Waste Disposal Kensington Privacy Policy

This Privacy Policy explains how Waste Disposal Kensington collects, uses, discloses and protects personal data of its customers and prospective customers in the Kensington area. It also explains your rights under the UK General Data Protection Regulation and the Data Protection Act 2018.

This Privacy Policy applies to all Waste Disposal Kensington customers, including residential, commercial and public sector clients, as well as any person who contacts us with an enquiry or request for services in the Kensington area.

Who we are and how to contact us

Waste Disposal Kensington is a waste collection and disposal service operating in the Kensington area. We are the controller of the personal data we process in connection with our services.

If you have any questions about this Privacy Policy or about how we handle your personal data, or if you wish to exercise your data protection rights, you can contact us using the details provided on our usual customer communications or invoices, clearly marking your request as a data protection enquiry.

Personal data we collect

We may collect and process the following categories of personal data about you:

Identity and contact details: name, title, address, email address, telephone numbers, and where relevant the name and contact details of your organisation and your role or job title.

Service information: details of the waste disposal or related services you request or receive from us, service addresses, access instructions, property type, bin or container information, collection schedules and service preferences.

Billing and payment information: billing address, payment status, service charges, records of invoices and payments. We do not store full payment card numbers or security codes; where card payments are taken, these are processed by secure payment processors acting on our behalf.

Communication records: records of enquiries, complaints, feedback or other communications with us by phone, email or other channels, including time, date and details of the communication.

Technical and usage data: limited technical data related to the use of our online services where relevant, such as IP address, device type and basic usage information necessary to operate and secure our website or online booking tools.

Compliance and safety information: information required to meet our legal obligations, such as records of incidents, insurance-related information or evidence required for the handling of hazardous or restricted waste where applicable.

Lawful bases for processing your data

We process your personal data only where permitted by data protection law. Depending on the context, we rely on the following lawful bases:

Contract: we process personal data that is necessary to enter into and perform a contract with you or your organisation, for example to set up your account, deliver waste disposal services, manage bookings, issue invoices and manage payments.

Legal obligation: we process personal data where this is required to comply with our legal and regulatory obligations, such as waste management regulations, accounting and tax rules, and health and safety requirements.

Legitimate interests: we process personal data where this is necessary for our legitimate business interests, provided that your interests and fundamental rights do not override those interests. This includes managing and improving our services, handling customer queries, maintaining accurate records, preventing fraud or misuse of our services and ensuring network and information security.

Consent: in limited cases we may rely on your explicit consent, for example for certain optional marketing communications where required by law. Where we rely on consent, you may withdraw it at any time.

How we use your personal data

We use the personal data we collect for the following purposes:

To provide and manage waste disposal services, including arranging collections, managing service schedules, responding to changes and ensuring safe and lawful handling of waste.

To manage our relationship with you, including responding to enquiries, handling complaints, providing customer support and communicating important updates about your services.

To administer billing and payments, including preparing and sending invoices, processing payments, managing accounts and keeping appropriate business and financial records.

To manage and improve our operations, including monitoring service performance, training staff, improving routes, using aggregated data for planning and ensuring health and safety.

To comply with legal and regulatory requirements, including record keeping for tax and accounting purposes, waste tracking requirements, environmental reporting and responding to requests from public authorities where lawfully required.

To send you information about our services, service changes or related offerings where permitted by law and, where required, with your consent.

Data sharing and processors

We do not sell your personal data. We may share your personal data with third parties only where necessary and lawful. These third parties may include:

Service providers acting as processors who provide services to us, such as IT and hosting providers, payment processors, customer support tools, document storage providers, route planning software and professional advisers such as accountants. These providers may only process your personal data on our documented instructions and must implement appropriate security measures.

Waste transfer and disposal partners involved in the handling, treatment or recycling of waste collected from you, where sharing is necessary to fulfil the service or comply with legal requirements.

Professional advisers such as insurers, lawyers, auditors or consultants involved in managing claims, disputes, compliance matters or business operations, where they have a legitimate need to access certain information.

Public authorities, regulators, law enforcement or courts, where we are legally required to share data or where sharing is necessary to protect our rights, your safety or the safety of others.

If at any point we reorganise or transfer parts of our business, your personal data may be transferred as part of that process, in accordance with data protection law.

Data retention

We keep your personal data only for as long as is necessary for the purposes for which it was collected, including to meet any legal, accounting or reporting requirements.

In general, we will retain customer account and service records for as long as you are a customer and for a reasonable period after the end of the relationship, typically up to six years, to comply with tax and contract law, handle queries and manage any potential claims.

Where data is no longer required for the original purpose and no legal obligation requires retention, we will securely delete, anonymise or aggregate the data so that it can no longer identify you.

International transfers

Where we use service providers located outside the United Kingdom or the European Economic Area, your personal data may be transferred to countries that do not have the same level of data protection laws. In such cases, we will ensure that appropriate safeguards are in place, such as using standard contractual clauses or relying on an adequacy decision, to protect your personal data in accordance with applicable law.

How we protect your data

We take appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. These measures include access controls, staff training, secure storage solutions and procedures for managing data security incidents.

Your data protection rights

Under data protection law, you have a number of rights in relation to your personal data. These rights apply to all Waste Disposal Kensington customers in the Kensington area, subject to certain legal conditions and exemptions.

Right of access: you have the right to obtain confirmation as to whether we process your personal data and to request a copy of the personal data we hold about you.

Right to rectification: you have the right to request that inaccurate or incomplete personal data is corrected or updated.

Right to erasure: in certain circumstances you have the right to request that we delete your personal data, for example where the data is no longer needed for the original purpose or where you withdraw consent and there is no other legal basis for processing.

Right to restriction of processing: you have the right to request that we restrict processing of your personal data in certain situations, for example while we verify accuracy or consider an objection.

Right to data portability: where processing is based on consent or contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine readable format and to request that it is transmitted to another controller where technically feasible.

Right to object: you have the right to object to processing based on our legitimate interests, including profiling based on those interests, and we will stop processing unless we can demonstrate compelling legitimate grounds. You also have the absolute right to object to direct marketing at any time.

Rights related to automated decision making: where we use automated decision making that has legal or similarly significant effects, you have the right to obtain human intervention, to express your point of view and to contest the decision.

To exercise any of these rights, please contact us using the details given in our usual customer correspondence, clearly describing your request. We may need to verify your identity before responding. We aim to respond within one month, or within any extended period allowed by law where your request is complex.

You also have the right to lodge a complaint with the Information Commissioner's Office if you are unhappy with how we handle your personal data. We encourage you to contact us first so that we can try to resolve your concerns.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time in response to legal, technical or business developments. When we make changes, we will revise the effective date and take appropriate steps to inform you, depending on the significance of the changes. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.