Rubbish Removal Surrey Privacy Policy

This Privacy Policy explains how Rubbish Removal Surrey collects, uses, stores, and protects your personal data when you use our rubbish removal and related services. It applies to all Rubbish Removal Surrey customers and prospective customers within our service area in Surrey. We are committed to protecting your privacy and handling your personal data in compliance with the UK General Data Protection Regulation and the Data Protection Act 2018.

Who We Are

Rubbish Removal Surrey is a waste and rubbish removal service operating in the Surrey area. For the purposes of data protection law, we act as the data controller for the personal data we collect about our customers, prospective customers, and website visitors.

If you have any questions about this Privacy Policy or about how we handle your personal data, you can contact us using the contact details provided on our website or on your service documentation.

Personal Data We Collect

We may collect and process the following categories of personal data about you:

Contact details: name, address, email address, telephone number, and any alternative contact details you provide.

Service and booking details: property type, access instructions, preferred dates and times, description of items or waste to be collected, photographs you provide to help us quote or plan a job, and notes relating to special requirements.

Account and communication data: records of enquiries, quotes, bookings, complaints, and other communications between you and us, including emails, phone call notes, and messages submitted through our contact forms.

Payment information: details required to process your payment, such as partial card details or transaction references. Card details are generally processed directly by our payment processor and are not stored in full by us.

Technical and usage data: limited technical data from your use of our website, such as IP address, browser type, and pages visited. This may be collected through cookies or similar technologies, where permitted by law and your browser settings.

Legal and regulatory data: information required for regulatory compliance and waste transfer documentation, such as waste transfer notes, consignment notes, and records needed to comply with environmental and tax laws.

How We Collect Your Data

We collect personal data directly from you when you contact us, request a quote, make a booking, use our services, or communicate with us by phone, email, online form, or in person. We may also collect personal data when you interact with our website.

We may receive limited personal data about you from third parties such as payment processors or advertising platforms, but only where this is necessary to provide our services, manage your booking, or measure the performance of our advertising.

Purposes and Lawful Bases for Processing

We process your personal data only where we have a lawful basis under data protection law. The main purposes and legal bases are as follows:

To provide our services: We use your contact and service details to provide quotes, arrange collections, manage bookings, carry out rubbish removal, and issue invoices. The lawful basis is performance of a contract or taking steps at your request before entering into a contract.

To communicate with you: We use your contact details and communication data to respond to enquiries, confirm and update bookings, handle complaints, and provide customer support. The lawful basis is performance of a contract and our legitimate interests in managing our customer relationships.

To process payments: We use payment and transaction information to take payment for services and to handle refunds where applicable. The lawful basis is performance of a contract and compliance with legal and accounting obligations.

To comply with legal and regulatory obligations: We may process your data to maintain records required by waste management, environmental, tax, and accounting laws. The lawful basis is compliance with a legal obligation.

To improve and protect our business: We may use technical and usage data to monitor and improve our website, services, and security, and to protect against fraud or misuse. The lawful basis is our legitimate interests in operating and improving our business and safeguarding our systems.

Marketing and promotions: If we send you marketing communications about our services, we will do so on the basis of your consent or our legitimate interests, in accordance with applicable marketing and e-privacy rules. You can opt out of marketing communications at any time.

Data Sharing and Processors

We do not sell your personal data. We may share your personal data with trusted third parties where necessary for the purposes described above. These third parties act as data processors or independent controllers, depending on the circumstances.

Data processors acting on our behalf may include:

Payment service providers that process your payments securely.

IT service providers that host our systems, website, email, and data storage.

Customer management and communication tools that help us manage bookings and correspondence.

Professional advisers such as accountants or lawyers where necessary for legal or regulatory reasons.

Where we use processors, they are only permitted to process your personal data in accordance with our instructions and must implement appropriate technical and organisational measures to protect your data.

We may also share personal data with public authorities, regulators, or law enforcement where required by law or to protect our rights, property, or safety, or the rights, property, or safety of others.

International Data Transfers

Some of our service providers may be located outside the United Kingdom or the European Economic Area. Where your personal data is transferred internationally, we will ensure that appropriate safeguards are in place, such as reliance on adequacy regulations or standard contractual clauses, to ensure that your rights and protections travel with your data.

Data Retention

We keep your personal data only for as long as is reasonably necessary for the purposes for which it was collected, including to provide our services, meet legal, regulatory, tax, and accounting requirements, and resolve disputes.

In general, we retain customer records and related service documents, including waste transfer notes and invoices, for up to seven years from the end of our relationship with you, unless a longer retention period is required or permitted by law.

Technical and usage data may be kept for shorter periods, typically for as long as needed to analyse website performance, maintain security, and improve our services.

When personal data is no longer required, we will delete or anonymise it securely.

Your Data Protection Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights are subject to certain conditions and exceptions. Your rights include:

Right of access: You can request confirmation of whether we process your personal data and obtain a copy of the personal data we hold about you, together with related information.

Right to rectification: You can ask us to correct or complete inaccurate or incomplete personal data.

Right to erasure: In certain circumstances, you can request that we delete your personal data, for example, where it is no longer needed for the purposes for which it was collected or where you withdraw consent and there is no other legal basis for processing.

Right to restriction: You can request that we restrict our processing of your personal data in certain situations, such as while we are verifying its accuracy or assessing an objection.

Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may request a copy of your personal data in a structured, commonly used, machine-readable format and ask that it be transmitted to another controller where technically feasible.

Right to object: You can object to our processing of your personal data where we are relying on legitimate interests as our lawful basis, including profiling based on those interests. You also have an absolute right to object at any time to the use of your personal data for direct marketing.

Right to withdraw consent: Where we rely on your consent to process your personal data, you can withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.

To exercise any of your rights, please contact us using our published contact details. We may need to verify your identity before responding to your request.

Security of Your Personal Data

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These measures include access controls, secure storage, and staff training. While we strive to protect your personal data, no system is completely secure, and you provide your data at your own risk.

Complaints

If you are concerned about how we handle your personal data, please contact us in the first instance so that we can try to resolve the issue. You also have the right to lodge a complaint with the UK Information Commissioner's Office or with your local supervisory authority if you are located elsewhere.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or how we process personal data. Any changes will be published on this page with an updated effective date. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.