Effective Date: 02 October 2025
Last Updated: 02 October 2025

1. Introduction

Welcome to Total Trash Limited ("we", "us", "our"). We are committed to protecting your personal data and respecting your privacy.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website, request quotes and estimates, or use our services. It also explains your rights in relation to your personal data.

We are registered in the United Kingdom and comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who We Are

Company Details:

Total Trash Limited

Registered in England and Wales. Company Registration Number: 16532140

Registered Office: Total Trash Limited, 3 Mariners Row, High Street, Bembridge, PO35 5AF

Email: [email protected]

3. Information We Collect

We may collect and process the following categories of personal information:

Contact Information:

- Full name

- Email address

- Telephone number

- Company and Boat name (if applicable)

- Physical and postal address

Quote and Service Information:

- Product requirements and specifications

- Special instructions or additional information you provide

Financial and Payment Information:

- Billing address

- Payment method details

- Transaction history

Account Information:

- Username and password (encrypted)

- Purchase and service history

- Communication preferences

Communication Data:

- Emails, messages, or other correspondence between you and us

- Customer service interactions and feedback

Technical Data:

- IP address

- Browser type and version

- Device information

- Location data

- Pages visited and usage patterns on our website

4. How We Use Your Information

We use your personal data for the following purposes:

Service Delivery:

- To process and respond to quote and estimate requests

- To arrange and deliver waste removal and related services

- To manage appointments and scheduling

Business Operations:

- To process orders and fulfil contracts

- To manage payments, fees, and charges

- To provide customer support and respond to enquiries

Communications:

- To send transactional communications about your services

- To send marketing communications (with your consent where required)

- To provide updates about our services

Legal and Security:

- To comply with legal and regulatory obligations

- To detect and prevent fraud or abuse of our services

- To protect our rights and interests

Improvement:

- To improve our website, services, and user experience

- To analyse usage patterns and service performance

5. Legal Basis for Processing

Under UK GDPR, we rely on the following legal bases for processing your personal data:

Contract Performance: Processing necessary to fulfil a contract with you, including providing quotes and delivering services you have requested

Legal Obligation: Where processing is necessary for compliance with legal obligations, including accounting and tax requirements

Legitimate Interests: To operate and manage our business efficiently, improve our services, and communicate with you about relevant matters, provided this does not override your rights and freedoms

Consent: For sending direct marketing communications and using certain cookies (where required by law). You may withdraw consent at any time

6. How We Share Your Data

We do not sell your personal data. We may share your information with the following categories of recipients:

Business Software and Service Providers:

Accounting and invoicing platforms (including Xero) for financial management

Customer Relationship Management systems (including Go High Level) for managing customer communications, appointments, and service requests

IT support providers and hosting services

Delivery and Logistics Partners:

Courier and logistics companies for arranging collections and deliveries (we share only necessary contact and address information)

Payment Processors:

Secure payment gateway providers for processing transactions

Service Delivery Partners:

Third-party contractors who help us deliver waste removal services

Professional Advisors:

Lawyers, accountants, auditors, and insurance providers

Government and Legal Bodies:

When required by law, regulation, or court order

To protect our legal rights and interests

Business Transfers:

In the event of a business sale, merger, acquisition, or restructuring

All third parties are contractually required to maintain the confidentiality and security of your personal data, process it only in accordance with our instructions, and comply with applicable data protection laws. Where appropriate, we have Data Processing Agreements in place.

7. International Data Transfers

Your personal data is primarily stored and processed within the United Kingdom. Where we transfer data outside the UK, we ensure that:

The destination country provides an adequate level of protection as determined by the UK government, or

Appropriate safeguards are in place, such as Standard Contractual Clauses approved by the UK authorities

We will always take reasonable steps to ensure your data is treated securely and in accordance with this Privacy Policy.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including satisfying legal, accounting, or reporting requirements.

Specific Retention Periods:

Active Quotes and Estimates: 12 months from the date of quote

Completed Service Records: 7 years from completion (in accordance with accounting and tax requirements)

Financial and Transaction Data: Minimum of 6 years for tax and accounting purposes

Marketing Communications: Until you withdraw consent, unsubscribe, or we no longer have a legitimate reason to retain it

Technical and Usage Data: Typically 24 months unless required for security or fraud prevention

When personal data is no longer required, we will securely delete or anonymise it.

9. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

Right of Access: Request a copy of the personal data we hold about you

Right to Rectification: Request correction of inaccurate or incomplete data

Right to Erasure: Request deletion of your personal data in certain circumstances (this right is not absolute and may be limited by legal obligations)

Right to Restrict Processing: Request that we limit how we use your data in certain situations

Right to Data Portability: Request to receive your data in a structured, commonly used format and have it transferred to another data controller

Right to Object: Object to processing based on legitimate interests or for direct marketing purposes

Right to Withdraw Consent: Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing based on consent before its withdrawal

Right Not to Be Subject to Automated Decision-Making: Protection against decisions based solely on automated processing that produce legal or similarly significant effects

To Exercise Your Rights:

Contact us using the details in Section 13. We will respond to your request within one month, although this may be extended by a further two months for complex requests.

You will not usually have to pay a fee to exercise your rights. However, we may charge a reasonable fee or refuse to comply with a request if it is clearly unfounded, repetitive, or excessive.

10. Cookies and Tracking Technologies

We respect your privacy. This website does not use tracking cookies or analytics tools to monitor activity.

11. Data Security

We take the security of your personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised access, alteration, disclosure, or destruction.

Our Security Measures Include:

- SSL/TLS encryption for data transmission

- Secure, password-protected servers and databases

- Regular security assessments and vulnerability testing

- Strict access controls and authentication protocols

- Staff training on data protection and security

- Regular backups and disaster recovery procedures

While we take all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but will notify you and the relevant authorities in the event of a data breach where legally required.

12. Children's Privacy

Our services are not directed at or intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have inadvertently collected information from a child, please contact us immediately, and we will take steps to delete such information.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. The latest version will always be posted on our website with the date of the last update.

We encourage you to review this policy periodically. Where changes are significant, we may notify you by email or through a prominent notice on our website.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we handle your personal data, please contact us:

Total Trash Limited

Registered in England and Wales. Company Registration Number: 16532140

Registered Office: Total Trash Limited, 3 Mariners Row, High Street, Bembridge, PO35 5AF

Email: [email protected]

15. Right to Complain

If you are not satisfied with our response to your data protection concerns or believe we have not handled your personal data properly, you have the right to lodge a complaint with the supervisory authority:

Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF

Telephone: 0303 123 1113
Website: https://ico.org.uk

Note: This Privacy Policy should be read in conjunction with our Terms and Conditions.