Waste Disposal Sutton Privacy Policy

This Privacy Policy explains how Waste Disposal Sutton collects, uses, discloses and protects personal data relating to our customers and prospective customers in the Sutton area. It applies to all individuals who request, use or enquire about our waste collection, rubbish removal, recycling or related services within Sutton.

We are committed to handling personal data in accordance with the UK General Data Protection Regulation and all applicable data protection laws. This Privacy Policy explains the types of personal data we collect, the purposes for which we use it, the lawful bases we rely on, how long we keep it, who we share it with and the rights you have in relation to your personal data.

Who We Are

Waste Disposal Sutton is a waste management service provider operating in the Sutton area, serving domestic and commercial customers. For the purposes of data protection law, we act as the data controller in relation to the personal data described in this Privacy Policy. This means we determine how and why your personal data is processed.

Personal Data We Collect

We collect and process different types of personal data depending on how you interact with us. This may include:

Identification and contact details such as name, address, postcode, telephone number, mobile number and email address. Service information such as details of the services you request or receive from us, service dates and times, pick up or delivery addresses, property access notes and information about waste types and volumes. Communication records such as enquiries, complaints, feedback and correspondence between you and us by phone, email, online forms or other communication channels. Transaction and billing data such as payment records, invoices, bank account details you provide for payment or refunds, and information relating to your chosen payment method. Usage and technical data where applicable, such as information about how you use our website or online booking tools, including device information, IP address, and basic analytics. Marketing preferences such as your choices about receiving marketing or updates from us and your communication preferences.

We generally do not seek to collect special category data such as information relating to health, race or ethnic origin, unless it is strictly necessary and you choose to provide it, for example, to arrange reasonable adjustments for service access. In those limited cases we will process such data only in accordance with applicable law.

How We Collect Personal Data

We collect personal data in several ways, including when you contact us by phone, email or online to request a quote or book a service, when you complete forms or provide details at the time of service, when you communicate with our staff in person at your premises, when you visit our website or interact with our online services, and when third parties such as property managers or commercial partners provide your details to enable us to deliver services you have requested.

Purposes and Lawful Basis for Processing

We use your personal data only where we have a lawful basis under data protection law. The main purposes and lawful bases are:

To provide and manage our services. We process your identification, contact, service and billing data to provide you with quotes, confirm bookings, collect waste, issue invoices and manage your account. The lawful basis is performance of a contract or taking steps at your request before entering into a contract.

To communicate with you. We use your contact details and communication records to respond to enquiries, handle complaints, send service confirmations and keep you informed about issues affecting your bookings. The lawful basis is performance of a contract and our legitimate interests in providing effective customer service.

To administer billing and payments. We process transaction and billing data to manage payments, refunds, debt recovery and accounting. The lawful basis is performance of a contract and our legitimate interests in managing our business operations.

To improve and develop our services. We may use service and usage information to monitor performance, manage capacity and improve our operations. The lawful basis is our legitimate interests in running and developing our business in an efficient and secure manner.

To send marketing communications. With your consent, or where permitted by law on the basis of our legitimate interests, we may use your contact details to send you information about our services, special offers or updates that may be relevant to you. You can opt out of marketing at any time.

To comply with legal obligations. We may process personal data where necessary to comply with our legal and regulatory obligations, including record keeping, tax and reporting duties, and responding to lawful requests from public authorities.

Data Retention

We will not keep your personal data for longer than is necessary for the purposes for which it was collected. We take into account the amount, nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, and any legal or regulatory requirements.

Generally, we keep customer account and service records for as long as you remain a customer and for a defined period afterward to deal with queries, disputes or legal claims. Financial and transaction records are typically retained for a number of years to comply with tax and accounting rules. Enquiry and communication records may be retained for a shorter period where they are not linked to an ongoing customer relationship.

When personal data is no longer required, we will securely delete, anonymise or destroy it in accordance with our data retention procedures.

Processors and Sharing of Personal Data

We use carefully selected third party service providers to help us deliver our services and run our business. These providers act as data processors and process personal data on our behalf only in accordance with our instructions and for the purposes set out in this Privacy Policy.

Such processors may include payment processing providers, IT and system support providers, data hosting and storage providers, customer management and communication services, subcontracted waste collection or disposal partners, and professional advisers such as accountants or legal advisers.

We require all processors to implement appropriate technical and organisational measures to protect personal data and to keep it confidential. They are not permitted to use your personal data for their own purposes.

We may also share personal data with third parties where required by law, for example with law enforcement, regulatory bodies or courts, or in connection with legal proceedings. If we are involved in a business sale or restructuring, your data may be disclosed to prospective purchasers or partners, subject to appropriate confidentiality obligations.

International Transfers

Our main operations are based in the United Kingdom and we aim to keep personal data within the UK or the European Economic Area where possible. If we transfer personal data to countries outside this area, we will ensure that appropriate safeguards are in place, such as standard contractual clauses or other lawful transfer mechanisms, to protect your data to standards equivalent to those in the UK.

Security of Your Personal Data

We take reasonable and appropriate technical and organisational measures to protect personal data from unauthorised access, accidental loss, destruction or damage. These measures include access controls, secure storage, staff training, and procedures for handling suspected data breaches. While we strive to protect your data, no transmission or storage system can be guaranteed as completely secure.

Your Data Protection Rights

Under data protection law you have a number of rights in relation to your personal data. These rights may be subject to certain conditions and legal exemptions. They include the right to request access to your personal data and receive a copy of the information we hold about you, the right to request correction of inaccurate or incomplete data, the right to request deletion of your personal data where there is no good reason for us to continue processing it, the right to request restriction of processing in certain circumstances, the right to object to processing based on our legitimate interests or for direct marketing, the right to data portability to receive your data in a structured, commonly used and machine readable format and to transmit it to another controller, and the right to withdraw consent at any time where processing is based on your consent.

If you wish to exercise any of these rights, please contact us using the details provided on our website or in your service documentation. We may need to verify your identity before responding to your request. We aim to respond within the timescales set by law.

Complaints

If you have concerns about how we handle your personal data, we encourage you to contact us so that we can try to resolve the issue. You also have the right to lodge a complaint with the relevant data protection supervisory authority in the United Kingdom.

Scope and Updates

This Privacy Policy applies to all Waste Disposal Sutton customers and service users located in the Sutton area. By using our services or contacting us for a quote or enquiry, you acknowledge that you have read and understood this Privacy Policy.

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or data protection practices. Any changes will take effect from the date of publication. You should review this page periodically to stay informed about how we process your personal data.