Privacy Policy - Rubbish Collection London

This Privacy Policy explains how Rubbish Collection London collects, uses, stores, shares, and protects personal data. It applies to all Rubbish Collection London customers in area, including individuals and businesses who use our rubbish collection and related services. We are committed to handling personal information in a lawful, fair, and transparent manner in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Rubbish Collection London provides rubbish collection and associated waste removal services. In providing these services, we act as a data controller for the personal data we collect and use about our customers, prospective customers, website users, service recipients, and other individuals who interact with us. This means we determine the purposes and means of processing personal data.

2. Personal Data We Collect

We only collect personal data that is necessary for the purposes set out in this policy. The categories of data we may collect include:

Identity data, such as name and title.
Contact data, such as address, email address, and phone number.
Service information, such as collection details, property access instructions, booking preferences, and service history.
Payment and billing data, where relevant to the service provided.
Communication data, including records of enquiries, complaints, and correspondence.
Technical data, where applicable, such as IP address, browser type, and device information.
Usage data, such as interactions with our service channels or booking systems.

We may also receive personal data from third parties where this is necessary to deliver our services, for example from someone booking on behalf of a customer or from a property manager arranging a collection.

3. How We Use Personal Data

We use personal data for the following purposes:

To provide and manage rubbish collection services.
To process bookings, quotes, and service requests.
To communicate with customers about appointments, changes, or service issues.
To issue invoices, take payments, and manage accounts.
To respond to enquiries and customer support requests.
To maintain internal records and improve service delivery.
To comply with legal, regulatory, and tax obligations.
To prevent fraud, misuse, or unlawful activity.

We do not use personal data for purposes that are incompatible with those described in this policy unless we have a lawful basis to do so and, where required, have informed you.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Depending on the context, we may rely on one or more of the following bases:

Contract: Processing is necessary to perform a contract with you or to take steps at your request before entering into a contract.
Legal obligation: Processing is necessary to comply with legal duties, such as accounting, record-keeping, or regulatory requirements.
Legitimate interests: Processing is necessary for our legitimate business interests, provided your interests and fundamental rights do not override those interests. Examples include service improvement, internal administration, and fraud prevention.
Consent: In limited situations, we may rely on your consent, for example where it is required for specific communications or optional processing. Where we rely on consent, you may withdraw it at any time.

We will always ensure that processing is justified by a proper lawful basis and that we use personal data only to the extent necessary for the relevant purpose.

5. Sharing Personal Data and Processors

We may share personal data with trusted third parties where necessary to operate our business and deliver our services. These third parties act as processors or, in some cases, independent controllers. Processors process personal data only on our instructions and are required to protect it appropriately.

Examples of processors and service providers may include:

Payment processors that handle card or electronic payment transactions.
IT and cloud service providers that store or host data securely.
Booking and communication platforms that help manage appointments and customer messages.
Professional advisers, such as accountants or legal advisers, where necessary.
Operational partners involved in delivering rubbish collection services on our behalf.

We may also disclose personal data if required by law, court order, regulatory authority, or to protect our rights, customers, staff, or the public. Where personal data is shared, we take reasonable steps to ensure appropriate safeguards are in place.

6. International Transfers

If any processor or service provider stores or accesses personal data outside the United Kingdom, we will take steps to ensure that the transfer is lawful and that appropriate safeguards are applied. These may include adequacy regulations, standard contractual clauses, or other approved transfer mechanisms under applicable law.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, tax, or reporting requirements. Retention periods vary depending on the type of data and the purpose for which it is processed.

In general:

Customer and service records are kept for the duration of the service relationship and for a reasonable period afterwards.
Financial and transaction records are retained for the period required by tax and accounting laws.
Enquiry and correspondence records are kept for as long as needed to resolve the matter and maintain accurate business records.
Where data is no longer needed, it is securely deleted, anonymised, or otherwise disposed of in a safe manner.

We regularly review our records to ensure data is not kept for longer than necessary.

8. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures may include access controls, secure systems, staff confidentiality obligations, and data minimisation practices. However, no system can be guaranteed to be completely secure, and we encourage customers to take care when sharing information.

9. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to conditions and exemptions depending on the circumstances.

Right of access: You may request a copy of the personal data we hold about you.
Right to rectification: You may ask us to correct inaccurate or incomplete data.
Right to erasure: You may request deletion of your data in certain situations.
Right to restriction: You may ask us to limit the way we use your data in certain cases.
Right to object: You may object to processing based on legitimate interests or direct marketing.
Right to data portability: You may request that we provide certain data in a structured, commonly used format where applicable.
Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time.

If you wish to exercise any of these rights, we will respond in accordance with applicable data protection law. We may need to verify your identity before acting on your request.

10. Children’s Data

Our services are generally not directed at children, and we do not knowingly collect personal data from children unless it is necessary in connection with a service arrangement and there is a lawful basis to do so. If we become aware that we have collected personal data unlawfully from a child, we will take appropriate steps to delete or safeguard it.

11. Automated Decision-Making

We do not ordinarily use fully automated decision-making that produces legal or similarly significant effects. If this changes, we will update this policy and provide information about the logic involved, the significance of the processing, and your rights relating to it.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or processing activities. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically to stay informed about how we handle personal data.

13. Summary of Our Commitment

Rubbish Collection London is committed to protecting personal information and using it responsibly. We collect only the data needed to provide and manage our services, process it on a valid lawful basis, retain it only for as long as necessary, and use carefully selected processors under appropriate safeguards. We also respect your rights and will deal with requests in line with the UK GDPR.

This Privacy Policy applies to all Rubbish Collection London customers in area. By using our services, you acknowledge that your personal data may be processed as described in this policy and that we will take reasonable steps to protect your privacy and security.