Waste Disposal Hampstead Privacy Policy

This Privacy Policy explains how Waste Disposal Hampstead collects, uses, stores, and protects personal data relating to our customers in the Hampstead area. We are committed to complying with the UK General Data Protection Regulation and other applicable data protection laws. This Privacy Policy applies to all customers and prospective customers within our service area who use or enquire about our waste disposal services.

Who We Are

Waste Disposal Hampstead provides household and commercial waste removal services in the Hampstead area. For the purposes of data protection law, we act as the data controller for the personal data described in this Privacy Policy.

Personal Data We Collect

We may collect and process the following categories of personal data when you contact us, request a quote, make a booking, or use our services:

Identification and contact details, such as name, address, telephone number, and email address.

Service information, such as property type, access instructions, waste type, and preferred service dates and times.

Billing and payment information, such as invoice addresses and payment status. Card details are processed securely by third-party payment processors and are not stored by us beyond what is necessary for reconciliation and record keeping.

Communication records, such as email correspondence, call notes, and enquiries made through forms or over the phone.

Technical and usage data, where applicable, such as IP address, approximate location, device identifiers, and information about how you interact with our website or electronic communications.

Feedback and complaints information, including details you choose to provide about your experience with our services.

How We Collect Your Data

We collect personal data from you directly when you contact us by phone, email, online form, or social media, when you request a quote, place a booking, or enter into a contract for services. We may also collect data when you browse our website or respond to our marketing communications, where this is permitted by law.

Lawful Basis for Processing

We rely on the following lawful bases under data protection law to process your personal data:

Contract performance. We process personal data to enter into and fulfil our contract with you, including managing bookings, providing waste removal services, sending confirmations, and issuing invoices.

Legal obligations. We process certain data to comply with legal and regulatory requirements, including tax, accounting, and waste management regulations, as well as obligations relating to health and safety.

Legitimate interests. We process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights. These interests include service improvement, handling customer queries, managing our relationship with you, preventing fraud or misuse, and maintaining accurate records.

Consent. In some cases, we may rely on your consent, for example for certain types of marketing communications. When we rely on consent, you can withdraw it at any time by contacting us using the details provided below or using the unsubscribe options in our communications.

How We Use Your Personal Data

We use the personal data we collect for the following purposes:

To provide and manage waste disposal services, including bookings, collections, and customer support.

To issue quotes, invoices, receipts, and other relevant service documentation.

To communicate with you about your bookings, changes to services, and important information relating to your account.

To manage payments, refunds, and debt collection where necessary.

To respond to enquiries, feedback, and complaints, and to resolve disputes.

To improve our services, operations, and customer experience, including through analysis of service usage and feedback.

To maintain security, prevent misuse of our services, and protect our legal rights.

To send you information about services that may be relevant to you, where this is permitted by law and, where required, with your consent.

Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements.

Customer records relating to contracts, services performed, and financial transactions are typically retained for up to seven years after the end of our relationship, in line with tax and accounting rules.

Enquiry information and quotation requests that do not lead to a contract are normally retained for up to two years, unless a shorter or longer period is required or justified by our legitimate interests.

Marketing-related data will be retained for as long as you remain subscribed or engaged with our communications, or until you object or withdraw consent, after which we will remove you from our active marketing lists.

We may retain certain minimal information to record your marketing preferences and to demonstrate that we have complied with our legal obligations.

Data Processors and Third Parties

We may share your personal data with third-party service providers who act as data processors on our behalf. These processors are contracted to handle your data only in accordance with our instructions and to maintain appropriate security measures.

Typical processors may include payment processing providers, IT and hosting providers, customer relationship management systems, email and communication platforms, and professional advisors such as accountants where necessary for business operations.

We may also share data with third parties acting as independent controllers where this is required by law, such as regulatory authorities, law enforcement agencies, or tax authorities, or where it is necessary to establish, exercise, or defend legal claims.

We do not sell your personal data. Any sharing of data is limited to what is necessary, proportionate, and in line with this Privacy Policy and applicable law.

International Transfers

Where our processors or service providers are located outside the United Kingdom or the European Economic Area, we take steps to ensure that your data is protected with appropriate safeguards. These may include reliance on adequacy regulations, standard contractual clauses, or other recognised mechanisms under data protection law.

Data Security

We implement appropriate technical and organisational measures to protect your personal data from unauthorised access, unlawful processing, accidental loss, destruction, or damage. These measures include access controls, staff training, secure storage, and regular review of our data handling practices.

While we take reasonable steps to protect your information, no transmission of data over the internet can be guaranteed as fully secure. You are responsible for ensuring the security of any devices and accounts you use when communicating with us.

Your Rights Under GDPR

As a Waste Disposal Hampstead customer in our service area, you have the following rights in relation to your personal data, subject to certain legal limitations:

The right of access. You can request confirmation that we process your personal data and obtain a copy of that data.

The right to rectification. You can ask us to correct inaccurate or incomplete personal data.

The right to erasure. In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected and we have no legal obligation to retain it.

The right to restrict processing. You can request that we limit the processing of your data in specific situations, such as while we investigate a concern you raise.

The right to data portability. Where processing is based on consent or contract and carried out by automated means, you may request a copy of your data in a commonly used, machine readable format and request that it be transferred to another controller where technically feasible.

The right to object. You can object to processing based on our legitimate interests, including profiling, and to direct marketing at any time.

Rights relating to consent. Where processing is based on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing before withdrawal.

Exercising Your Rights

If you wish to exercise any of your data protection rights or have questions about this Privacy Policy, you can contact us using our usual customer contact details. We may need to verify your identity before responding to your request. We aim to respond within the time limits set by law.

You also have the right to lodge a complaint with the UK Information Commissioner's Office if you are unhappy with how we handle your personal data. We encourage you to contact us first so that we can try to resolve your concerns.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or how we process personal data. Any updates will apply from the date they are published. We recommend that you review this Privacy Policy periodically so that you remain informed about how we protect your data.