on your consent, for example for certain types of direct marketing communications where consent is required by law. Where we rely on consent, you can withdraw it at any time.

How We Use Personal Data

We use your personal data for the following purposes:

To provide and manage waste disposal and related services, including collection, recycling, bulky item removal and any other agreed services.

To set up and manage customer accounts, arrange bookings, coordinate service schedules and respond to changes or cancellations.

To issue quotes, invoices and payment confirmations, process payments and manage any outstanding balances or billing queries.

To respond to enquiries, complaints, feedback or requests for information and to maintain records of our communications with you.

To comply with legal, regulatory and insurance requirements, including record-keeping obligations and responding to requests from regulators or law enforcement where legally required.

To monitor, maintain and improve our services, vehicles, systems and security, including the use of operational data to optimise routes and safety.

To provide you with information about services that are similar to those you have already purchased or enquired about, where this is permitted by law and you have not opted out.

Data Sharing and Processors

We may share your personal data with trusted third parties where necessary for the purposes described in this Privacy Policy and where they act as data processors on our behalf. These include:

IT and system support providers who host or maintain our booking, billing or communication systems.

Payment processors and banks who facilitate secure payment transactions and assist with fraud prevention.

Professional advisers such as accountants, auditors, legal advisers and insurers, where necessary for the management of our business and legal obligations.

Operational partners or subcontractors involved in delivering waste collection or associated services on our behalf, where they require relevant information to perform their duties.

These third parties are required to process personal data only according to our instructions, to keep it secure and to comply with applicable data protection laws. We do not sell your personal data to third parties.

We may also share data with regulatory authorities, law enforcement bodies or public agencies where required by law or to protect our rights, property or safety and that of our staff, customers or the public.

Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting or reporting requirements. The length of time we keep your data will vary depending on the type of data and the nature of our relationship with you.

Typically, customer account and service records are kept for the duration of the contract and for a number of years after the end of the relationship to deal with any queries, disputes or legal obligations. Financial records, invoices and related documents are generally kept for periods required by tax and accounting laws.

Where data is no longer needed, we will delete it or anonymise it so that it no longer identifies you.

International Transfers

Where we use service providers that are located outside the United Kingdom or the European Economic Area, or who store data in other countries, we will ensure that appropriate safeguards are in place before any personal data is transferred. These safeguards may include standard contractual clauses approved by relevant data protection authorities or other lawful transfer mechanisms to ensure your data remains protected.

Data Security

We take the security of your personal data seriously. We implement technical and organisational measures to protect your data against unauthorised access, loss, alteration or disclosure. These measures include access controls, encryption or pseudonymisation where appropriate, secure storage, staff training and regular review of our security arrangements.

While we work hard to protect your personal data, no system can be completely secure. If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will take steps to mitigate the impact and, where required by law, notify the relevant supervisory authority and affected individuals.

Your Data Protection Rights

You have a number of rights under data protection law in relation to the personal data we hold about you. Subject to certain conditions and exemptions, these include:

The right of access. You can request a copy of the personal data we hold about you and information about how we process it.

The right to rectification. You can ask us to correct inaccurate or incomplete personal data.

The right to erasure. You can request that we delete your personal data in certain circumstances, for example where it is no longer needed for the purposes for which it was collected and we have no legal reason to keep it.

The right to restrict processing. You can ask us to restrict how we use your data in certain situations, such as while we are dealing with a request to rectify or object.

The right to object. You can object to our processing of your personal data where we rely on legitimate interests, including for direct marketing. We will stop processing unless we have compelling legitimate grounds or a legal requirement to continue.

The right to data portability. You can request that we provide certain personal data to you or to another organisation in a structured, commonly used and machine-readable format, where this is technically feasible and the processing is based on consent or contract.

If you wish to exercise any of these rights, you can contact us using our usual customer contact details. We may need to verify your identity before responding. We aim to respond to all valid requests within one month, or within any extended time period permitted by law where the request is complex.

Complaints and Supervisory Authority

If you are concerned about how we handle your personal data, we encourage you to contact us first so that we can try to resolve the issue. You also have the right to lodge a complaint with the UK data protection supervisory authority. Details of how to contact the supervisory authority can be found via official government information sources.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or data protection practices. Any updated version will apply to all Waste Disposal Paddington customers in our service area from the date it is made available. We recommend that you review this Privacy Policy periodically to stay informed about how we process your personal data.