Data Protection & Privacy
Your data security and privacy are our top priorities. Learn how we protect, process, and respect your information in full compliance with GDPR and UK Data Protection Act 2018.
Certified & Compliant
Contents
Quick navigation
Overview
Last updated: April 12, 2026
Important
At EcoHaul, we are committed to protecting your privacy and ensuring the security of your personal data. This comprehensive policy outlines our practices regarding data collection, processing, storage, and your rights as a data subject.
Legal Basis for Data Processing
We process your personal data under the following legal bases:
Contractual Necessity
To fulfill our service agreement with you
- Account creation
- Service delivery
- Payment processing
Legitimate Interest
For business operations and improvements
- Fraud prevention
- Service optimization
- Marketing analytics
Legal Obligation
To comply with legal requirements
- Tax records
- Legal disputes
- Regulatory compliance
Consent
When you explicitly agree
- Marketing emails
- Cookies
- Optional features
Scope of This Policy
This policy applies to:
- All users of EcoHaul's platform (households, businesses, drivers, driver helpers)
- Website visitors and app users
- Newsletter subscribers and marketing contacts
- Anyone who communicates with us
Our Commitment to Your Privacy
The principles that guide us
Transparency
We are clear about what data we collect and why
Security
Your data is protected with industry-leading encryption
Control
You have full control over your personal information
Minimization
We only collect data that is necessary
Accuracy
We keep your data accurate and up-to-date
Accountability
We take responsibility for protecting your data
Our Promise
GDPR Compliance
How we meet European data protection standards
EcoHaul is fully compliant with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. We adhere to all seven key principles of data protection:
Lawfulness, Fairness & Transparency
We process data lawfully, fairly, and in a transparent manner
Purpose Limitation
Data is collected for specified, explicit, and legitimate purposes
Data Minimization
We only collect data that is adequate, relevant, and necessary
Accuracy
Personal data is kept accurate and up to date
Storage Limitation
Data is kept only as long as necessary
Integrity & Confidentiality
Data is processed securely with appropriate safeguards
Accountability
We demonstrate compliance with all principles
International Data Transfers
Your Data Rights
What you can do with your personal data
Important
Right to Access
Request a copy of all personal data we hold about you
Right to Rectification
Request correction of inaccurate or incomplete data
Right to Erasure
Request deletion of your personal data (right to be forgotten)
Right to Restriction
Request restriction of processing your personal data
Right to Portability
Receive your data in a machine-readable format
Right to Object
Object to processing based on legitimate interests
How to Exercise Your Rights
To exercise any of these rights, simply click the action button above or contact our Data Protection Officer using the form at the bottom of this page. We'll verify your identity and process your request within the statutory timeframe.
Security Measures
How we protect your data
We implement industry-leading technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
Encryption
- 256-bit AES encryption at rest
- TLS 1.3 in transit
- End-to-end encryption for sensitive data
Access Control
- Multi-factor authentication
- Role-based access control (RBAC)
- Regular access audits
Monitoring
- 24/7 security monitoring
- Real-time threat detection
- Automated incident response
Backup & Recovery
- Daily automated backups
- Geo-redundant storage
- Tested disaster recovery
Compliance
- ISO 27001 certified
- GDPR compliant
- Regular security audits
Network Security
- Firewall protection
- DDoS mitigation
- Intrusion detection systems
Your Role in Security
Data We Collect
Types of personal information we process
Identity Data
Account identification and personalization
Age verification and legal compliance
Account personalization
Driver verification (drivers only)
Special Categories of Data
How We Process Your Data
Our data processing activities
We process your personal data for the following purposes, always ensuring it is lawful, fair, and transparent:
Service Delivery
To provide waste collection and recycling services
Processing Activities:
Account Management
To create and maintain your account
Processing Activities:
Communication
To communicate with you about our services
Processing Activities:
AI & Analytics
To improve our services using data insights
Processing Activities:
Legal Compliance
To comply with legal obligations
Processing Activities:
Security & Fraud Prevention
To protect users and prevent misuse
Processing Activities:
Data Retention
How long we keep your information
We only retain your personal data for as long as necessary to fulfill the purposes outlined in this policy, or as required by law.
Account Data
Legal and accounting requirements
Transaction Records
Tax and financial regulations
Communication Logs
Customer service and dispute resolution
Marketing Data
Marketing communications
Analytics Data
Service improvement
Security Logs
Security monitoring and compliance
Automated Deletion
Data Breach Procedures
Our incident response protocol
Commitment
Response Timeline
Initial detection and containment
Full assessment and impact analysis
User notification (if required by GDPR)
ICO notification (if required)
Full remediation and security updates
Monitoring and prevention measures
Prevention Measures
Regular security audits and penetration testing
24/7 security monitoring and threat detection
Employee training on data protection
Incident response drills and simulations
Multi-layered security architecture
Regular backup and disaster recovery testing
How You'll Be Notified
If a breach affects your personal data, we will notify you via:
Contact Our Data Protection Officer
We're here to help with your data protection concerns
Contact Information
Phone
TODO-PHONE-NUMBERAddress
EcoHaul Ltd
Data Protection Office
EcoHaul Ltd, London, United Kingdom
Registered in England & Wales
Response Times
General Inquiries
1-2 business days
Data Rights Requests
Within 30 days
Urgent Issues
Within 24 hours
Complaints
Acknowledged in 48 hours
Supervisory Authority
Frequently Asked Questions
Quick answers to common questions
Still have questions?