Privacy Policy for Waste Collection Crystal Palace Customers

This Privacy Policy explains how Waste Collection Crystal Palace collects, uses, stores, and protects personal data relating to customers in the Crystal Palace area. It also sets out your rights under the UK General Data Protection Regulation and the Data Protection Act 2018. This Privacy Policy applies to all Waste Collection Crystal Palace customers in the Crystal Palace area who contact us, request a quote, book a collection, enter into a contract with us, or otherwise interact with our services.

Who We Are and Scope of This Policy

Waste Collection Crystal Palace is a waste collection and related services provider operating in the Crystal Palace area. For the purposes of data protection law, we are the data controller in relation to the personal data we collect about you as a customer or prospective customer. This Privacy Policy applies to our residential and commercial customers and to individuals who make enquiries or bookings on behalf of a business in the Crystal Palace area.

Types of Personal Data We Collect

We may collect and process the following categories of personal data when you use our services or contact us:

Identity and contact details: name, address, email address, telephone number, and any other contact details you provide.

Service information: service address, property type, access instructions, preferred dates and times for collection, details of the type and volume of waste, images you provide to describe the waste or access, and any special requirements you tell us about.

Contract and transaction data: records of quotes, bookings, invoices, payment amounts, payment status, contract history, and communications relating to your account.

Payment data: details necessary to process your payment such as partial card details or transaction references provided by our payment processor. We do not store full card numbers or card security codes.

Communication data: information you provide when you contact us by phone, email, contact form, or any other method including complaints, feedback, and enquiry details.

Technical and usage data: limited technical data such as your IP address, device type, and basic usage information where this is required to operate our website or digital services and to keep them secure.

How We Collect Your Personal Data

We collect personal data directly from you when you request a quote, make a booking, call us, email us, or fill in a form. We may also receive data from third parties that you authorise to act on your behalf, such as letting agents, property managers, or business partners who arrange services for you. In certain cases, we may supplement our records with publicly available information such as company contact details for business customers, where this is necessary to manage our services.

Lawful Basis for Processing Your Data

We process your personal data under one or more of the following lawful bases:

Contract: to take steps at your request before entering into a contract and to perform a contract with you, including providing waste collection and related services, managing bookings, issuing invoices, and communicating with you about your services.

Legal obligation: to comply with legal and regulatory requirements relating to waste management, accounting, taxation, record-keeping, and health and safety, and to cooperate with law enforcement or regulatory authorities when we are legally required to do so.

Legitimate interests: to pursue our legitimate business interests in operating and improving our services, such as responding to enquiries, managing customer relationships, ensuring site and system security, preventing fraud, handling complaints, recovering debts, and analysing service performance, provided these interests are not overridden by your rights and freedoms.

Consent: where we rely on your consent for specific activities such as sending certain types of marketing communications. You can withdraw your consent at any time by contacting us using the details provided in this Privacy Policy.

How We Use Your Personal Data

We use your personal data for the following purposes:

To provide and manage waste collection services, including scheduling collections, planning routes, accessing your property, and verifying the type of waste to be collected.

To set up, manage, and maintain your customer account, including correspondence about bookings, changes to services, or service interruptions.

To process payments, issue invoices and receipts, and keep appropriate accounting and tax records.

To respond to your enquiries, complaints, or requests for support and to keep a record of our communications.

To comply with applicable laws and regulations relating to waste handling, environmental obligations, and health and safety.

To protect our business, staff, and customers by preventing and detecting fraud or misuse of our services and by ensuring the security of our systems and premises.

To improve our services, including service planning, training, and quality monitoring.

To send you service-related messages that are necessary for the performance of our contract or required by law.

Data Sharing and Processors

We do not sell your personal data. We may share your personal data with carefully selected third parties who act as data processors on our behalf or who are independent controllers where required by law or contract. These may include:

IT and hosting providers who support our website, booking systems, email, and data storage.

Payment processors who handle card and online payments on our behalf.

Subcontractors or logistics partners who assist us in delivering waste collection and related services in the Crystal Palace area, where they need limited customer information to perform the service.

Professional advisers such as accountants, auditors, or legal advisers, where necessary for our legitimate business needs and legal obligations.

Regulators, law enforcement, and other public authorities when we are legally required to share data, or when sharing is necessary to protect the rights, property, or safety of our customers, staff, or others.

Where we use processors, we ensure they only process your personal data on our documented instructions, keep it secure, and do not use it for their own purposes.

International Data Transfers

Our core operations are based in the United Kingdom, and your personal data is normally processed and stored within the UK or the European Economic Area. If we transfer personal data outside the UK or EEA, we will ensure that appropriate safeguards are in place, such as adequacy regulations or standard contractual clauses, to protect your data and your rights under data protection law.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected and to meet our legal, accounting, and reporting obligations. In general:

Customer account, contract, and transaction records are kept for the duration of your relationship with us and for a period after that, typically up to six years, to comply with legal and tax requirements and to handle any disputes.

Enquiry and communication records are retained for a period that allows us to manage your enquiry, monitor service quality, and, where appropriate, offer follow-up services.

Technical and usage data is retained for security, operational, and analytical purposes for a limited period consistent with industry practices.

When personal data is no longer required, we will securely delete or anonymise it so that it can no longer be associated with you.

Your Data Protection Rights

Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions:

Right of access: you can request confirmation of whether we process your personal data and obtain a copy of that data, along with information about how we use it.

Right to rectification: you can ask us to correct inaccurate or incomplete personal data that we hold about you.

Right to erasure: in certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected and there is no lawful reason for us to keep it.

Right to restriction: you can ask us to restrict the processing of your personal data in specific situations, such as while we are considering a request for rectification or objection.

Right to data portability: where we process your personal data on the basis of consent or contract and by automated means, you may request that we provide your data in a structured, commonly used, and machine-readable format or transfer it to another controller where technically feasible.

Right to object: you can object to our processing of your personal data where we rely on legitimate interests as our lawful basis, including any direct marketing activities. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms or where processing is required for legal claims.

Right to withdraw consent: where we rely on your consent, you can withdraw it at any time. This will not affect the lawfulness of processing carried out before withdrawal.

You also have the right to lodge a complaint with the UK data protection supervisory authority if you believe that your data protection rights have been infringed. We encourage you to contact us first so we can seek to resolve any concerns promptly.

Security of Your Personal Data

We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include access controls, secure storage, staff training, and procedures for handling potential data breaches. While we work hard to protect your information, no system can be guaranteed to be completely secure, and you should take care when sharing data with us.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection practices. The updated version will apply from the date it is made available. We encourage you to review this Privacy Policy periodically so that you remain informed about how we handle personal data for customers in the Crystal Palace area.