Privacy Policy
1. Introduction
Waste to Wonder Worldwide is committed to ensuring that your personal information is protected and that we are being transparent about the information we hold about you. This Privacy Policy applies to the personal information we collect and hold about individuals that:
- visit our website
- and/or elect to receive direct marketing and subscribed mailings from us as set out below.
Please read this Privacy Policy carefully, together with any other privacy notice we may provide on specific occasions when we are collecting or processing personal data about you, so you are informed about how and why we collect, store, use and share your personal information. This Privacy Policy also explains your rights in relation to your personal information and how to contact us or supervisory authorities in the event you have a complaint.
This Privacy Policy is issued on behalf of Waste to Wonder Worldwide Network Operations so when we refer to “Waste to Wonder Worldwide”, “us”, “we” or “our” in this Privacy Policy, we mean Waste to Wonder Worldwide Network Operations
Please read this Website Privacy Notice carefully to understand how we handle your personal information.
2. Scope
This Privacy Notice describes how Waste to Wonder Worldwide collects and processes personal data gathered through our website. It is available for anyone who wishes to understand how Waste to Wonder Worldwide uses the limited personal data gathered through its website. If you have any further questions regarding this Privacy Notice or how personal data is processed by Waste to Wonder Worldwide, please contact our Managing Director using the details at Section 15 below.
Please note that the Waste to Wonder Worldwide’s website is not intended for children and we do not knowingly collect data relating to children.
3. Principles of Data Protection
When using the term “personal data” or “personal information” in this Privacy Policy, we mean information that relates to you and from which you could be identified, either directly or in combination with other information which we may have in our possession.
To help you understand how we handle your personal information more clearly, below is a summary of the data protection principles which guide how we use your personal information. These principles provide that personal data should be:
- Used lawfully, fairly and in a transparent way;
- Collected only for valid purposes that we have clearly explained to you and not used in any way that is incompatible with those purposes;
- Relevant to the purposes we have told you about and limited only to those purposes;
- Accurate and kept up to date;
- Kept only as long as necessary for the purposes we have told you about; and
- Kept securely.
We have put policies and procedures in place to seek to adopt these principles in our everyday processing activities set out in this Privacy Policy.
Waste to Wonder Worldwide may provide links to third party websites. We are not responsible for the conduct of non-Waste to Wonder Worldwide companies linked to the site and you should refer to the privacy notices of these third parties as to how they may handle your personal information.
4. Sources of Personal Data
We may collect personal data about you when:
- The personal data is provided by you (e.g. when you apply for a role, request more information, additional communications via email, telephone, social media, or videophone (e.g. Zoom, Teams))
- The personal data is collected in the normal course of our relationship with you
- The personal data has been made public by you (e.g. contacting Waste to Wonder Worldwide via a social media platform);
- The personal data is collected when you visit our website or use any features or resources available on or through the website (including subscribing to marketing), some of which may be personal data
- The personal data may be created by us, such as records of your communications with us or reports from your job interviews.
5. Cookies
We use cookies on our websites. Cookies are small text files that are downloaded onto your device when you visit a website. The cookies on our website records minimal personal data for the purposes of analysis, to help us understand how people use our website. Please refer to our cookies policy for further information about our use of cookies.
6. Personal Data Collected
The following sets out the types of personal data we collect on our websites:
- Personal Details: title, first and last name, address, telephone numbers, email address.
- Consents: consents, permissions, or preferences that you have specified, such as whether you wish to receive direct marketing by subscribing to receive Waste to Wonder Worldwide news and media alerts.
- Website Access Details: your computers unique identifier (e.g. IP Address), the date and time you accessed the website.
- Security Information: security clearances and vetting information.
- Correspondence: responses, comments, views and opinions when you communicate with us for instance when making a request/complaint
7. Purpose and Use of Personal Data
The main purpose for using your personal information is to:
- Improve and monitor the operation of our website
- Deliver any requested services
We use information held about you in the following ways: –
- To contact you, for instance, to arrange a service
- To contact you with relevant marketing communications (please refer to Section 10 below)
- To oversee our website for internal operational purposes to make user experience more efficient (including troubleshooting) and to analyse how the systems are used
- To enable you to participate in interactive features within our website
8. Legal Basis for Processing Your Personal Data
Data protection and privacy laws requires us to have a “legal basis” or “lawful ground” to collect and use your personal information. We will only collect, use and share your personal information where we are satisfied that we have an appropriate legal basis to do this. This may include:
- We have obtained your prior consent, for instance when you sign up to marketing.
- We need to use your personal information in connection with the performance of a project with you or to take steps at your request prior to entering into a project with us.
- We need to use your personal information to comply with a relevant legal or regulatory obligation that we have.
- Where it is necessary for our legitimate interests as a commercial organisation (to the extent that your interests and fundamental rights do not override those interests), such as:
- To detect and protect against fraud;
- To make sure we are following our own internal procedures so we can deliver a quality service;
- Establishing, exercising or defending our legal rights in the event of a claim;
- Monitoring, managing and operating our website IT systems and ensuring security of those systems
- In connection with compliance, regulatory and investigative purposes as necessary.
Purpose/Use | Type of data | Legal basis |
---|---|---|
To register you as a new customer | (a) Identity (b) Contact |
Performance of a project with you |
To process and deliver your order including: (a) Manage payments, fees and charges (b) Collect and recover money owed to us |
(a) Identity (b) Contact (c) Financial (d) Transaction (e) Marketing and Communications |
(a) Performance of a project with you (b) Necessary for our legitimate interests (to recover debts due to us) |
To manage our relationship with you which will include: (a) Notifying you about changes to our terms or privacy policy (b) Dealing with your requests, complaints and queries |
(a) Identity (b) Contact (c) Profile (d) Marketing and Communications |
(a) Performance of a contract with you (b) Necessary to comply with a legal obligation (c) Necessary for our legitimate interests (to keep our records updated and manage our relationship with you |
To enable you to complete a survey | (a) Identity (b) Contact (c) Profile (d) Usage (e) Marketing and Communications |
(a) Performance of a project with you (b) Necessary for our legitimate interests (to study how customers use our services, to develop them and grow our business) |
To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) | (a) Identity (b) Contact (c) Technical |
(a) Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise) (b) Necessary to comply with a legal obligation |
To deliver relevant website content and online advertisements to you and measure or understand the effectiveness of the advertising we serve to you | (a) Identity (b) Contact (c) Profile (d) Usage (e) Marketing and Communications (f) Technical |
Necessary for our legitimate interests (to study how customers use our services, to develop them, to grow our business and to inform our marketing strategy) |
To use data analytics to improve our website, products/services, customer relationships and experiences and to measure the effectiveness of our communications and marketing | (a) Technical (b) Usage |
Necessary for our legitimate interests (to define types of customers for our services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy) |
To send you relevant marketing communications and make personalised suggestions and recommendations to you about services that may be of interest to you based on your Profile Data | (a) Identity (b) Contact (c) Technical (d) Usage (e) Profile (f) Marketing and Communications |
Consent, having obtained your prior consent to receiving direct marketing communications or where necessary for our legitimate interests (to carry out direct marketing, develop our products/services and grow our business) |
To carry out market research through your voluntary participation in surveys | Necessary for our legitimate interests (to study how customers use our products/services and to help us improve and develop our products and services). |
Use of your data |
---|
Purpose/Use: To register you as a new customer Type of data:(a) Identity (b) Contact Legal basis: Performance of a project with you |
Purpose/Use: To process and deliver your order including: (a) Manage payments, fees and charges (b) Collect and recover money owed to us Type of data: (a) Identity, (b) Contact, (c) Financial, (d) Transaction, (e) Marketing and Communications Legal basis:(a) Performance of a project with you, (b) Necessary for our legitimate interests (to recover debts due to us) |
Purpose/Use: To manage our relationship with you which will include: (a) Notifying you about changes to our terms or privacy policy, (b) Dealing with your requests, complaints and queries Type of data: (a) Identity, (b) Contact, (c) Profile, (d) Marketing and Communications Legal basis:(a) Performance of a contract with you, (b) Necessary to comply with a legal obligation, (c) Necessary for our legitimate interests (to keep our records updated and manage our relationship with you |
Purpose/Use: To enable you to complete a survey Type of data:(a) Identity, (b) Contact, (c) Profile, (d) Usage, (e) Marketing and Communications Legal basis:(a) Performance of a project with you, (b) Necessary for our legitimate interests (to study how customers use our services, to develop them and grow our business) |
Purpose/Use: To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data) Type of data: (a) Identity, (b) Contact, (c) Technical Legal basis:(a) Necessary for our legitimate interests (for running our business, provision of administration and IT services, network security, to prevent fraud and in the context of a business reorganisation or group restructuring exercise), (b) Necessary to comply with a legal obligation |
Purpose/Use: To deliver relevant website content and online advertisements to you and measure or understand the effectiveness of the advertising we serve to you Type of data:(a) Identity, (b) Contact, (c) Profile, (d) Usage, (e) Marketing and Communications, (f) Technical Legal basis:Necessary for our legitimate interests (to study how customers use our services, to develop them, to grow our business and to inform our marketing strategy) |
Purpose/Use: To use data analytics to improve our website, products/services, customer relationships and experiences and to measure the effectiveness of our communications and marketing Type of data:(a) Technical, (b) Usage Legal basis:Necessary for our legitimate interests (to define types of customers for our services, to keep our website updated and relevant, to develop our business and to inform our marketing strategy) |
Purpose/Use: To send you relevant marketing communications and make personalised suggestions and recommendations to you about services that may be of interest to you based on your Profile Data Type of data:(a) Identity, (b) Contact, (c) Technical, (d) Usage, (e) Profile, (f) Marketing and Communications Legal basis: Consent, having obtained your prior consent to receiving direct marketing communications or where necessary for our legitimate interests (to carry out direct marketing, develop our products/services and grow our business) |
Purpose/Use: To carry out market research through your voluntary participation in surveys Legal basis:Necessary for our legitimate interests (to study how customers use our products/services and to help us improve and develop our products and services). |
Some of the above grounds for processing will overlap and there may be several grounds which justify our use of your personal information. If you have any queries about our legal basis for using your personal information, please contact the DPO via the details set out in Section 15 below.
How do we justify our legitimate interests?
We make sure we consider and balance any potential impact on you and your rights (both positive and negative) before we process your personal data for our legitimate interests. We do not use your personal data for activities where our interests are overridden by the impact on you (unless we have your consent or are otherwise required or permitted to by law).
9. When Is Special Category And Criminal Offence Personal Data Collected And Used?
Special categories of personal data are particularly sensitive and require higher levels of protection. They include information about your health status, racial or ethnic origin, political views, religious or similar beliefs, sex life or sexual orientation, genetic or biometric identifiers and trade union membership.
Waste to Wonder Worldwide does not collect special category information from our websites.
10. Direct Marketing
We may use your personal information to contact you if you subscribed and consented to receive Waste to Wonder Worldwide news and media alerts.
You can manage your mailing preferences or tell us that you no longer wish to be receive these communications from us by:
- Using the unsubscribe option included on email correspondence
- Sending us an email to admin@wastetowonder.com
If you have any other questions or concerns, please contact our DPO using the details in Section 15 below.
- 11. Sharing Your Personal Information With Others
We will only disclose personal information to a third party in very limited circumstances, or where we are permitted to do so by law. The third parties to whom we provide your personal data include:
- Customers where required for specific business purposes.
- Banks and payment providers to authorise and complete payments.
- Credit reference agencies and organisations working to prevent fraud in financial services.
- Waste to Wonder Worldwide’s third-party providers including information technology suppliers and infrastructure support services, law firms and other third party suppliers/partner organisations.
- Waste to Wonder Worldwide Suppliers who assist in projects
- Professional advisors (e.g. legal advisors, insurance organisations and auditors).
- Government, regulatory and law enforcement bodies where we are required in order:
- To comply with our legal obligations
- To exercise our legal rights (e.g. pursue or defend a claim); and
- For the prevention, detection, and investigation of crime.
Waste to Wonder Worldwide may from time to time share your personal data with our service providers. We require all third parties to respect the security of your personal data and to treat it in accordance with the law. We do not allow our third-party service providers to use your personal data for their own purposes and only permit them to process your personal data for specified purposes and in accordance with our instructions.
We may transfer your personal data to service providers that carry out certain functions on our behalf. This may involve transferring personal data outside the UK to countries which have laws that do not provide the same level of data protection as the UK law. Whenever we transfer your personal data out of the UK to service providers, we ensure a similar degree of protection is afforded to it by ensuring that the following safeguards are in place:
- We will only transfer your personal data to countries that have been deemed by the UK to provide an adequate level of protection for personal data
- We may use specific standard contractual terms approved for use in the UK which give the transferred personal data the same protection as it has in the UK
12. Security Of Your Personal Data
Waste to Wonder Worldwide takes appropriate technical and organisational measures to safeguard your personal information against loss, theft, misuse, unauthorised access, disclosure, alteration, and destruction. These measures include restricted password-protected access to systems, regular system monitoring, and data protection training for our employees.
13. Retention of Your Personal Data
Waste to Wonder Worldwide will only retain your personal information for the period necessary to fulfil the purposes outlined in this Privacy Policy and as otherwise needed to comply with applicable law and internal company policies. Where your personal information is no longer needed, we will ensure that it is disposed of in a secure manner.
In some circumstances you can ask us to delete your data. For example, in connection with direct marketing and subscribed mailings that you have registered to receive, we will retain these details until you notify us that you no longer wish to receive such communications (e.g. by unsubscribing). Please refer to Section 10 above.
In some circumstances we may store your personal information for longer periods of time where we are required to do so in accordance with legal or regulatory requirements or so that we have an accurate record of your dealings with us in the event of any complaints or challenges, or if we reasonably believe there is a prospect of litigation relating to your personal information or dealings.
14. Automated Decision-Making and Profiling
Waste to Wonder Worldwide does not engage in any automated decision-making or profiling that produces legal or similarly significant effects on individuals.
If this changes, we will update this Privacy Policy and provide notice where required by law, including information on:
- The logic involved in the decision-making.
- The significance and potential consequences of such processing for you.
- Your right to object to automated decision-making and to request human intervention, where applicable.
15. Your Legal Rights
You have legal rights in connection with personal information. Under certain circumstances, by law you have the right to:
- Request access to your personal information (commonly known as a “data subject access request”). This enables you to receive a copy of the personal information we hold about you and to check that we are lawfully processing it.
- Request correction of the personal information that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
- Object to processing of your personal information by us or on our behalf which has our legitimate interests as its legal basis for that processing, if you believe your fundamental rights and freedoms outweigh our legitimate interests. If you raise an objection, we have an opportunity to demonstrate that we have compelling legitimate interests which override your rights and freedoms.
- Request the transfer of your personal information. You can ask us to provide your personal information to you in a structured, commonly used, machine-readable format. Waste to Wonder Worldwide does not currently engage in automated data processing that would require data portability. If this changes in the future, we will update this Privacy Policy and provide you with the necessary information and options.
- Obtain a copy, or reference to, the personal data safeguards used for transfers outside the European Union. We may redact data transfer agreements to protect commercial terms.
- Withdraw consent to processing where the legal basis for processing is solely justified on the grounds of consent (please refer to Section 10 for details about withdrawing consent to receiving news and alerts).
- Request the restriction of processing of your personal information. This enables you to ask us to suspend the processing of personal information about you, but only where:
- its accuracy is contested, to allow us to verify its accuracy;
- the processing is unlawful, but you do not want it erased;
- it is no longer needed for the purposes for which it was collected, but we still need it to establish, exercise or defend legal claims; or
- you have exercised the right to object, and verification of overriding grounds is pending.
- Request erasure of your personal information (commonly known as the “right to be forgotten”). This enables you to ask us to delete or remove personal information in limited circumstances, where:
- it is no longer needed for the purposes for which it was collected;
- you have withdrawn your consent (where the data processing was based on consent);
- following a successful right to object (see Object to processing);
- it has been processed unlawfully; or
- to comply with a legal obligation to which Restore is subject.
We are not required to comply with your request to erase personal information if the processing of your personal information is necessary for a number of reasons, including:
- for compliance with a legal obligation; or
- for the establishment, exercise or defence of legal claims.
You can also object at any time to your personal information being processed for direct marketing, profiling or automated decision-making.
We can continue to use your personal information following a request for restriction, where:
- we have your consent;
- to establish, exercise or defend legal claims; or
If you want to exercise any of these rights, please submit your requests in writing to the DPO via the contact details set out in Section 15 below. Please note, to ensure security of personal information, we may ask you to verify your identity before proceeding with any such request.