Privacy

Privacy Notice

Last updated: 8 July 2026

In short: a waste transfer record is a legal record we're required to create and keep. We record the details of the transfer — including who signed it, where, and on what device — to make that record trustworthy and to prevent fraud. We keep the record for as long as it's needed, and we remove the detailed location/device tracking once the legal retention period has passed.

Who we are

Wastestamp provides a digital waste-transfer-note platform. For the transfer records themselves, the waste producer (our customer) is the data controller and Wastestamp is their processor. For our cross-customer fraud-prevention layer (device profiles), Wastestamp is the controller.

What we collect, and why

Data	Why	Lawful basis (UK GDPR)
Transfer record: parties, waste type/quantity, dates, and the name & company of who signs at each step	To create the statutory waste transfer / consignment note you're legally required to hold	Legal obligation (Art 6(1)(c))
Location (GPS), device characteristics and IP address at sign-off	To verify the transfer happened where and how it's claimed, and to detect fraud/impersonation	Legitimate interests (Art 6(1)(f))
Portal account: name, email	To give you an account and manage access	Contract / legitimate interests

How long we keep it

The transfer record (including who signed it) is kept for as long as it's needed — at least the legal minimum of 2 years (3 years for hazardous consignments), and longer where our customer needs it as evidence.
The detailed tracking extras — precise GPS, IP address and device fingerprint — are automatically removed once a transfer is past that legal window; they aren't kept long-term.
Device profiles and security logs are kept for up to 3 years.

Who we share it with

The transfer record is visible to the parties to that transfer (producer, carrier, destination) and, where the regulator requires it, to the environmental regulator. We use trusted infrastructure providers (e.g. Microsoft Azure) to run the service. We do not sell personal data or use it for advertising.

Your rights

You have the right to access the personal data we hold about you, to have inaccurate data corrected, to object to certain processing, and to request erasure. Note that we cannot delete a statutory transfer record within its legal retention period, but we can remove data held beyond what the law requires.

To make a request, contact us at privacy@wastestamp.co.uk. You also have the right to complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.