UK GDPR Compliance Policy

Effective date: 24 July 2026

This UK GDPR Compliance Policy explains how Recover Recycling Limited complies with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and related privacy legislation. It applies to all processing of personal data undertaken by Recover Recycling Limited.

1. Commitment

Recover Recycling Limited is committed to protecting personal data, respecting the privacy rights of individuals and maintaining appropriate technical and organisational measures to ensure compliance with applicable data protection laws.

2. Scope

This policy applies to all employees, directors, contractors, temporary workers, consultants and third-party processors who process personal data on behalf of Recover Recycling Limited.

3. Personal Data We Process

Personal data processed may include:
• Customer and enquiry details
• Installer partner applications
• Collection request information
• Battery diagnostic and repair information
• Supplier and contractor information
• Marketing preferences
• Website analytics and technical information
• Employee or recruitment information where applicable.

4. UK GDPR Principles

Recover Recycling Limited processes personal data in accordance with the following principles:
• Lawfulness, fairness and transparency
• Purpose limitation
• Data minimisation
• Accuracy
• Storage limitation
• Integrity and confidentiality
• Accountability.

5. Lawful Bases

Processing is carried out under one or more lawful bases:
• Performance of a contract
• Legitimate interests
• Consent
• Legal obligation
• Protection of vital interests where applicable.

6. Individual Rights

We respect the rights of individuals to:
• Be informed
• Access their personal data
• Rectify inaccurate data
• Request erasure
• Restrict processing
• Object to processing
• Data portability
• Withdraw consent where consent is relied upon
• Lodge a complaint with the Information Commissioner’s Office (ICO).

7. Security

Appropriate safeguards include:
• Role-based access controls
• Password management
• Encryption where appropriate
• Secure hosting
• Malware protection
• Software updates
• Secure disposal of records
• Staff awareness and confidentiality obligations.

8. Third-Party Processors

Recover Recycling Limited uses trusted third-party providers to support its operations. These may include website hosting providers, Google services, Microsoft, Meta, LinkedIn, logistics providers and other approved suppliers. Data Processing Agreements are maintained where required by law.

9. International Transfers

Where personal data is transferred outside the UK, Recover Recycling Limited ensures appropriate safeguards are implemented, including adequacy regulations or approved transfer mechanisms.

10. Data Retention

Personal data is retained only for as long as necessary to fulfil legal, contractual and operational requirements. Retention periods are reviewed regularly.

11. Personal Data Breaches

All suspected or actual personal data breaches must be reported immediately. Recover Recycling Limited will investigate incidents, record findings, implement corrective measures and notify the ICO and affected individuals where required by law.

12. Monitoring and Review

Compliance with this policy is monitored periodically. The policy will be reviewed and updated to reflect changes in legislation, regulatory guidance and business operations.

13. Contact

Questions regarding this policy or the handling of personal data should be directed to Recover Recycling Limited using the contact details available on https://eco-recycle.co.uk.