Waste Disposal Holland Park Privacy Policy

This Privacy Policy explains how Waste Disposal Holland Park collects, uses, stores and protects personal data about our customers and prospective customers in our service area. We are committed to complying with the UK General Data Protection Regulation and the Data Protection Act 2018.

This policy applies to all Waste Disposal Holland Park customers and individuals who make enquiries or use our waste collection and disposal services in our operating area, whether as domestic or commercial clients.

Who We Are

Waste Disposal Holland Park is a waste collection and disposal service provider operating in the Holland Park area. For the purposes of data protection law, we act as the data controller in relation to the personal data described in this policy. This means we decide how and why your personal data is used and are responsible for looking after it.

Personal Data We Collect

We collect and process different categories of personal data, depending on how you use our services:

Contact and identification data: name, title, address, email address, telephone number, business name and position where relevant.

Service and contract data: records of bookings, collection addresses, access instructions, waste type descriptions, service frequency, contract terms, pricing and payment status.

Billing and payment data: billing address, invoice history, payment method details as required to process payments or refunds. Card details are handled securely and, where processed by a payment provider, are not stored by us beyond what is necessary.

Communication data: information you provide when you contact us by phone, email or online form, including enquiries, complaints, feedback and any related correspondence.

Technical and usage data: basic technical information gathered when you use our website or digital tools, such as IP address, browser type, date and time of visits, pages visited and interaction data. This may be collected using cookies or similar technologies where permitted by law.

Operational data: information needed to carry out collections safely and effectively, such as access notes, contact person on site, photographs of waste where required for quotes or compliance, and service completion records.

How We Use Your Personal Data

We use your personal data for the following purposes:

To provide our services: arranging and carrying out waste collection and disposal, managing bookings, issuing invoices, processing payments and communicating with you about your service.

Customer administration: setting up and managing customer accounts, maintaining records, responding to queries, handling complaints, and maintaining service history.

Legal and regulatory compliance: keeping records required by law, including waste transfer documentation, financial records for tax and accounting, and supporting any regulatory inspections or legal claims.

Service improvement and business operations: monitoring the performance of our services, training staff, improving efficiency, maintaining security, and planning future services in our area.

Marketing and communications: sending you information about our services that may be of interest, where we are permitted to do so by law and you have not opted out. You can ask us to stop sending marketing communications at any time.

Lawful Bases for Processing

We rely on one or more of the following lawful bases under data protection law:

Contract: processing is necessary to enter into or perform a contract with you, such as when you request a quote, make a booking or maintain an ongoing service agreement with us.

Legal obligation: processing is necessary to comply with legal obligations, including waste management regulations, tax and accounting rules and other statutory record keeping requirements.

Legitimate interests: we process personal data for our legitimate business interests where these are not overridden by your rights. This includes improving our services, managing our relationship with you, protecting our business, preventing fraud, and promoting our services to existing and potential customers in a proportionate way.

Consent: in some limited cases we rely on your consent, for example for certain types of electronic marketing where it is required or where you have clearly chosen to receive specific communications. You can withdraw your consent at any time.

Data Retention

We keep personal data only for as long as it is reasonably necessary for the purposes described in this policy and to meet any legal, accounting or reporting requirements.

In general, we retain:

Service and contract records: for the duration of your relationship with us and for a period afterwards, typically up to six years from the end of the contract or last interaction, to address queries, handle complaints and meet legal obligations.

Financial and invoicing records: for at least the period required by tax and accounting law.

Communication records: for as long as needed to resolve your enquiry or complaint and for a reasonable period afterwards for reference and to improve our services.

Technical and usage data: for shorter periods necessary for security, analysis and performance monitoring, after which it is deleted or anonymised.

When data is no longer needed, we securely delete or anonymise it so that it can no longer be linked to you.

Data Sharing and Processors

We do not sell your personal data. We may share it only where necessary and with appropriate safeguards in place.

Service providers and processors: we may share personal data with trusted third parties who provide services to us, such as IT and hosting providers, payment processors, customer relationship management tools, waste transfer and disposal partners, and professional advisers such as accountants. These third parties process data only on our instructions and are required to protect it.

Regulators and authorities: we may disclose information to regulators, law enforcement bodies or public authorities where required by law or necessary to protect our legal rights or the rights, property or safety of others.

Business transfers: if we undergo a business reorganisation, sale or merger, personal data may form part of the transferred assets, subject to strict confidentiality and data protection safeguards.

Where we use data processors, we enter into written agreements requiring them to keep your data secure, use it only for specified purposes and comply with data protection law.

International Data Transfers

Our core operations are based in the UK and we aim to store and process personal data within the UK or the European Economic Area where possible. If we use service providers that transfer personal data outside these areas, we will ensure that appropriate safeguards are in place, such as adequacy regulations or standard contractual clauses, to protect your data.

Your Data Protection Rights

Under data protection law you have a number of rights in relation to your personal data. These rights apply to all Waste Disposal Holland Park customers in our service area, subject to certain legal conditions and exemptions:

Right of access: you can request a copy of the personal data we hold about you and information about how we use it.

Right to rectification: you can ask us to correct inaccurate or incomplete personal data.

Right to erasure: you can ask us to delete your personal data in certain circumstances, for example where it is no longer needed for the original purpose and we have no legal obligation to keep it.

Right to restriction: you can ask us to limit the way we use your personal data in certain situations, such as while we are considering a request to rectify it.

Right to data portability: for certain data processed by automated means and based on consent or contract, you may request that we provide it in a structured, commonly used and machine readable format or transfer it to another controller where technically feasible.

Right to object: you can object to our processing of your personal data where we rely on legitimate interests. You have an absolute right to object to direct marketing at any time.

Rights in relation to automated decision making: we do not carry out decisions based solely on automated processing that have legal or similarly significant effects on you.

To exercise your rights, please contact us using the details provided in your service documentation or on our usual customer contact channels. We may need to verify your identity before responding. We aim to respond to all valid requests within one month.

Security of Your Data

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. These measures include access controls, secure storage, staff training, and regular review of our procedures. While no system is completely secure, we work to ensure that the level of protection is appropriate to the risks involved.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or data protection practices. The latest version will apply to all personal data we process and will indicate the date of the most recent update.