Privacy Policy
1. Introduction and company information
This Privacy Policy explains how GreenCycle Innovations Ltd collects, uses, stores, shares, and protects personal data when you interact with us, including when you visit our website, contact us, purchase or enquire about our sustainable products and services, subscribe to communications, or otherwise engage with our business.
GreenCycle Innovations Ltd is the controller of your personal data for the purposes described in this Privacy Policy.
Company details:
GreenCycle Innovations Ltd
Unit 4, Riverside Business Park, 1 Dock Road, Chatham, Kent ME4 4SR, United Kingdom
Email: [email protected]
Phone: +44 1634 928 417
We are committed to processing personal data fairly, lawfully, transparently, and in a manner consistent with applicable privacy and data protection laws.
2. Data collection and processing
We may collect and process the following categories of personal data:
- Identity data: name, title, business name, job title, and similar identifiers.
- Contact data: email address, telephone number, postal address, and communication preferences.
- Account and transaction data: order details, billing information, payment confirmations, delivery details, and purchase history.
- Technical data: IP address, browser type and version, device identifiers, operating system, time zone settings, and website usage information.
- Usage data: pages visited, time spent on pages, referral sources, clickstream data, and interaction with website features.
- Marketing and communications data: preferences for receiving marketing, survey responses, and correspondence with us.
- Environmental and service-related data: information you provide relating to recycling, sustainability projects, product performance, or service enquiries.
We collect personal data directly from you, automatically through our website and related technologies, and in some cases from third parties such as service providers, payment processors, delivery partners, analytics providers, and public sources where lawful.
We do not knowingly collect special category data unless it is necessary, lawful, and you have provided it voluntarily or another lawful basis applies. Please avoid sharing sensitive information unless it is required and relevant.
3. Purpose of data processing
We process personal data for the following purposes:
- to provide and manage our products and services;
- to respond to enquiries, requests, and customer support communications;
- to process quotations, orders, payments, invoices, refunds, and deliveries;
- to administer and improve our website, systems, operations, and internal record-keeping;
- to personalise content and enhance user experience;
- to monitor and analyse performance, traffic, and engagement;
- to send service messages, updates, and, where permitted, marketing communications;
- to comply with legal, tax, accounting, regulatory, and contractual obligations;
- to prevent fraud, misuse, security incidents, and unlawful activity;
- to establish, exercise, or defend legal claims;
- to support our sustainability-related business operations, including environmental reporting, project delivery, and client communications.
4. Legal basis for processing
We rely on one or more of the following legal bases to process personal data:
- Consent: where you have given clear permission for specific processing, such as certain marketing communications or optional cookies.
- Contract: where processing is necessary to enter into or perform a contract with you, or to take steps at your request before entering into a contract.
- Legal obligation: where processing is required to comply with laws or regulations.
- Legitimate interests: where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include improving our services, protecting our business, managing customer relationships, and preventing fraud.
- Vital interests: where processing is necessary to protect someone’s life in exceptional circumstances.
Where we rely on legitimate interests, we consider the balance between our interests and your privacy rights and implement safeguards as appropriate.
5. Data sharing and third parties
We may share personal data with the following categories of third parties where necessary and lawful:
- Service providers and processors: IT hosting providers, cloud storage providers, CRM systems, email service providers, analytics providers, and administrative support providers.
- Payment and banking providers: to process payments, detect fraud, and manage transactions.
- Delivery and logistics partners: to deliver goods, arrange collections, and manage shipping-related communications.
- Professional advisers: lawyers, accountants, auditors, insurers, and consultants.
- Public authorities and regulators: where required by law or where necessary to protect our rights, users, or the public.
- Business partners: where relevant to a project, collaboration, or service you have requested.
We require third parties that process personal data on our behalf to protect it appropriately and to use it only in accordance with our instructions and applicable law.
We do not sell personal data.
6. Data transfer to third countries
Where personal data is transferred outside the United Kingdom or other applicable jurisdiction, we take appropriate steps to ensure an adequate level of protection. These steps may include:
- transferring data to countries recognised as providing an adequate level of protection;
- using standard contractual clauses or equivalent transfer safeguards;
- implementing technical and organisational measures to protect data during transfer and processing.
By using our services or communicating with us, you acknowledge that your personal data may be transferred internationally where necessary for the purposes described in this Privacy Policy.
7. Storage duration
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying legal, accounting, reporting, and contractual requirements.
In general, retention periods are determined by the following criteria:
- the nature and sensitivity of the data;
- the purpose for which the data was collected;
- legal and regulatory retention requirements;
- whether we need the data to resolve disputes, enforce agreements, or establish legal claims.
When personal data is no longer required, we will delete, anonymise, or securely archive it in accordance with our retention procedures and applicable law.
8. User rights
Subject to applicable law, you may have the following rights in relation to your personal data:
- Access: to request confirmation of whether we process your personal data and obtain a copy of it.
- Rectification: to request correction of inaccurate or incomplete personal data.
- Erasure: to request deletion of your personal data in certain circumstances.
- Restriction: to request that we limit the processing of your personal data in certain circumstances.
- Data portability: to request a copy of certain personal data in a structured, commonly used, machine-readable format and, where technically feasible, to have it transmitted to another controller.
- Objection: to object to processing based on legitimate interests and to object to direct marketing at any time.
You may also have rights relating to automated decision-making if and when such processing occurs. We do not currently intend to make decisions producing legal or similarly significant effects solely by automated means without appropriate safeguards.
To exercise your rights, please contact us using the details in the Contact Information section. We may need to verify your identity before responding. We aim to respond within any timeframe required by applicable law.
9. Withdrawal of consent
Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.
If you withdraw consent, we may not be able to provide certain services or communications that depend on that consent. To withdraw consent, contact us using the details below or use any available unsubscribe or preference-management mechanism provided in our communications.
10. Right to complain
If you have concerns about our use of your personal data, please contact us first so that we can try to resolve the issue.
You also have the right to lodge a complaint with the relevant data protection supervisory authority. In the United Kingdom, this is the Information Commissioner’s Office (ICO). More information can be found on the ICO’s official website.
11. Data security
We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures may include:
- access controls and authentication measures;
- encryption where appropriate;
- secure hosting and network protections;
- staff confidentiality obligations and training;
- backup, monitoring, and incident response procedures;
- regular review of security practices and vendor safeguards.
While we take reasonable steps to protect personal data, no system can be guaranteed to be completely secure. If a data incident occurs, we will take appropriate steps in accordance with applicable law.
12. Contact information
If you have any questions about this Privacy Policy, our data practices, or wish to exercise your rights, please contact:
GreenCycle Innovations Ltd
Unit 4, Riverside Business Park, 1 Dock Road, Chatham, Kent ME4 4SR, United Kingdom
Email: [email protected]
Phone: +44 1634 928 417
13. Changes to privacy policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any updated version will be posted on our website with a revised effective date where appropriate.
We encourage you to review this Privacy Policy periodically to stay informed about how GreenCycle Innovations Ltd processes personal data.