Rubbish Collection Shoreditch Privacy Policy

This Privacy Policy explains how Rubbish Collection Shoreditch collects, uses, stores and protects personal data relating to customers in the Shoreditch area. It also outlines your rights under the UK General Data Protection Regulation and the Data Protection Act 2018. This policy applies to all Rubbish Collection Shoreditch customers and prospective customers whose personal data we process in connection with our rubbish and waste collection services within the Shoreditch area.

Who We Are

Rubbish Collection Shoreditch is a local waste and rubbish collection service provider operating in the Shoreditch area. For the purposes of data protection law, we act as the data controller in relation to the personal data described in this Privacy Policy. This means we determine the purposes and means of processing your personal information.

Personal Data We Collect

We collect and process personal data that is necessary to provide and manage our services. The types of personal data we may collect include:

Identification and contact details, such as your name, address, property type, email address and phone number. Service information, including details of the services you request, property access instructions, collection dates, frequency of collections, size and type of waste, photographs of collections where needed to document the service, and notes about any service preferences. Payment and billing information, such as partial payment card details processed through secure payment processors, bank account details for bank transfers, invoice records, billing address and transaction history. Communication data, including emails, messages, telephone call notes, and any feedback, complaints or enquiries you send to us. Technical and usage information, such as your IP address, browser type, device information and usage data relating to how you access and use our website and online booking tools, where applicable.

How We Collect Personal Data

We collect personal data in several ways. Directly from you when you contact us by phone, email or through online forms, when you request a quote, make a booking, set up an account or correspond with us. Automatically when you use our website or digital tools, through cookies and similar technologies that collect technical and usage information. From third parties where permitted by law and where relevant to our services, such as payment processors, marketing platforms, and service partners who help us deliver our rubbish collection services.

Purposes and Lawful Bases for Processing

We only process your personal data where we have a lawful basis under data protection law. The purposes and corresponding lawful bases include:

To provide our rubbish collection services to you, including handling bookings, scheduling collections, delivering the service at your property and managing your account. The lawful basis is performance of a contract or taking steps at your request prior to entering into a contract. To process payments, issue invoices, manage fees and handle refunds. The lawful basis is performance of a contract and compliance with legal obligations relating to tax and accounting. To communicate with you about your bookings, service updates, changes to collection times and responses to your enquiries or complaints. The lawful basis is performance of a contract and our legitimate interests in providing effective customer service. To improve and manage our business operations, including quality control, staff training, planning routes and optimising our services. The lawful basis is our legitimate interests in running and improving our business efficiently. To send you service related information and limited marketing about similar services that we think may be of interest. The lawful basis is our legitimate interests in promoting our services, except where consent is required by law. You can opt out of marketing at any time. To comply with legal and regulatory obligations, such as tax, accounting, health and safety and environmental regulations. The lawful basis is compliance with legal obligations. To protect our rights and the rights of others, including preventing fraud, resolving disputes and enforcing our agreements. The lawful basis is our legitimate interests in protecting our business and legal rights.

Data Retention

We keep personal data only for as long as is necessary for the purposes for which it was collected, or as required by law. The exact retention period depends on the type of data and our legal obligations.

Customer and service records, including contact details, booking information and service notes, are generally retained for up to six years after the end of our relationship, in line with limitation periods for legal claims. Payment and financial records, including invoices and transaction histories, are retained for at least six years to meet tax and accounting requirements. Communication records such as emails, enquiries and complaint records are normally kept for up to six years after resolution, depending on their relevance to our ongoing relationship and legal obligations. Technical and usage data collected through our website may be kept for shorter periods, typically up to two years, unless needed for security, fraud prevention or legal reasons.

When data is no longer required, we will securely delete or anonymise it, ensuring that it can no longer be linked to you.

Data Processors and Third Party Recipients

We use carefully selected third party service providers to help us operate our business and deliver our services. These providers act as data processors and are only permitted to process your personal data in accordance with our instructions and for the purposes we specify.

Examples of third party processors and recipients include payment processors and banking providers that handle card payments and bank transfers. Information technology and hosting providers that host our website, email services, booking tools and data storage. Customer service tools that help us manage communications, enquiries and service requests. Professional advisers such as accountants, auditors or legal advisers who may access personal data where necessary for their services. Regulatory and law enforcement authorities where we are legally obliged to provide information.

We require all processors to implement appropriate technical and organisational measures to protect your personal data and to comply with data protection law.

International Data Transfers

If any of our processors or service providers are located outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place before any personal data is transferred. These safeguards may include using countries with an adequacy decision or entering into standard contractual clauses approved by relevant authorities. We will take steps to ensure your data remains protected to a standard that is essentially equivalent to that in the United Kingdom.

Data Security

We take data security seriously and implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction or damage. Measures may include secure servers, access controls, encryption in transit where appropriate, regular security reviews and staff training on data protection responsibilities. While we strive to protect your personal data, no system is completely secure, and you should take care when sharing information with us, especially over the internet.

Your Data Protection Rights

Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions.

Right of access. You can request confirmation of whether we process your personal data and ask for a copy of that data, along with information about how it is used. Right to rectification. You can ask us to correct any inaccurate or incomplete personal data we hold about you. Right to erasure. In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected, or where you withdraw consent and there is no other lawful basis for processing. Right to restriction of processing. You can ask us to restrict the processing of your data in certain situations, such as while we verify its accuracy or consider an objection. Right to data portability. Where processing is based on consent or contract and carried out by automated means, you can request that we provide your personal data in a structured, commonly used and machine readable format, or ask us to transmit it to another controller where technically possible. Right to object. You can object to processing based on our legitimate interests, including profiling, and we will stop processing unless we can demonstrate compelling legitimate grounds. You can always object to direct marketing, and we will respect this choice. Rights related to automated decision making. We do not carry out automated decision making that produces legal effects or similarly significant effects on you.

To exercise any of these rights, please contact us using the details provided in the Contact Us section. We may need to verify your identity before responding to your request. We aim to respond within one month, in accordance with legal requirements.

Children

Our services are not directed at children, and we do not knowingly collect personal data relating to individuals under the age of 18 for the purpose of entering into service contracts. If you believe that we have collected personal data from a child without appropriate consent, please contact us so that we can take appropriate action.

Changes To This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or operational needs. Any significant changes will be highlighted on our website or communicated to you where appropriate. The date of the latest version will be indicated at the end of this document. Your continued use of our services following an update indicates that you have read and understood the revised policy.

Contact Us And Complaints

If you have any questions about this Privacy Policy, how we handle your personal data, or if you wish to exercise your data protection rights, you can contact us using our usual customer contact channels in the Shoreditch area. We will do our best to resolve any concerns.

You also have the right to lodge a complaint with the UK supervisory authority for data protection if you are unhappy with how we have used your data. We encourage you to contact us first so that we can try to resolve your concerns directly.

Last updated: 01 December 2025