Waste Disposal West Kensington Privacy Policy

This Privacy Policy explains how Waste Disposal West Kensington collects, uses, stores and protects personal data about its customers and prospective customers in the West Kensington area. It also sets out the rights you have under the UK General Data Protection Regulation and related data protection laws. This Privacy Policy applies to all Waste Disposal West Kensington customers and individuals who use or enquire about our waste collection, disposal, recycling or related services within the West Kensington area.

Who We Are

Waste Disposal West Kensington is a waste management service provider operating in the West Kensington area. For the purposes of data protection law, we are the data controller in relation to the personal data we collect and use about you. This means we decide how and why your personal data is processed.

Personal Data We Collect

We collect and process different types of personal data depending on how you interact with us. This may include:

Contact details such as your name, address, telephone number and email address so that we can communicate with you and provide our services.

Service information including property type, access details, preferred collection times, and information about the waste or items you ask us to remove or recycle.

Account and billing information including invoicing address, payment methods, transaction history, and information necessary to prevent fraud or resolve payment disputes.

Communication records such as emails, phone call notes and messages relating to bookings, enquiries, complaints or feedback.

Website and technical data where relevant, such as your IP address, device type, approximate location data and basic usage information collected through server logs when you visit our website or use our online forms.

Marketing preferences including your choices about receiving updates, offers or service information from us.

How We Collect Your Data

We collect personal data in a variety of ways, including:

Directly from you when you contact us by phone, email or through an online form to request a quote, make a booking or ask a question.

When you enter into a contract with us for waste disposal, collection, recycling or related services.

When you interact with us on social media, leave reviews, or respond to surveys or feedback requests.

Automatically through our website and communication systems, for example through server logs that record your IP address, the pages you visit and the date and time of your visit.

Lawful Bases for Processing

We only process personal data where we have a lawful basis to do so under data protection law. The main lawful bases we rely on are:

Performance of a contract where we need to process your personal data to provide the services you have requested, manage your bookings, issue invoices and handle customer service queries.

Compliance with legal obligations where we are required to retain or disclose certain information for accounting, tax, health and safety, or waste regulation purposes, or to comply with requests from public authorities when lawfully required.

Legitimate interests where the processing is necessary for our legitimate business interests and these are not overridden by your rights and freedoms. This may include managing our operations, improving our services, preventing fraud or misuse, and communicating with existing customers about service updates.

Consent where you have clearly agreed that we may process your personal data for a specific purpose, such as sending you marketing messages by email or text. You can withdraw your consent at any time.

How We Use Your Personal Data

We may use your personal data for the following purposes:

To provide and manage our waste disposal and related services, including arranging collections, handling special requirements and ensuring safe and lawful disposal of waste.

To create and manage your customer account, process payments, issue invoices and receipts, and respond to your queries.

To communicate with you about your bookings, service changes, delays, or important information relating to your collection or disposal.

To improve our services through internal analysis, quality control, and training of staff based on customer feedback and service records.

To send you service-related messages, and where permitted, marketing communications about services that may be relevant to you, in line with your preferences and applicable law.

To maintain the security and integrity of our systems, monitor for fraud or misuse, and protect our legal rights.

Data Sharing and Processors

We do not sell your personal data. We may share your personal data with carefully selected third parties where necessary for the purposes described in this Privacy Policy, including:

Service providers who process data on our behalf, such as IT and cloud hosting providers, payment processors, accounting service providers, and customer support tools. These organisations act as data processors and are only permitted to use your data according to our instructions.

Subcontractors who assist in providing waste collection, transportation or disposal services, where they need limited contact and service details to perform their duties.

Professional advisers such as lawyers, accountants and insurers where required for the management of our business or to protect our legal interests.

Public authorities, regulators, law enforcement and courts, where we are required to do so by law or where disclosure is necessary to protect our rights or those of others.

Whenever we use data processors, we ensure that appropriate contracts and safeguards are in place to protect your personal data in line with data protection requirements.

International Transfers

Where personal data is transferred outside the United Kingdom or the European Economic Area by our service providers, we will take steps to ensure that appropriate safeguards are in place. These may include using countries that have been recognised as providing adequate protection for personal data or using standard contractual clauses or equivalent mechanisms approved by relevant authorities.

Data Retention

We keep your personal data only for as long as it is needed for the purposes set out in this Privacy Policy and in accordance with applicable legal and regulatory requirements.

Customer account and service information is typically retained for a period necessary to provide our services and to handle any queries, complaints or disputes, and then for an additional period required to comply with accounting, tax and regulatory obligations.

Financial and transaction records are generally kept for the period required by law for financial reporting and tax purposes.

Marketing data is retained for as long as you remain subscribed or until you object or opt out of receiving such communications, at which point we will remove you from our active marketing lists.

When personal data is no longer required, we will securely delete or anonymise it.

Your Data Protection Rights

Under data protection law, you have a number of rights in relation to your personal data. Subject to certain conditions and exceptions, these include:

The right of access to obtain confirmation of whether we process your personal data and to request a copy of the information we hold about you.

The right to rectification to ask us to correct inaccurate or incomplete personal data.

The right to erasure in certain circumstances, for example where the data is no longer needed for the purposes for which it was collected or where you withdraw consent and there is no other legal basis for processing.

The right to restrict processing in certain situations, such as where the accuracy of the data is contested or the processing is unlawful but you prefer restriction to deletion.

The right to data portability to receive personal data that you have provided to us in a structured, commonly used and machine readable format and to request that we transfer it to another controller where technically feasible and where the processing is based on consent or contract.

The right to object to processing based on our legitimate interests, including profiling, and to object at any time to processing for direct marketing purposes.

Where processing is based on consent, the right to withdraw that consent at any time without affecting the lawfulness of processing before consent was withdrawn.

Exercising Your Rights

If you wish to exercise any of your rights or have questions about how we handle your personal data, you can contact us using the contact details provided in your service agreement or any recent correspondence from us. We may need to verify your identity before responding to your request. We aim to respond without undue delay and within the time limits set by data protection law.

You also have the right to lodge a complaint with the Information Commissioner’s Office or any other relevant supervisory authority if you believe that your data protection rights have been infringed. We would, however, appreciate the opportunity to address your concerns before you approach a supervisory authority, so we encourage you to contact us first.

Security of Your Data

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or damage. These measures include access controls, secure storage, staff training and regular review of our security procedures. While we endeavour to protect your personal data, no system can be guaranteed as completely secure, and you share information with us at your own risk.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, how we handle personal data, or changes in law and guidance. When we make significant changes, we will take reasonable steps to inform you, for example by providing a notice on our website or by contacting you directly where appropriate. The most current version of this Privacy Policy will always apply to the personal data we hold and process about you.