Privacy Policy

Effective 14 July 2026

This Privacy Policy explains how WasteReady collects, uses and protects personal data when you use our digital waste transfer note and DEFRA compliance service (the “Service”). We process personal data in accordance with the UK GDPR and the Data Protection Act 2018. For the data you enter into records, WasteReady acts as a processor on your behalf; for your account and our own operations, we act as controller.

1. Who we are

WasteReady is the data controller for your account information. You can contact us at hello@wasteready.co.uk.

2. Data we collect

Account data: name, email, business details, and authentication data.
Transfer note data: the records you create, which may contain personal data of third parties (e.g. driver names, vehicle registrations, customer names and addresses, permit-holder details) and photographs of paper tickets.
Payment data: handled by our payment processor; we do not store full card details.
Usage data: basic analytics and technical logs to operate and improve the Service.

3. How we use it & lawful basis

We use your data to provide and operate the Service (performance of a contract), to comply with legal obligations, and for our legitimate interests in securing and improving the Service. We process transfer note data on your instructions to store records, generate PDFs, share records you choose to share, and submit records to DEFRA at your direction.

4. Service providers (sub-processors)

We use trusted providers to run the Service, including: Supabase (database, authentication, storage), Vercel (hosting), Stripe(payments), Resend (transactional email), and Anthropic(AI extraction of paper tickets). Records you submit to DEFRA are transmitted to DEFRA’s Digital Waste Tracking service at your direction.

5. Sharing your data

We share record data only as you direct, for example when you share a record with a receiving site, email a PDF, or submit to DEFRA. We do not sell your data.

6. Retention

We retain records for as long as your account is active and as needed to provide the Service and meet legal record-keeping requirements for waste documentation. You can request deletion subject to those obligations.

7. Your rights

Under UK GDPR you have rights to access, rectify, erase, restrict, and port your personal data, and to object to certain processing. To exercise these rights contact hello@wasteready.co.uk. You also have the right to complain to the Information Commissioner’s Office (ICO).

8. Security

We use appropriate technical and organisational measures, including encryption in transit, access controls and tenant isolation, to protect your data. No system is perfectly secure, and you are responsible for keeping your credentials safe.

9. International transfers

Where data is processed outside the UK by our providers, we rely on appropriate safeguards (such as adequacy decisions or standard contractual clauses).

10. Cookies

We use essential cookies for authentication and basic analytics. We do not use advertising cookies.

11. Changes

We may update this policy from time to time; material changes will be notified in the app or by email.