Rubbish Collection Ealing Privacy Policy

This Privacy Policy explains how Rubbish Collection Ealing collects, uses, shares and protects your personal data in connection with our rubbish and waste collection services. It applies to all Rubbish Collection Ealing customers and prospective customers within our service area in and around Ealing, as well as individuals who contact us or visit our website.

Who we are and how to contact us

Rubbish Collection Ealing is a waste collection and related services provider operating in the Ealing area. For the purposes of data protection law, we are the data controller in relation to the personal data described in this Privacy Policy.

If you have any questions about this Privacy Policy or about how we handle your personal data, you can contact us using the details provided on your service agreement or on our usual customer communication channels.

What personal data we collect

We collect and process different types of personal data depending on how you interact with us. The categories of data we may collect include:

Identity and contact information such as your name, title, address, email address, telephone number and, where applicable, business name and job title.

Service and account information such as service addresses, property type, collection preferences, records of services provided, contract details, billing history and correspondence records.

Payment and transaction information such as payment method details, payment status, invoices, transaction dates and amounts. We do not store full payment card details where a third party payment processor is used.

Communication data such as records of phone calls, emails, messages or other communications you send to us or that we send to you, including enquiries, complaints and feedback.

Technical and usage data such as IP address, device identifiers, browser type, approximate location data, and information about how you access and use our website and online services, to the extent this is collected by our website or related tools.

Regulatory and safety information such as records needed to comply with health and safety obligations, waste transfer notes and records needed to comply with environmental or local authority requirements.

How we collect personal data

We collect personal data directly from you when you contact us to request a quote, set up an account, book a collection, make a payment, sign a contract, complete a form, or communicate with us by phone, email or other means.

We may also collect data automatically when you use our website, for example through log files and similar technologies that record technical and usage information.

On occasion we may receive personal data about you from third parties, such as payment processors, business partners, local authorities or property managers, but only where this is necessary to provide our services or to comply with legal obligations.

Purposes and lawful bases for processing

We only process your personal data where we have a lawful basis under data protection law. The main purposes and legal bases are:

To provide and manage our services. We use your data to set up and manage your account, arrange and perform rubbish collection and related services, issue invoices, take payments, and communicate with you about your service. The lawful basis is the performance of a contract or steps taken at your request before entering into a contract.

To communicate with you. We use your contact details to respond to enquiries, handle complaints, send service updates and essential notices, and manage the customer relationship. The lawful basis is the performance of a contract and our legitimate interests in operating and improving our services.

To comply with legal and regulatory obligations. We process certain data to meet our obligations under waste management, environmental, tax, accounting, health and safety and other applicable laws. The lawful basis is compliance with a legal obligation.

To manage our business and improve services. We may use aggregated and, where possible, anonymised data to analyse service performance, manage routes and resources, train staff, prevent fraud and improve our services. The lawful basis is our legitimate interests in running and developing our business.

Marketing communications. Where permitted, we may use your contact details to send you information about our services that may be of interest. Where required by law, we will ask for your consent before sending marketing by electronic means, and you may withdraw your consent at any time.

Data sharing and processors

We do not sell your personal data. We may share your data with selected third parties where necessary for the purposes described in this Privacy Policy and where appropriate safeguards are in place.

Service providers and processors. We may share personal data with third party companies that provide services on our behalf, such as payment processors, IT and hosting providers, customer management platforms, communication tools, route planning or logistics providers, professional advisers and document storage services. These organisations act as data processors and are only permitted to process your data on our instructions and for specified purposes.

Authorities and regulators. We may share personal data with local authorities, environmental agencies, law enforcement, tax authorities or other public bodies where required by law, to comply with legal processes or to protect our rights and the safety of others.

Business transfers. In the event that we sell or restructure our business or assets, personal data may be transferred to a buyer or new operator as part of that transaction, subject to appropriate confidentiality and data protection safeguards.

International transfers

Where we use service providers located outside the United Kingdom or the European Economic Area, your personal data may be transferred to countries that do not provide the same level of data protection as in your home jurisdiction. In such cases, we will ensure that appropriate safeguards are in place, such as standard contractual clauses or equivalent measures, to protect your data in accordance with applicable law.

Data retention

We retain your personal data only for as long as is reasonably necessary for the purposes for which it was collected, including to meet any legal, regulatory, tax, accounting or reporting requirements.

The retention period will vary depending on the type of data and the purpose of processing. For example, customer account and contract information may be retained for the duration of your relationship with us and for a period afterwards to deal with queries or disputes. Financial and transaction records will typically be retained for the period required by tax and accounting laws.

When personal data is no longer required, we will securely delete or anonymise it so that it can no longer be linked to an identifiable individual.

Your data protection rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions and exemptions. They include:

Right of access. You have the right to request confirmation that we process your personal data and to receive a copy of the personal data we hold about you, together with certain information about how we use it.

Right to rectification. You have the right to ask us to correct inaccurate personal data and to complete incomplete data.

Right to erasure. In certain circumstances, you have the right to request that we delete your personal data. This right is not absolute and does not apply where we must retain data to comply with legal obligations or to establish, exercise or defend legal claims.

Right to restriction. You may ask us to restrict the processing of your personal data in specific situations, for example while we investigate a concern you have raised.

Right to data portability. In some cases, you may request that we provide your personal data in a structured, commonly used and machine readable format, or that we transmit it to another controller, where technically feasible.

Right to object. You have the right to object to certain types of processing, including processing based on our legitimate interests and processing for direct marketing. If you object to marketing, we will stop sending you marketing communications.

Rights in relation to automated decision making. Rubbish Collection Ealing does not carry out automated decision making that produces legal or similarly significant effects on you without human involvement.

You can exercise your rights by contacting us using the details provided in your service documentation or usual communication channels. We may need to verify your identity before responding to your request. There is normally no fee for exercising your rights, although we may charge a reasonable fee or refuse to act on excessive or unfounded requests.

Your right to complain

If you have concerns about how we handle your personal data, we encourage you to contact us first so that we can try to resolve the issue. You also have the right to lodge a complaint with your local data protection authority if you believe your rights have been infringed.

Security of your data

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, alteration or destruction. These measures include access controls, staff training, secure storage and, where appropriate, encryption or pseudonymisation.

While we strive to protect your personal data, no system can be completely secure. You are responsible for keeping your own account details and passwords confidential and for notifying us promptly if you suspect any unauthorised use of your information.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or operational needs. When we make significant changes, we will take reasonable steps to inform you, for example by updating the version on our website or notifying you through our usual communication channels. The date of the most recent update will be indicated in the policy text.

By continuing to use our services after any update to this Privacy Policy, you acknowledge that you have read and understood the updated terms.