Waste Disposal Bermondsey Privacy Policy

This Privacy Policy explains how Waste Disposal Bermondsey collects, uses, stores and protects personal data relating to our customers and prospective customers in the Bermondsey area. It also explains your rights under the UK General Data Protection Regulation and the Data Protection Act 2018. This Privacy Policy applies to all individuals and businesses using, or enquiring about, our waste collection, recycling, clearance or related services within the Bermondsey area.

Who we are and scope of this policy

Waste Disposal Bermondsey is a waste management service provider operating in the Bermondsey area. For the purposes of data protection law, we act as the data controller in relation to the personal data we collect about you. This policy covers information we collect directly from you, information we receive from third parties, and information we generate in the course of providing our services.

Types of personal data we collect

We collect and process different types of personal data depending on how you interact with us and which services you use. This may include:

Contact and identification data, such as your name, business name, postal address, service address, email address and telephone numbers.

Service and contract information, such as details of the services you request or receive, collection locations, access instructions, waste categories relevant to your booking, contract dates, and customer reference numbers.

Billing and payment details, such as invoicing address, payment history, bank transfer details or partial card information where necessary for processing payments. We do not store full card details when payments are handled by third party payment processors.

Usage and communication data, such as enquiries, complaints, feedback, call notes, emails and messages you send us, and records of your interactions with our customer service team.

Operational and site data, such as information about your premises needed to safely and lawfully provide our services, including access routes, risk information, and time and date of collections.

Technical information, such as basic data generated when you contact us through online forms or email, including the date, time and method of contact. We only collect online technical data that is necessary for the provision of the service or for security and integrity of our systems.

How we collect your personal data

We collect personal data in a number of ways, including:

Directly from you when you contact us by phone, email, online forms or in person to request a quotation, make a booking or ask a question.

During the performance of our services, for example when our operatives visit your premises and record collection details or access instructions.

From third parties where legally permitted, for example from business partners who refer you to us, or from publicly available business directories and official records when we need to verify address or company details.

Lawful bases for processing your data

We only process your personal data when we have a lawful basis to do so under data protection law. Depending on the context, we may rely on one or more of the following lawful bases:

Contract. We process your data where it is necessary to enter into a contract with you or to perform a contract we have with you, including providing quotations, managing bookings, collecting waste, issuing invoices and handling service-related communications.

Legal obligation. We process data where we are required to do so in order to comply with legal and regulatory obligations, including waste transfer documentation, financial record keeping, health and safety requirements and responding to lawful requests from public authorities.

Legitimate interests. We process data where it is necessary for our legitimate business interests, provided that your interests and fundamental rights do not override those interests. This includes managing our relationship with you, improving our services, ensuring site and operational security, preventing fraud and handling routine business administration.

Consent. In limited situations, we may rely on your consent, for example for certain types of optional marketing communications where required by law. Where we rely on consent, you can withdraw it at any time.

How we use your personal data

We use the personal data we hold about you for the following purposes:

To provide our waste disposal and related services to you, including arranging collections, accessing premises, issuing documentation and managing ongoing service delivery.

To set up and manage your customer account, including processing orders, managing contracts and administering payments, invoices, credit control and refunds.

To respond to your enquiries, requests and complaints, and to communicate with you about your bookings, operational changes, service updates and important notices.

To comply with legal and regulatory requirements applicable to waste management, financial reporting, health and safety and environmental obligations.

To protect our staff, customers and property and to ensure the safe and efficient operation of our services in the Bermondsey area.

To improve our services, train our staff, and conduct internal reporting and analysis relating to our operations and customer base.

To send you service related information and, where permitted, relevant marketing about similar services, which you can opt out of at any time.

Data sharing and processors

We do not sell your personal data. We may share your personal data with trusted third parties where necessary for the purposes described in this policy and where appropriate safeguards are in place. These recipients may include:

Service providers acting as data processors, such as IT and cloud hosting providers, payment processors, waste transfer and recycling partners, customer management and communication platforms and professional advisers such as accountants.

Regulators, law enforcement, local authorities and other public bodies where we are required to share information in order to meet legal or regulatory obligations, or to protect our rights or the rights of others.

Business partners and subcontractors involved in the delivery of waste management services within the Bermondsey area, where sharing is necessary for performance of the service you have requested.

Whenever we use data processors, they are only permitted to process your personal data on our instructions, must keep it secure and must not use it for their own purposes.

International transfers

Where any of our service providers or systems involve transferring personal data outside the United Kingdom, we ensure that appropriate safeguards are in place, such as use of countries deemed to provide an adequate level of protection or use of standard contractual clauses. Details of these safeguards can be provided upon request.

Data retention

We retain your personal data only for as long as is necessary for the purposes described in this policy, or as required by law or regulation. In general:

Customer account and contract information is kept for the duration of your relationship with us and for a period afterwards to enable us to respond to queries, deal with disputes and meet legal and financial record keeping obligations.

Waste transfer and related regulatory records are kept for the minimum statutory periods and any longer period that may be necessary in connection with compliance or legal claims.

Marketing contact data is kept until you opt out or we determine that it is no longer accurate or appropriate to use for that purpose.

When data is no longer required, we will securely delete or anonymise it.

How we protect your data

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or damage. Measures may include controlled access, secure storage, staff training, and regular review of our security practices. While no system can be completely secure, we work to ensure that the level of protection is appropriate to the nature of the data and the risks associated with processing it.

Your data protection rights

As a data subject, you have a number of rights under data protection law in relation to your personal data. These include:

Right of access. You have the right to request confirmation that we are processing your personal data and to obtain a copy of that data, along with certain other information.

Right to rectification. You have the right to ask us to correct or complete inaccurate or incomplete personal data.

Right to erasure. In some circumstances, you may have the right to request that we delete your personal data, for example where it is no longer needed for the purpose for which it was collected and there is no legal obligation or overriding interest requiring us to retain it.

Right to restriction. You have the right to ask us to restrict the processing of your personal data in certain situations, for example while we are considering a request for rectification.

Right to object. You may object to processing based on our legitimate interests, including profiling, and we will stop processing unless we have compelling legitimate grounds to continue. You always have the right to object to direct marketing.

Right to data portability. Where processing is based on consent or contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine readable format and to request that we transmit it to another organisation where technically feasible.

Right to withdraw consent. Where we rely on your consent as the lawful basis for processing, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing before withdrawal.

You also have the right to lodge a complaint with the UK supervisory authority if you are unhappy with how we have handled your personal data.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, how we process personal data or legal requirements. Any updated version will apply to all personal data held at the time of the update and to future data processing. Where appropriate, we will inform you of significant changes through our usual communication channels.