Your Privacy Matters
WasteRound Ltd takes your personal privacy seriously. We never sell customer details, and we process personal information strictly in accordance with UK Data Protection Legislation and the Environmental Protection Act 1990.
1 Introduction, Scope & Data Controller
This Privacy Policy applies between you, the User of this website, and WASTEROUND LTD ("WasteRound", "we", "us", "our"), the owner and operator of wasteround.co.uk.
For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, WASTEROUND LTD is the designated Data Controller:
- Company Name: WASTEROUND LTD (Company Registered in England & Wales No. 17425036)
- Registered Office: 74 Uxendon Hill, Wembley, HA9 9SL, England
- Privacy Email: enquiries@wasteround.co.uk
- Operational Dispatch: +44 7990 270937
2 What Personal Data We Collect
Depending on how you interact with our website, booking wizard, or customer service team, we may collect the following categories of data:
Quote & Enquiry Data
Your name, telephone number, email address, collection postcode, rubbish photos submitted via WhatsApp or web forms, and job notes.
Booking & Address Data
Collection street address, parking notes, building access codes, floor level, preferred time slots, and selected items/load size.
Waste Transfer Records
Transferor name, site address, waste description, European Waste Catalogue (EWC) codes, and customer signature required by statutory Duty of Care.
Technical & Usage Data
IP address, browser type, device specifications, operating system, and anonymous interaction analytics gathered to improve site usability.
3 How We Process & Protect Payments
We take electronic payment security with utmost seriousness:
- Encrypted Online Checkout: All online card payments (Visa, Mastercard, American Express, Apple Pay, Google Pay) are processed directly by certified Tier 1 PCI-DSS compliant third-party payment gateways over end-to-end 256-bit TLS encryption.
- Zero Raw Card Storage: WasteRound Ltd never views, handles, or stores your full 16-digit card number or CVV security code on our web servers.
- Invoiced & BACS Payments: Commercial account holders paying by invoice or direct bank transfer provide only official company invoicing details and remittance proofs.
4 Our Lawful Bases for Processing
Under Article 6 of the UK GDPR, we process your personal data under the following legitimate legal grounds:
| Processing Activity | Data Involved | UK GDPR Lawful Basis |
|---|---|---|
| Fulfilling Rubbish Clearance: Dispatching vans, collection, customer communication | Name, phone, collection address, items selected | Performance of Contract (Article 6(1)(b)) |
| Environmental Compliance: Issuing Waste Transfer Notes (WTNs) | Name, address, waste type, signature, EWC codes | Legal Obligation (Article 6(1)(c) - EPA 1990) |
| Tax & Financial Audits: Invoicing, receipts, bookkeeping | Customer name, billing address, transaction total | Legal Obligation (HMRC compliance) |
| Service Updates & Security: Fraud prevention, service reliability improvements | Enquiry history, technical logs, IP address | Legitimate Interests (Article 6(1)(f)) |
5 Who We Share Your Data With
We do not sell, rent, or trade your personal data to marketing third parties. We share data only with trusted partners strictly necessary to operate our business:
- Licensed Waste Transfer Facilities: In accordance with Environment Agency Duty of Care, transfer stations receive required transfer records confirming origin of commercial or bulky loads.
- IT & Cloud Infrastructure: Secure cloud database and web server providers who store encrypted data on our instructions.
- Statutory Authorities: The Environment Agency, local London borough councils, or police services if legally required in connection with fly-tipping investigations or statutory audit.
6 Environment Agency Registration
WasteRound Ltd is committed to total environmental transparency. We operate as a registered waste carrier, broker, and dealer under The Waste (England and Wales) Regulations 2011.
Customers can independently verify any registered waste carrier on the official UK Government public register at:
environment.data.gov.uk/public-register
8 Data Security Standards
We implement comprehensive technical and organizational safeguards to ensure data security:
- 256-bit SSL/TLS encryption across all website pages and form transmissions.
- Restricted internal access to booking records—limited solely to dispatch operators and management on a need-to-know basis.
- Regular security patching of hosting systems and firewall protections.
9 Statutory Data Retention Schedule
| Record Category | Statutory Minimum Retention | Governing Legislation |
|---|---|---|
| Non-Hazardous Waste Transfer Notes (WTN) | 2 Years | Environmental Protection (Duty of Care) Regs |
| Hazardous Waste Consignment Notes | 3 Years | Hazardous Waste (England and Wales) Regs |
| Invoices, Receipts & Accounting Records | 6 Years | UK Companies Act & HMRC Rules |
| General Enquiries & Uncompleted Quotes | 90 Days | Internal data hygiene cycle |
10 Your Rights Under UK GDPR
As a data subject in the United Kingdom, you possess clear statutory rights:
- Right of Access: Obtain a free copy of the personal data we hold concerning you.
- Right to Rectification: Request correction of inaccurate or incomplete records.
- Right to Erasure ('Right to be Forgotten'): Request deletion of your data (subject to legal retentions like statutory 2-year Waste Transfer Notes).
- Right to Object: Object to processing based on legitimate interests or direct marketing.
- Right to Restrict: Request temporary restriction of data processing while a dispute is resolved.
If you are dissatisfied with how your data has been handled, you have the right to lodge a formal complaint with the UK supervisory authority:
Information Commissioner’s Office (ICO): Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF | Website: ico.org.uk | Tel: 0303 123 1113.
11 Contact Our Privacy Officer
For any questions, Subject Access Requests (SAR), or privacy concerns, please contact: