Privacy Policy
WasteBolt ("we", "our", "us") is operated by AR Enviro Consultancy Services. We take our responsibilities under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018 very seriously.
1. Information We Collect
We collect and process the following data to provide our waste compliance services:
- Account Details: Name, email address, and business contact information.
- Compliance Data: Information entered into Waste Transfer Notes (WTNs), Season Tickets, and Consignment Notes.
- Technical Data: IP addresses and usage patterns via Supabase and analytics.
2. Legal Basis for Processing
Under UK GDPR, we process your data because:
- It is necessary for the performance of a contract (providing the software service).
- We have a legal obligation (ensuring waste records meet UK environmental laws).
- We have legitimate interests in improving our platform security and features.
3. Data Security & Sovereignty
Your data is stored securely using Supabase, our database and infrastructure provider, which acts as a data processor on our behalf. While we use global infrastructure, we ensure all third-party processors comply with UK-standard data protection safeguards. Payment processing is handled exclusively by Stripe; WasteBolt never stores your full credit card details.
We take reasonable steps to select reputable, secure sub-processors, but we do not control their infrastructure directly and cannot guarantee uninterrupted availability of any third-party service. See our Terms and Conditions for how service availability and downtime are handled.
4. Your Rights
As a UK data subject, you have the right to:
- Request access to your personal data.
- Request correction or erasure of your data.
- Object to or restrict the processing of your data.
- Data portability.
To exercise these rights, please contact our Data Protection lead at team@wastebolt.app.
If you are unhappy with how we use your data, you have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection issues.