Privacy Policy - Rubbish Removal Richmond

This Privacy Policy explains how Rubbish Removal Richmond collects, uses, stores, shares, and protects personal data when providing waste removal and related services. It applies to all Rubbish Removal Richmond customers in the area, including residential and commercial customers, enquiry recipients, and any person whose information is provided to arrange or manage a service. We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our services or communicating with us in connection with a booking, quote, invoice, collection, or service issue, you acknowledge that your personal information will be processed as described in this policy.

1. Information We Collect

We only collect personal data that is necessary for operating our services, responding to enquiries, and meeting our legal obligations. The types of information we may collect include:

Identity details such as your name, company name, and title where applicable.
Contact details including address, email address, and telephone number.
Service and booking information such as collection address, access instructions, service preferences, appointment times, and waste type.
Billing and payment information needed to manage invoices, payments, and financial records.
Communication records including emails, messages, notes from calls, complaints, and service requests.
Technical information that may be gathered when you interact with digital systems, such as IP address, device information, and basic usage data if relevant to service performance and security.

We do not seek to collect special category data unless it is absolutely necessary and you have provided it voluntarily or there is another lawful basis to do so. Please avoid sharing sensitive personal information unless required for the service.

2. How We Use Your Data

We use personal data only for defined purposes connected to our services. These may include:

Providing quotations and arranging waste removal services.
Managing bookings, collections, and service updates.
Identifying the correct property, access point, or collection requirements.
Handling invoices, payments, receipts, and accounting.
Responding to enquiries, complaints, and customer support requests.
Maintaining business records and service history.
Complying with tax, waste management, environmental, and other legal obligations.
Protecting against fraud, misuse, or unauthorised activity.

We do not use personal data for unrelated purposes unless we have informed you and have a lawful basis to do so.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for processing your personal data. Depending on the circumstances, we may rely on one or more of the following bases:

Contract

We process personal data where it is necessary to perform a contract with you or to take steps at your request before entering into a contract. This includes providing quotes, arranging collections, and delivering waste removal services.

Legal Obligation

We process some information to comply with legal requirements, including record-keeping, accounting, tax obligations, environmental duties, and waste transfer documentation where applicable.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided your interests and fundamental rights do not override those interests. This can include managing our operations, improving services, protecting our business, and maintaining secure records.

Consent

In limited situations, we may rely on your consent, for example where you have specifically agreed to certain communications or optional processing. When consent is used, you may withdraw it at any time.

Where special category data is involved, we will only process it if a valid legal condition applies and appropriate safeguards are in place.

4. Sharing Your Data and Processors

We may share personal data with trusted third parties where necessary for service delivery, administration, legal compliance, or business operations. These third parties act either as processors or separate controllers depending on the circumstances.

Processors are organisations that process personal data on our behalf and only according to our instructions. They may include:

Payment service providers.
Accounting and bookkeeping providers.
IT, cloud storage, and software providers.
Communication and customer management platforms.
Operational subcontractors involved in collection or disposal services where required.

We require processors to implement appropriate technical and organisational security measures and to process data only for authorised purposes. Where a processor is used, we aim to ensure a written contract is in place in line with GDPR requirements.

We may also disclose personal data if required by law, to regulatory authorities, to prevent crime or fraud, or to protect our rights, staff, customers, or property. We do not sell your personal data.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Retention periods vary depending on the type of information and the reason for processing.

Examples of retention principles include:

Booking and service records are retained for as long as needed to manage the customer relationship and resolve service issues.
Financial records are retained for the period required by tax and accounting law.
Communication records may be retained to evidence instructions, complaints, or dispute resolution.
Security or technical data is retained only as long as needed for operational monitoring and protection.

When data is no longer required, we will delete it securely or anonymise it where appropriate.

6. Data Security

We take appropriate measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. These measures may include restricted access, secure storage, password protection, staff confidentiality obligations, and supplier due diligence.

Although no system can be guaranteed to be completely secure, we aim to keep safeguards proportionate to the nature of the information we hold and the risks involved.

7. Your Rights

As a data subject, you have a number of rights under UK GDPR. Subject to legal conditions and exemptions, these may include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to ask us to limit how we process your data in certain cases.
Right to object – to object to processing based on legitimate interests or direct marketing, where applicable.
Right to data portability – to receive certain data in a structured, commonly used format where processing is based on consent or contract and carried out by automated means.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond in accordance with applicable law. We may need to verify your identity before fulfilling a request.

8. International Transfers

Where personal data is transferred outside the UK, we will only do so where appropriate safeguards are in place and the transfer complies with data protection law. This may include standard contractual protections or transfers to countries recognised as providing adequate protection.

9. Children’s Data

Our services are not directed to children, and we do not knowingly collect personal data from children except where it is incidental to a booking or service arrangement made by an adult responsible for the property or account. If we become aware that we have collected data unlawfully, we will take steps to delete it where required.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, service processes, or operational requirements. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically to stay informed about how we handle personal data.

11. Summary of Key Principles

In summary, Rubbish Removal Richmond processes personal data lawfully, securely, and only when necessary for providing rubbish removal services, managing customer relationships, and meeting legal obligations. We limit data collection to what is relevant, use appropriate processors under contract, retain data for no longer than needed, and respect the rights of every customer covered by this policy.

This policy applies to all Rubbish Removal Richmond customers in area and is intended to support transparency, accountability, and compliance with data protection law.