Waste Disposal Westminster Privacy Policy

This Privacy Policy explains how Waste Disposal Westminster collects, uses, stores and protects your personal data when you use our services. It applies to all Waste Disposal Westminster customers located in the Westminster area, including residential, commercial and public sector clients. We are committed to handling your information lawfully, fairly and transparently, in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018.

Data Controller and Contact

The data controller responsible for your personal data is Waste Disposal Westminster. If you have any questions about this Privacy Policy or how we process your personal data, you can contact us using the details provided on our main customer communications, invoices or service documentation.

Personal Data We Collect

We collect and process different types of personal data depending on how you interact with us and which services you use. The categories of data we may collect include:

Identification and contact details such as name, address, service location, telephone number and email address. These details are necessary to create and manage your account and provide waste collection and disposal services.

Service and contract information such as details of the services you request, type and frequency of collections, contract term, billing preferences and notes relevant to service delivery.

Billing and payment information such as invoice details, payment history, and limited payment details necessary for processing transactions. We do not store full payment card details when payments are processed through secure third party providers.

Communication data such as records of enquiries, complaints, feedback and correspondence by phone, email or other channels, including any information you choose to share with us in those communications.

Usage and technical data such as information relating to our website or digital platforms, including the date and time of visits, pages accessed, basic device and browser information, and log information generated to keep our systems secure and functioning correctly.

Operational data such as records of service visits, collection routes, access instructions for your premises, photographs of waste containers or locations where this is necessary for documenting service performance or compliance.

How We Use Your Personal Data

We process your personal data only for specific, explicit and legitimate purposes. These include:

To provide and manage waste disposal services, including setting up your account, scheduling and completing collections, managing access to your premises, responding to service requests and maintaining accurate service records.

To manage billing and payments, including issuing invoices, processing payments, handling payment queries and maintaining appropriate accounting records for tax and audit purposes.

To handle enquiries and complaints, including responding to your questions, investigating service issues, documenting outcomes and improving our services based on customer feedback.

To maintain safety, security and compliance, including monitoring compliance with relevant environmental and waste management regulations, preventing fraud or misuse of our services, and ensuring the security of our systems, staff and customers.

To improve and develop our services, including analysing service usage, operational efficiency and customer feedback so we can enhance our offerings, plan future capacity and deliver a better customer experience.

To send service related communications, including notifications about changes to collection times, service interruptions, amendments to terms and conditions, or updates to this Privacy Policy where relevant to your use of our services.

Lawful Basis for Processing

We will only process your personal data where we have a lawful basis to do so. Depending on the specific processing activity, we rely on the following lawful bases:

Contract: We process personal data when it is necessary to enter into or perform a contract with you, for example to provide waste collection services, manage your account and process payments.

Legal obligation: We process personal data when it is necessary to comply with legal and regulatory obligations, including environmental, health and safety, tax and accounting requirements, as well as record keeping obligations.

Legitimate interests: We process personal data where it is necessary for our legitimate business interests, and where these interests are not overridden by your rights and freedoms. This includes ensuring service quality, maintaining and improving our operations, preventing fraud and protecting our staff, customers and property.

Consent: In limited situations, we may rely on your consent, for example for certain types of optional marketing communications. Where we rely on consent, you have the right to withdraw your consent at any time.

Data Sharing and Processors

We do not sell your personal data. We may share your personal data with third parties where necessary for the purposes described in this Privacy Policy and where we have an appropriate lawful basis.

Service providers and processors: We use carefully selected third party processors to support our operations. These may include providers of payment processing, IT and cloud services, customer relationship management systems, route planning and scheduling tools, document storage, communications and printing services. These processors act on our instructions and are contractually required to protect your personal data and use it only for the services they provide to us.

Professional advisers and insurers: We may share data with our legal advisers, auditors, accountants, insurers and other professional advisers where necessary for managing our business, handling disputes, or complying with legal obligations.

Public authorities and regulators: We may be required to share data with regulators, law enforcement bodies, courts or other public authorities where necessary to comply with legal obligations or to protect our rights or the rights of others.

Group or business transfers: If the ownership or structure of our business changes, we may need to share your personal data with new owners or entities involved in a reorganisation, while continuing to protect your rights.

Data Retention

We keep your personal data only for as long as necessary for the purposes for which it was collected, and to meet our legal, accounting and reporting obligations.

Customer account and service records are generally retained for the duration of your contract with us and for a period afterwards to deal with queries, disputes or claims, and to comply with legal and regulatory requirements. This period will typically be up to six years from the end of the relevant contract or transaction, though some records may need to be retained longer where required by law or where there is an ongoing dispute.

Technical and usage data related to our digital systems may be retained for shorter periods, necessary for security, troubleshooting and operational analysis, after which it is anonymised or deleted.

When we no longer need to retain personal data, we will securely delete or anonymise it so that it can no longer be linked to an identifiable individual.

International Data Transfers

Where we use service providers that process personal data outside the United Kingdom or European Economic Area, we take appropriate steps to ensure that your personal data remains protected. This may include relying on adequacy decisions or implementing standard contractual clauses or equivalent safeguards, together with additional technical and organisational measures where required.

How We Protect Your Data

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or damage. These measures include access controls, staff training, secure systems and regular review of our security practices. While no system can be completely secure, we work to ensure that the level of protection is appropriate to the nature and sensitivity of the data we hold.

Your Data Protection Rights

As a data subject, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions under data protection law:

Right of access: You can request confirmation that we process your personal data and obtain a copy of the personal data we hold about you.

Right to rectification: You can ask us to correct inaccurate or incomplete personal data.

Right to erasure: In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected and we have no other lawful basis for retaining it.

Right to restriction: You can ask us to restrict the processing of your personal data in certain situations, such as while we are verifying its accuracy or considering an objection you have raised.

Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine readable format and to request that we transfer it to another controller where technically feasible.

Right to object: You can object to processing based on our legitimate interests, including profiling, and we will stop processing unless we have compelling legitimate grounds that override your interests, rights and freedoms, or where processing is required for legal claims.

Right to withdraw consent: Where we rely on your consent for processing, you can withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

You also have the right to lodge a complaint with the UK data protection authority if you are concerned about how we handle your personal data. We encourage you to contact us first so we can try to resolve your concerns directly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations or the way we process personal data. The updated version will apply from the date it is made available. You should review this policy periodically to stay informed about how we protect your personal data as a customer of Waste Disposal Westminster in the Westminster area.