Privacy Policy
Who We Are
Our website address is: https://enviroclearwaste.co.uk; we are Enviroclear Waste Recycling Ltd, company number 11822068.
Online Orders
When visitors place an order on the site, we collect the data shown in the order form, along with the visitor’s IP address and browser user agent string to assist with spam detection.
Data Capture
If you place an order on our site, your name, email address, collection address and telephone number will be stored in our COM system for 6 years, in line with our requirement to retain records for HMRC.
Retaining Information for Tax Purposes: For tax purposes, we generally need to retain certain financial records and personal data for a period that complies with UK law and regulations.
Corporation Tax Records: We must keep records for at least 6 years from the end of the accounting period they relate to. This includes records such as invoices, receipts, and details of transactions.
VAT Records: VAT records will be retained for at least 6 years after the end of the accounting period they relate to.
GDPR Compliance and Data Retention
Purpose Limitation: Personal data will be kept only for as long as necessary to fulfil the purpose for which it was collected. This will be a minimum of 6 years.
Who We Share Your Data With
- Non-account holding customers: Your information is passed into our order management system only.
- Account holders: Your information is passed into our order management system and accounting system.
- We do not hold or retain any payment information via enviroclearwaste.co.uk. All sales transactions are person-to-person, cash, card, contactless or BACS.
How Long We Retain Your Data
If you place an order, personal details are stripped from the order after the minimum retention period. After this, the order details and its metadata are retained indefinitely. This allows us to recognise and approve any follow-up orders automatically instead of holding them in a moderation queue. For users who order on our website, we store the personal information they provide in their user profile held within our COM system. All users can request their data, edit, or delete their personal information at any time.
Who Can Access Your Data
Only select members of our team have access to the information you provide to us. For example, our Accounts Team, Website Administrators, and Branch Managers can access:
- Order information, when it was ordered, and where it should be sent/collected.
- Customer information, including your name, email address, and billing information.
- Our team members use this information to help fulfil orders and support you.
Website administrators and branch managers can also see and edit that information. Our Collection drivers have access to order information such as your name, address and phone number; this is to perform their role. The data is available to drivers for 24 hours only.
What Rights You Have Over Your Data
If you have an account or have placed an order with us, you can request an exported file of the personal data we hold about you, including any information you have provided. Please note that while you have the right to access your personal data, internal notes related to your orders are considered legally privileged and are not accessible to customers. These notes are used solely for our internal purposes to ensure proper order processing and compliance with legal obligations.
You can also request that we erase any personal data we hold about you. This does not include any data we are obliged to keep for administrative, legal, or security purposes. To make a data request, please contact us using the contact form which can be found on our ‘contact us’ page.
Where Your Data Is Sent
Order details may be checked through an automated spam detection service. Any orders you place will contain personal information such as name, address, email, and contact number.
This information is passed to our COM system, which is encrypted during transfer.
Data Submission: When you place an order, the form data is sent from your browser to our server. This is done via a script that handles the incoming data.
Input Validation: The script performs validation checks to ensure that the data received is in the correct format and meets the required criteria (e.g., correct email format, valid phone number).
Data Sanitisation: To prevent SQL injection attacks and other forms of malicious input, the script sanitises and cleans the data before processing it. This involves removing or escaping any potentially harmful characters.
Secure Transfer: The data is transmitted over HTTPS (Hypertext Transfer Protocol Secure), which uses SSL/TLS (Secure Sockets Layer / Transport Layer Security) encryption. This ensures that data sent between your browser and our server is encrypted, protecting it from eavesdropping or tampering by malicious actors during transmission.
We do not hold or retain any payment information via enviroclearwaste.co.uk. All information provided to us is held solely for our business purposes; we do not sell, share, or distribute information to any other companies or public bodies without lawful purpose, for which there will be a GDPR data request.
What We Collect and Store
While you visit our site, we’ll track:
Services You’ve Viewed: We use this to monitor search intent and service interest, helping us to understand our customers needs. Location, IP Address, and Browser Type: This helps us estimate taxes.
Collection Address: We use this to estimate total costs before you place an order.
When you place an order with us, we’ll ask for information including your name, collection address, email address, phone number.
We use this information to:
- Send you information about your account and order
- Respond to your requests, including refunds and complaints
- Process payments and prevent fraud
- Comply with any legal obligations, such as calculating taxes
- Improve our product offerings
- Send you marketing messages, which you can opt out from by clicking ‘unsubscribe’ in any emails we may send you. We generally store information about you for as long as needed for the purposes for which we collect and use it, and as long as we are not legally required to retain it. For example, we store order information for 6 years for tax and accounting purposes.