Waste Disposal Barnes Privacy Policy and Data Protection

This Privacy Policy explains how Waste Disposal Barnes collects, uses, stores, shares and protects personal data relating to our customers and prospective customers. It applies to all Waste Disposal Barnes customers in our service area, including individuals, households, landlords, property managers and business clients who use, have used, or have expressed an interest in our services.

We are committed to protecting your privacy and handling your personal data lawfully, fairly and transparently in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018. This Privacy Policy should be read together with any terms and conditions that apply to the services you obtain from us.

Data Controller Information

The data controller responsible for your personal data is Waste Disposal Barnes. This means we determine the purposes and means of processing your personal data. If you have any questions about this Privacy Policy or how we process your data, you can contact us using the contact details provided on our main customer communications and service documents.

Categories of Personal Data We Collect

We only collect personal data that is relevant and necessary for the delivery and administration of our services. The types of data we may collect include:

Identification and contact details: name, title, address, email address, telephone number and, where applicable, job title and business contact details.

Service and contract information: details of enquiries, quotes, bookings, service addresses, collection notes, type and volume of waste, dates and times of service provision, photographs related to site access where relevant, and records of any instructions or preferences you provide.

Billing and payment details: invoicing address, payment status, internal transaction references and limited payment-related data required to allocate and reconcile payments. Where we use third-party payment processors, we do not store your full card details.

Communication records: emails, telephone call notes, text messages, and any other correspondence you have with us, including complaints, feedback and reviews.

Technical data: basic technical information needed to operate and secure our website and online tools, such as IP address, device and browser type, access times and pages viewed. We may also use cookies or similar technologies where permitted by law and where necessary to provide or improve our services.

Purposes and Lawful Bases for Processing

We process your personal data for specific, explicit and legitimate purposes. For each purpose, we rely on one or more lawful bases under the GDPR.

To provide and manage our waste disposal services: This includes setting up and managing bookings, scheduling collections, allocating vehicles and staff, carrying out collections, and handling follow-up arrangements. Our lawful basis is performance of a contract and taking steps at your request before entering into a contract.

To manage customer accounts and billing: We use your data to issue quotes, invoices, receipts and statements, to process payments, and to handle queries, disputes and refunds. Our lawful basis is performance of a contract and our legitimate interest in effective financial management.

To communicate with you: We contact you about enquiries, bookings, operational updates such as changes to collection times, service confirmations, health and safety matters, and responses to your questions or complaints. Our lawful basis is performance of a contract and our legitimate interest in good customer service.

To comply with legal and regulatory obligations: We may process and retain data to meet legal requirements such as tax, accounting, environmental and waste transfer regulations, and to cooperate with regulators or law enforcement where required. Our lawful basis is compliance with a legal obligation.

To improve and develop our services: We may use aggregated or pseudonymised data to analyse service performance, improve routes, plan capacity and enhance customer experience. Where this involves personal data, our lawful basis is our legitimate interest in running and improving our business, provided your rights and freedoms are not overridden.

Marketing communications: We may, from time to time, send you information about similar services we offer that may be of interest to you. Where required by law, we will obtain your consent before sending marketing messages, and you can opt out at any time. Our lawful basis is consent or our legitimate interest in promoting our services, depending on the circumstances.

Data Retention Periods

We keep personal data only for as long as is necessary for the purposes for which it was collected, and to meet any legal, accounting or reporting requirements.

Customer and contract data: Typically retained for the duration of your relationship with us and for a reasonable period afterwards, usually up to six years, to enable us to respond to queries, handle complaints, and comply with tax and accounting rules.

Financial and transaction records: Retained for periods required by tax and company law, generally up to six years after the end of the relevant financial year.

Communications and enquiry records: Retained for as long as necessary to manage your enquiry or issue and for a limited period afterwards to demonstrate how we dealt with it and to improve our services.

Technical and website data: Retention periods vary depending on the nature of the data and our security and operational needs, but are kept no longer than necessary for the purpose collected.

When data is no longer required, it will be securely deleted, anonymised or otherwise disposed of in a safe and compliant manner.

Data Processors and Third-Party Recipients

We may share your personal data with carefully selected third parties who act as data processors on our behalf. These processors are only permitted to process your data in accordance with our written instructions and must implement appropriate security measures.

Typical categories of processors and recipients include:

IT and system providers: Companies supplying our booking systems, customer relationship tools, email services, document storage and website hosting.

Payment service providers: Third-party payment gateways and financial institutions that process card or bank payments securely.

Professional advisers: Accountants, auditors, legal advisers and consultants who require access to certain data for legitimate business and legal reasons.

Operational partners: In limited cases, subcontractors or partner waste carriers who assist us in delivering services to you, and who must comply with relevant data protection obligations.

Public authorities: Regulators, law enforcement or other public authorities where we are legally obliged to disclose data or where disclosure is necessary to protect our rights, customers or the public.

We do not sell your personal data. If we were to reorganise or transfer parts of our business, personal data may be transferred to new entities as part of that process, in accordance with data protection law.

International Data Transfers

Our core operations and data storage are intended to be within the United Kingdom or the European Economic Area. If we need to transfer your personal data outside these areas, we will ensure that appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses, to protect your data to a standard essentially equivalent to UK and EU law.

Security of Your Personal Data

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or damage. These measures include access controls, secure storage, staff training, and regular review of our procedures and systems. While no system can guarantee absolute security, we work to ensure that any personal data we handle is protected to a high standard.

Your Data Protection Rights

As a data subject, you have a number of rights in relation to the personal data we hold about you, subject to certain conditions and exemptions under the GDPR.

Right of access: You can request confirmation that we process your personal data and obtain a copy of that data, along with certain information about how we use it.

Right to rectification: You can ask us to correct or complete personal data that is inaccurate or incomplete.

Right to erasure: In certain circumstances, you can request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected and there is no legal requirement for retention.

Right to restriction: You can ask us to restrict the processing of your data in specific situations, such as while we are verifying its accuracy or considering an objection you have raised.

Right to data portability: Where processing is based on your consent or on a contract and is carried out by automated means, you may request that we provide your data in a structured, commonly used and machine-readable format, or that we transmit it directly to another controller where technically feasible.

Right to object: You have the right to object to processing based on our legitimate interests, including profiling, and we will stop processing unless we have compelling legitimate grounds that override your interests, rights and freedoms or we need the data for legal claims. You also have an absolute right to object to direct marketing at any time.

Right to withdraw consent: Where we rely on your consent, you can withdraw it at any time. This will not affect the lawfulness of processing carried out before withdrawal.

You also have the right to lodge a complaint with the UK Information Commissioner's Office if you believe your data protection rights have been infringed. We encourage you to contact us first so we can try to resolve any concerns.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or data protection practices. Any significant changes will be communicated through our normal customer communication channels. The updated version will apply from the date it is published and will cover all Waste Disposal Barnes customers in our service area from that date onward.