Waste Match Privacy Policy

Visitors to our websites

1. Keeping your data safe
   1. We are committed to keeping your personal data safe and secure and handling it in accordance with our legal obligations. This Privacy Policy sets out in detail the purposes for which we process your personal data, who we share it with, what rights you have in relation to that data and everything else we think it's important for you to know.
2. Who's in control of my personal data?
   1. Waste Match (the Website) is provided by Mitie Waste and Environmental Services Limited (we or us).
   2. We are the "controller" of all personal data collected and used for the purposes of providing Waste Match and for any other purposes set out in this Privacy Policy. This means that we are responsible for deciding how and why your data is used and for ensuring that your data is handled legally and safely.
3. What data do you collect and where from?
   1. We mostly collect personal data directly from you when you register for an account with Waste Match. The data that we need in order to set up your account includes the following:
      1. your full name;
      2. your email address;
      3. your telephone number; and
      4. the password you set up to access your account (this password is hashed so that we cannot see what your password is).
   2. If you register as a business or a charity, we will also need to collect further information about the relevant business or charity. This information will include the name, registered number and address of the entity. This will not be personal data unless your business is a sole trader or unlimited partnership.
   3. If you use the messaging service on our Website to contact other buyers and/or sellers, we will collect any personal data that you voluntarily input into that messaging service. We do not have control over this personal data and you should make sure that you do not submit any sensitive data or personal data that you do not want us to process to the messaging service.
   4. We will collect personal data from you if you contact us by post, email, telephone or social media with comments, queries or complaints. This will include your name, contact details and any other personal data you provide to us in your correspondence.
   5. We collect technical information about how you use Waste Match. This includes your IP addresses, device identifiers and information about how long you have stayed on certain pages or what pages you have clicked on. We use cookies to do this – please see our section below on Cookies for more information.
4. What do you use my personal data for?
   1. We use the personal data that you provide when you register with our Website to set up, manage and administer your account, log you into your account and to allow you to use the features of Waste Match that are available for your account type.
   2. We use your email address and telephone number to contact you occasionally with service messages about Waste Match, for example to provide you with password reminders.
   3. We will also use your email address and telephone number to contact you about products and services that we think will be of interest to you, including alerting you to new listings that you may be interested in.
   4. We use information you voluntarily provide to us when contacting us with queries, comments or complaints to enable us to respond to those queries, complaints or comments and to make sure that these are appropriately dealt with.
   5. We use your personal data, including the technical data that we collect, to help us monitor, analyse and improve Waste Match to ensure that we are providing you with the best possible service.
5. What happens if I don't provide my personal data?
   1. If you do not provide the personal data that we request, you will not be able to set up an account with us.
6. What is your legal basis for using my personal data?
   1. Data protection law says that we have to tell you the legal basis that we rely on to process your personal data for the purposes that we have notified to you. The table below tells you what that legal basis is in relation to each of the purposes set out above.

Purpose	Personal data used	Legal basis
Running your account and allowing you to access and use the Website, including contacting you with service messages	Name, email address, telephone number and password	We process this personal data for this purpose on the basis that this information is necessary in order to perform our contract with you to provide your account and to allow you to use the Website.
Marketing	Email address and telephone number	We process this personal data for this purpose on the basis that it is in our legitimate interests to do so. We have an interest in promoting our Website and our business. You have a right to object to your personal data being used for marketing purposes, which you can exercise by clicking "unsubscribe" in any marketing communication or by contacting us using the details set out below.
Contacting you in response to correspondence you send us	Name, email address, telephone number and any other personal data you voluntarily provide when you contact us	We process this personal data for this purpose on the basis that it is in our legitimate interests to do so. We have an interest in ensuring that correspondence, comments and queries are dealt with effectively and appropriately so that we can preserve our business reputation and continue to improve our business. You have a limited right to object to your personal data being used for these purposes, but please note that if you do so, we will not be able to respond to your correspondence. We may also need to retain your personal data for the purposes of dealing with any future claims, in which case your right to object will not apply.
Improving our services	The technical information that we collect about your device and how you use the Website	We process this personal data for this purpose on the basis that this information is necessary for our legitimate interests. We have an interest in ensuring that we continue to improve our Website and provide our users with the best and most effective Website possible. You have a right to object to your personal data being used for these purposes. You can change your cookies settings at any time in your browser settings.

7. Who do you share my personal data with?
   1. We need to share your personal data with some third parties in some circumstances. This includes where we use third party suppliers to perform various services for us, such as our hosting provider, Microsoft Azure (which hosts your personal data for us on servers within the EU).
   2. We will also share your personal data with third parties in the following circumstances:
      1. where you have specifically consented to us sharing your data with a particular third party;
      2. where we are required or permitted to do so by law or to protect or enforce our rights or the rights of any third party; and
      3. if our business or any part of it is acquired by a third party, in which case we will need to share your personal data with that third party.
   3. We do not transfer or store your personal data outside the UK and the European Economic Area (EEA). If we do transfer your data outside the EEA, we will inform you and we will ensure that equivalent protections to those in the UK are put in place to protect your personal data.
8. How long do you keep my personal data for?
   1. We will keep all your personal data for as long as your account remains open. You can close your account at any time by contacting us using the contact details below or using any "Close account" option that we may offer as part of your account settings.
   2. We will delete the personal data associated with your account six years after your account has been closed.
   3. If your account is inactive for a period of one year, we reserve the right to close your account and delete your personal data in accordance with section 8.1 above.
   4. We may need to keep your data after account closure for limited purposes, for example if we need your data in order to respond to any complaints or claims that you make. If this is the case, we will only keep the data for as long as we need to in order to fulfil those purposes.
9. What rights do I have?
   1. You have a number of rights under data protection law. These rights and how you can exercise them are set out in this section. We will normally need to ask you for proof of your identity before we can respond to a request to exercise any of the rights in this section and we may need to ask you for more information, for example to help us to locate the personal data that your request relates to.
   2. We will respond to any requests to exercise your rights as soon as we can and in any event within one month of receiving your request and any necessary proof of identity or further information. If your request is particularly difficult or complex, or if you have made a large volume of requests, we may take up to three months to respond. If this is the case we will let you know as soon as we can and explain why we need to take longer to respond.
   3. If you want to exercise any of these rights, please email us at info@wastematch.co.uk
   4. A right to access your information
      1. You have a right to ask us to send you a copy of all the personal data that we hold about you (subject to some exceptions).
   5. A right to an electronic copy of your information
      1. You can also ask us to send you the account information we hold about you in a common electronic format, or to ask us to transfer that data to a third party if you want us to and if it is technically feasible for us to do so.
   6. A right to object to us processing your information
      1. You have a right to object to us processing any personal data that we process where we are relying on legitimate interests as the legal basis of our processing.
      2. If we have compelling legitimate grounds to carry on processing your personal data, we will be able to continue to do so. Otherwise, we will cease processing your personal data.
   7. A right to ask us not to market to you
      1. You can ask us not to send you direct marketing. You can do this by following the "unsubscribe" instructions in any marketing emails, contacting us using the details above, or by changing any relevant preferences within your account settings.
   8. A right to have inaccurate data corrected
      1. You have a right to ask us to correct inaccurate data that we hold about you. If we are satisfied that the new data you have provided is accurate, we will correct your personal data as soon as possible.
      2. You can update your own personal data at any time through your account settings. It is your responsibility to ensure that your personal data is accurate and up-to-date.
   9. A right to have your data erased
      1. You have a right to ask us to delete your personal data in certain circumstances, for example if we have processed your data unlawfully or if we no longer need the data for the purposes set out in this Privacy Policy.
      2. We will delete the personal data associated with your account as set out under "How long do we keep your data for?" above. Remember that you can close your account at any time.
   10. A right to have processing of your data restricted
       1. You can ask us to restrict processing of your personal data in some circumstances, for example if you think the personal data is inaccurate and we need to verify its accuracy, or if we no longer need the data but you require us to keep it so that you can exercise your own legal rights.
       2. Restricting your personal data means that we only store your personal data and don't carry out any further processing on it unless you consent or we need to process the data to exercise a legal claim or to protect a third party or the public.
10. Do you use cookies?
    1. Cookies are text files containing small amounts of information which are downloaded to your device when you visit a website. Cookies are then sent back to the originating website on each subsequent visit, or to another website that recognises that cookie. Cookies are useful because they allow a website to recognise a user's device. You can find more information about cookies at: www.allaboutcookies.org and www.youronlinechoices.eu for a video about cookies visit www.google.co.uk/goodtoknow/data-on-the-web/cookies.
    2. Cookies do lots of different jobs, like letting you navigate between pages efficiently, remembering your preferences, and generally improve the user experience.
    3. The cookies used on this website have been categorised based on the categories found in the ICC UK Cookie guide.
    4. We sometimes embed photos and video content from websites such as YouTube and Flickr or streams and buttons from Twitter and Facebook. As a result, when you visit a page with content embedded from these sites, you may be presented with cookies from these websites. Mitie does not control the dissemination of these cookies. You should check the relevant third party website for more information about these:
       1. Facebook: http://www.Facebook.com/about/privacy
       2. Twitter: http://twitter.com/privacy
       3. Flickr: http://info.yahoo.com/privacy/uk/yahoo/
       4. You Tube: http://www.google.co.uk/intl/en/policies/privacy/
    5. A list of the cookies used on this website is set out below.
    
    

    Cookie	Name	Purpose	Cookie category
    First-party Mitie cookie	ASP.NET_SessionId	Our website allows users to add pages to a basket. This cookie is used to remember what pages have been added to your basket as you navigate the site and expires when you exit the Mitie website.	Category 1: strictly necessary cookies. These cookies enable services you have specifically asked for.
    Third-party Euroinvestor cookie	ASP.NET_SessionId	Our website provides share price and investor tools that sets a cookie that is necessary to be able to use this service and which expires when you exit the Mitie website.	Category 1: strictly necessary cookies. These cookies enable services you have specifically asked for.
    Third-party Google Analytics cookies	__utma __utmb __utmc __utmz	These cookies are used to collect information about how visitors use our site. We use the information to compile reports and to help us improve the site. The cookies collect information in an anonymous form, including the number of visitors to the site, where visitors have come to the site from and the pages they visited. Click here for an overview of privacy at Google To opt out of being tracked by Google Analytics across all websites visit http://tools.google.com/dlpage/gaoptout.	Category 2: performance cookies. These cookies collect anonymous information on the pages visited.
    Third-party Wibiya bar cookie	WibiyaProfile	The Wibiya bar is the extra toolbar at the bottom of the screen. It helps us to connect our social media accounts to our website and allows people to subscribe to our RSS feeds. Wibiya creates this cookie not us and they may have access to it. Data collected is anonymous. Read more information about this cookie here: http://www.ghostery.com/apps/wibiya_toolbar	Category 2: performance cookies. These cookies collect anonymous information on the pages visited.

11. How can I contact you?
    1. If you have any questions or concerns about this Privacy Policy and/or our processing of your personal data, you can contact us at info@wastematch.co.uk.
12. What if I have a complaint?
    1. You have a right to complain to the Information Commissioner's Officer (ICO), which regulates data protection compliance in the UK, if you are unhappy with how we have processed your personal data.
    2. You can find out how to do this by visiting www.ico.org.uk.
13. What if this policy changes?
    1. We may make changes to this Privacy Policy from time to time. Any changes we make will be posted on this page. We may also notify you by email if significant changes are made.