Waste Disposal Kingston Privacy Policy

This Privacy Policy explains how Waste Disposal Kingston collects, uses, stores and protects personal data relating to our customers and prospective customers located in our service area. It is intended to provide transparent information in line with the UK General Data Protection Regulation and related data protection laws. By using our waste collection and disposal services, making enquiries or otherwise interacting with us, you acknowledge that you have read and understood this Privacy Policy.

Scope of this Privacy Policy

This Privacy Policy applies to all individuals and businesses who use, or enquire about using, Waste Disposal Kingston services within our operational area. It covers personal data we collect directly from you, data collected automatically when you interact with us, and certain data obtained from third parties in the course of providing our services.

Who we are and how to contact us

Waste Disposal Kingston is the organisation responsible for determining how and why your personal data is processed. For the purposes of data protection law, we act as the data controller in relation to the data described in this Privacy Policy. If you have questions about this Policy or how we handle your personal data, you can contact us using the details provided on our main contact channels, clearly marked for customer data or privacy enquiries.

Personal data we collect

The type and amount of personal data we collect depends on how you interact with us and the services you use. We may collect and process the following categories of information:

Identification and contact details such as name, title, address, email address, telephone number and, where relevant, business or company details associated with a named contact.

Service and account information including service addresses, collection schedules, records of services provided, customer reference numbers, communications history and any preferences you share with us.

Payment and billing information such as partial payment card details processed via secure payment providers, bank details for business accounts, billing addresses, invoices, receipts and transaction histories. Full payment card details are handled only by our authorised payment processors and are not stored by Waste Disposal Kingston.

Communication records including emails, contact forms, call logs, complaint correspondence, service feedback and any information you provide when you contact us for support or to request a service.

Technical and usage data where you interact with our online or digital services, such as IP address, device details, browser type, access times and pages visited, collected through standard logging and cookie technologies where legally permitted.

Marketing and preferences data such as whether you wish to receive marketing communications from us, your preferred contact methods and records of marketing communications sent and responses received.

How and why we use your personal data

We use your personal data only when we have a lawful basis to do so. We may process your data for the following purposes:

To provide and manage our waste disposal services, including processing service orders, arranging collections, managing contracts, taking and allocating payments, and communicating with you about your account and service status.

To respond to enquiries and customer support requests, such as providing quotations, answering questions about our services, resolving issues, handling complaints and fulfilling your requests for information.

To manage our relationship with you, including notifying you about changes to our terms, conditions or policies and asking you to provide feedback or participate in satisfaction surveys where appropriate.

To comply with legal and regulatory obligations, such as record keeping, tax and accounting requirements, health and safety rules, waste transfer and disposal regulations and cooperating with competent authorities when lawfully required.

To improve and develop our services, for example by analysing usage patterns, monitoring service quality, training staff and planning capacity so we can better meet customer needs in our service area.

To send you marketing communications about our services that may be relevant to you, where you have consented or where we are otherwise permitted to do so under applicable law. You can opt out of marketing at any time.

Lawful basis for processing

We rely on one or more of the following lawful bases under data protection law to process your personal data:

Performance of a contract where processing is necessary to provide the services you have requested, to enter into a contract with you or to take steps at your request before signing up for our services.

Compliance with a legal obligation where we must process certain data to meet statutory and regulatory requirements, for example waste management regulations, tax obligations and accounting rules.

Legitimate interests where processing is necessary for the legitimate interests of Waste Disposal Kingston or a third party, provided your interests and fundamental rights do not override those interests. This may include managing day to day operations, improving services, preventing fraud, maintaining security and sending certain direct marketing to existing customers in line with the law.

Consent where you have given us clear permission to process your data for a specific purpose, such as receiving certain marketing communications or accepting optional cookies. Where we rely on consent, you have the right to withdraw it at any time.

Data retention and storage

We keep your personal data only for as long as reasonably necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements.

Service and account records are generally retained for as long as you are a customer and for a period afterwards, typically up to seven years, to comply with legal requirements, handle potential disputes and demonstrate proper service delivery.

Enquiry and correspondence records that do not result in an ongoing customer relationship may be retained for a shorter period that reflects the time needed to handle your request and maintain adequate business records.

Technical and usage data is retained for operational and security purposes for periods that are appropriate for log management, performance monitoring and service improvement, after which the data is deleted or anonymised.

Marketing data is retained while you remain subscribed to receive marketing communications from us and may be kept for a limited period afterwards to document your preferences and demonstrate compliance with applicable rules.

When personal data is no longer required, we take steps to securely delete or anonymise it in accordance with our data retention procedures.

Sharing your personal data and use of processors

We may share your personal data with carefully selected third parties where necessary for the purposes described in this Privacy Policy, subject to appropriate safeguards.

Service providers acting as data processors may process data on our behalf in areas such as payment processing, IT hosting and support, communication tools, customer relationship management, document storage and waste transfer or treatment facilities involved in performing our services.

Professional advisers including accountants, auditors, legal advisers and insurers may receive data where necessary for the provision of professional services, risk management and legal compliance.

Authorities and regulators may receive your data where we are required to do so by law or in response to valid legal processes, for example in relation to regulatory inspections, legal claims or enforcement actions.

Where we use data processors, they are only permitted to process your personal data in accordance with our instructions, must keep it confidential and must implement suitable technical and organisational measures to protect it.

We do not sell your personal data to third parties. If we were to consider any significant organisational changes, such as a business transfer or restructuring, we would ensure that any sharing of data in that context is carried out in accordance with data protection law.

International transfers

Where we or our service providers transfer personal data outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your data, such as adequacy regulations, standard contractual clauses or other lawful transfer mechanisms recognised by applicable data protection laws.

Your data protection rights

Under data protection law, you have a number of rights in relation to the personal data we hold about you, subject to certain conditions and exemptions. These include:

The right of access, which allows you to request confirmation of whether we process your personal data and to obtain a copy of that data together with supplementary information.

The right to rectification, which allows you to request that we correct or complete personal data that is inaccurate or incomplete.

The right to erasure, sometimes known as the right to be forgotten, which allows you to ask us to delete your personal data in certain circumstances, for example where it is no longer needed for the purposes for which it was collected.

The right to restrict processing, which allows you to request that we limit the way we use your data in certain situations, for example while we are considering a request for rectification or objection.

The right to object to processing, including the right to object to processing based on our legitimate interests and to object at any time to direct marketing.

The right to data portability, which allows you to receive certain personal data in a structured, commonly used and machine readable format and to transmit it to another controller where technically feasible.

Where we rely on your consent, you also have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

If you wish to exercise any of these rights, please contact us using our published contact details, making it clear that your request relates to data protection rights. We may need to verify your identity before responding to your request.

You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that we have not handled your personal data in accordance with the law. We would, however, welcome the opportunity to address your concerns directly before you contact a regulator.

Data security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, accidental loss, destruction or damage. These measures include access controls, staff training, secure storage and regular review of our procedures. While we strive to protect your data, no method of transmission or storage is completely secure and we cannot guarantee absolute security.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services or legal obligations. When we make significant changes, we will take reasonable steps to bring the updated Policy to your attention. The most current version of the Privacy Policy will apply to the personal data we hold and process. We encourage you to review this Policy periodically to stay informed about how we protect your information.