Privacy Policy & Cookies

Who we are (data controller)

The data controller responsible for your personal data is What Waste Code Ltd, Staffordshire House, Beechdale Road, Nottingham, England, NG8 3FH. For any matter relating to data protection, contact us at info@whatwastecode.co.uk or via our Contact us page.

Personal data we collect

We may collect and process the following categories of personal data:

• Name and contact details (email address, phone number)
• Company details (name, company number, description, website, logo)
• Site and permit information (addresses, permit/exemption details, uploaded permit documents)
• Payment and subscription information (processed by our payment provider; we do not store card numbers)
• Communication records (e.g. quote requests, contact form submissions)
• Technical data (e.g. IP address, browser type) where necessary for security or service delivery

Purposes and legal basis

We process your personal data only where we have a lawful basis:

• Contract: To provide the subscription service, manage your listing, process payments and communicate about your account. This includes using processors such as our database and payment provider.
• Legitimate interests: To improve our services, prevent fraud, enforce our terms, and (where applicable) send relevant marketing. We balance our interests against your rights and will not use your data where your interests override ours.
• Consent: Where we rely on consent (e.g. for non-essential cookies or certain marketing), you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
• Legal obligation: Where we must retain or disclose data to comply with law.

Who we share your data with

We use the following categories of processors to run our service. Each is bound by contract to protect your data and use it only as we instruct:

• Hosting and database (Supabase): Servers may be in the UK/EEA or other territories; appropriate safeguards (e.g. adequacy decisions or standard contractual clauses) are in place where required.
• Payments (Paddle): Payment and subscription processing; Paddle may process data globally in accordance with their privacy policy.
• Email (Resend): Transactional and marketing emails; may process in the UK/EEA or elsewhere with appropriate safeguards.
• Maps (Google): Map display on the website; Google may receive usage data in line with their privacy policy.

We do not sell your personal data. We may share aggregated, non-personal statistics (e.g. sector or region) with partners; such information cannot identify you.

How long we keep your data

• Account and listing data: Until you ask us to delete it, or we no longer need it for the purposes above (e.g. after subscription ends and a reasonable retention period for legal/audit purposes, typically up to 7 years where relevant).
• Marketing preferences: Until you unsubscribe; we then retain only the fact that you have unsubscribed so we do not contact you again.
• Payment records: As required by our payment provider and HMRC (typically up to 7 years).
• Quote requests and contact form: For as long as needed to respond and handle any follow-up, then deleted or anonymised unless we have a legal obligation to retain.

Your rights

Under UK data protection law you have the right to:

• Access – request a copy of the personal data we hold about you
• Rectification – have inaccurate data corrected
• Erasure – request deletion of your data in certain circumstances
• Restrict processing – limit how we use your data in certain cases
• Data portability – receive your data in a structured, machine-readable format
• Object – object to processing based on legitimate interests or for direct marketing
• Withdraw consent – where we rely on consent, you may withdraw it at any time

To exercise any of these rights, contact us at info@whatwastecode.co.uk or via our Contact us page. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk/make-a-complaint.

Cookies

A cookie is a small file stored on your device that allows us to recognise you and operate the site. We use only cookies that are strictly necessary for the website and subscription flow (e.g. session, security, checkout). For any non-essential cookies we will obtain your consent before they are set. You can change your cookie preferences or disable cookies via your browser settings; some features may not work correctly if you disable cookies. For more information see your browser provider's help pages.

Cookies we use

Marketing and unsubscribe

We comply with data protection law, including UK GDPR, when sending marketing. Every marketing email includes a clear way to unsubscribe. We honour unsubscribe requests promptly and do not re-add you to marketing lists after you have opted out.

Security

We use industry-standard measures (including SSL/TLS encryption) to protect your data in transit and at rest. Sensitive information submitted via the website is protected online and we take care to secure our systems and processors. No method of transmission over the internet is 100% secure; we encourage you to use strong passwords and keep your contact details up to date.

Changes to this policy

We may update this policy from time to time. We will post the current version on this page and, for significant changes, we will notify you (e.g. by email or a notice on the site) and, where required by law, give you the chance to opt out of new uses. We encourage you to review this page periodically.

Third-party links

This website may contain links to other sites. We are not responsible for their privacy practices. Please read the privacy policy of any site that collects your information.

Questions and contact

If you have any questions about this Privacy Policy or our use of your personal data, please contact us at info@whatwastecode.co.uk or via our Contact us page.