Privacy Policy
Privacy policy for MediWaste clinical waste services. How we collect, use and protect your personal data under UK GDPR. Your rights and data retention.
This privacy policy explains how MediWaste collects, uses and protects your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
Data We Collect
- Contact information — name, business name, address, phone number and email address provided via our contact or quote forms
- Service information — waste types, collection schedule and billing information
- Website data — IP address, browser type and pages visited, collected via cookies (see our cookie policy)
How We Use Your Data
- To provide clinical waste collection and disposal services
- To respond to enquiries and provide quotes
- To issue invoices and process payments
- To provide waste transfer notes and compliance documentation
- To send service updates and regulatory information
Your Rights Under UK GDPR
- Right of access — you can request a copy of the personal data we hold about you
- Right to rectification — you can ask us to correct inaccurate data
- Right to erasure — you can ask us to delete your data where legally permissible
- Right to restrict processing — you can ask us to limit how we use your data
- Right to data portability — you can request your data in a portable format
- Right to be informed — you have the right to know how your data is used
- Right to object — you can object to certain types of processing
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:
- Quote enquiries — retained for 12 months after the last contact
- Client records — retained for the duration of the service agreement plus 6 years for tax and legal compliance
- Waste transfer notes — retained for a minimum of 2 years as required by law
- Website analytics — retained for 26 months
Third-Party Sharing
We do not sell or rent your personal data to third parties. We may share data with:
- Licensed disposal facilities — waste type and volume information required for compliance
- HMRC — for tax and invoicing purposes where required by law
- Environment Agency — waste documentation as required by regulations
Cookies
We use cookies on our website to improve user experience and analyse website traffic. See our cookie policy for details on the types of cookies we use and how to manage them.
Data Security
We implement appropriate technical and organisational measures to protect your personal data, including secure storage, access controls and regular security reviews. Data is only retained for as long as necessary to fulfil the purposes for which it was collected, or as required by law.
Exercising Your Rights
To exercise any of these rights, please contact us or call 0800 046 9806. You can also write to us at: MediWaste, Data Protection, Dartford, Kent.