Privacy Policy
At MediWaste, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, and safeguard your data.
1. Information We Collect
Personal Information
We collect information you provide directly to us, including:
- Name and contact details (email, phone, address)
- Company name and business information
- Job title and professional details
- Account login credentials
- Payment and billing information
Service Information
When you use our services, we collect:
- Waste type and volume data
- Collection location and schedule
- Service history and preferences
- Waste Transfer Notes and compliance documentation
Website Usage Data
We automatically collect:
- IP address and browser type
- Pages visited and time spent on site
- Referring website and search terms
- Device information and operating system
2. How We Use Your Information
We use your information to:
- Provide and manage waste disposal services
- Process quotes and invoices
- Communicate about services and updates
- Maintain compliance with regulations
- Improve our services and website
- Send marketing communications (with your consent)
3. Legal Basis for Processing
We process your data based on:
- Contract performance: To deliver services you've requested
- Legal obligation: To comply with waste management regulations
- Legitimate interests: To operate and improve our business
- Consent: For marketing communications
4. Data Sharing
We may share your information with:
- Regulatory authorities as required by law
- Service providers who assist our operations
- Professional advisors (lawyers, accountants)
- Law enforcement when legally required
We never sell your personal information to third parties.
5. Data Security
We implement robust security measures including:
- Encrypted data transmission (SSL/TLS)
- Secure data storage with access controls
- Regular security audits and updates
- Employee training on data protection
6. Data Retention
We retain your information for:
- Active customers: Duration of service relationship plus 7 years
- Waste Transfer Notes: 3 years minimum (regulatory requirement)
- Marketing data: Until you withdraw consent
- Website analytics: 26 months
7. Your Rights
Under UK GDPR, you have the right to:
- Access: Request a copy of your personal data
- Rectification: Correct inaccurate information
- Erasure: Request deletion of your data
- Restriction: Limit how we use your data
- Portability: Receive your data in a portable format
- Object: Opt out of certain processing activities
- Withdraw consent: Stop marketing communications
8. Cookies
Our website uses cookies to enhance your experience. See our Cookie Policy for detailed information.
9. Children's Privacy
Our services are not directed to individuals under 18. We do not knowingly collect data from children.
10. International Transfers
Your data is primarily stored within the UK. Any international transfers are protected by appropriate safeguards.
11. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes via email or website notice.
12. Contact Us
For privacy questions or to exercise your rights, contact us at:
13. Supervisory Authority
You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated.