Last Updated: February 2026

Next Review Date: February 2027

Introduction

EK Recycling Ltd is committed to protecting your privacy and ensuring you have a positive experience on our website. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in accordance with the General Data Protection Regulation (GDPR) and the Data Protection Act 2018.

Please read this Privacy Policy carefully. If you do not agree with our policies and practices, please do not use our website.

1. Data Controller Information

The data controller responsible for your personal data is:

EK Recycling Ltd

20 Sterling Road
Castlehill Industrial Estate
Carluke
Lanarkshire, ML8 5WL
United Kingdom

Email: craig@ek-recycling.co.uk

Company Registration Number: SC864559
VAT Number: 509 7737 56

If you have any questions about how we handle your data, please contact us using the information above.

2. What Data We Collect

We may collect the following categories of personal data:

2.1 Contact Form Data

  • Name
  • Email address
  • Phone number
  • Company name
  • Business address
  • Message content and enquiry details

2.2 Website Analytics Data

  • IP address
  • Browser type and version
  • Operating system
  • Pages visited and time spent
  • Referrer information
  • Device type and screen resolution
  • Cookie identifiers

2.3 Automatically Collected Data

When you visit our website, certain information is automatically collected through cookies and similar tracking technologies.

3. How We Use Your Data

We use the personal data we collect for the following purposes:

  • To respond to enquiries: Responding to contact form submissions and providing information requested
  • To provide services: Delivering waste management quotations and service information
  • To improve our website: Analysing user behaviour to enhance user experience and website functionality
  • For compliance: Meeting our legal and regulatory obligations
  • For marketing: Sending newsletters and service updates (only with your consent)
  • For security: Detecting and preventing fraud or other malicious activity
  • To maintain our systems: Technical administration and system optimisation

4. Legal Basis for Processing

Under GDPR, we process your personal data on the following legal bases:

4.1 Legitimate Interests

We process contact form data and analytics information based on our legitimate interest in running our business and understanding how our website is used. This includes responding to business enquiries and improving our website performance.

4.2 Consent

For marketing communications and non-essential cookies, we only process your data where you have given explicit consent. You can withdraw this consent at any time.

4.3 Contract Performance

Where you enter into a service agreement with us, we process your data to fulfil that contract.

4.4 Legal Obligation

We process certain data to comply with legal obligations under waste management regulations and environmental law.

5. Data Retention

We retain your personal data for the following periods:

  • Contact form enquiries: 3 years (or duration of business relationship plus 3 years)
  • Website analytics data: 13 months (standard Google Analytics retention)
  • Email communications: 2 years after last contact
  • Customer service records: Duration of contract plus 3 years
  • Legal and compliance records: As required by applicable law (typically 6-7 years)

Once the retention period expires, we securely delete or anonymise your data. If you request deletion of your data, we will comply with your request unless there is a legal reason to retain it.

6. Your Data Protection Rights

Under the UK GDPR, you have the following rights:

6.1 Right of Access

You have the right to request a copy of the personal data we hold about you. We will provide this information within 30 days of your request.

6.2 Right to Rectification

You have the right to request that we correct any inaccurate or incomplete personal data we hold about you.

6.3 Right to Erasure

You have the right to request deletion of your personal data in certain circumstances, such as where the data is no longer necessary for the purpose it was collected.

6.4 Right to Restrict Processing

You may request that we restrict how we process your personal data in certain circumstances.

6.5 Right to Data Portability

You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another organisation.

6.6 Right to Object

You have the right to object to the processing of your personal data for direct marketing or on grounds relating to your particular situation.

6.7 Right to Withdraw Consent

Where we process your data based on consent, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us at craig@ek-recycling.co.uk

7. Cookies Policy

7.1 What Are Cookies?

Cookies are small files stored on your device that help us provide and improve our website. We use both essential and non-essential cookies.

7.2 Essential Cookies

These cookies are necessary for our website to function properly and include:

  • Session management cookies
  • Security and fraud prevention cookies
  • Website functionality cookies

7.3 Analytics Cookies

We use Google Analytics to understand how visitors use our website. This helps us improve our content and user experience. Google Analytics uses cookies to track anonymous user information.

7.4 Marketing Cookies

With your consent, we may use cookies for targeted marketing and advertising purposes.

7.5 Cookie Management

You can control cookies through your browser settings. Most browsers allow you to refuse cookies or alert you when a cookie is being sent. However, blocking essential cookies may affect website functionality.

You can also opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

8. Third-Party Services and Data Sharing

8.1 Google Analytics

We use Google Analytics to analyse website usage. Google may use the information collected to contextualise and personalise advertisements. Google's privacy practices are described in the Google Privacy Policy.

8.2 Email Service Providers

If you subscribe to our mailing list, your email address may be shared with our email service provider for the purpose of sending newsletters and communications.

8.3 Data Protection and International Transfers

We do not routinely transfer data outside the UK/EU. Where transfers do occur, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses.

8.4 Disclosure for Legal Reasons

We may disclose personal data if required by law, such as to comply with a legal order, court ruling, or regulatory requirement from the Environment Agency or relevant authorities.

9. Data Security

We implement comprehensive technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

  • Secure socket layer (SSL) encryption for data in transit
  • Secure servers and firewalls
  • Access controls and authentication mechanisms
  • Regular security audits and vulnerability assessments
  • Employee training on data protection practices
  • Secure data deletion procedures

However, no transmission over the internet is completely secure. While we strive to protect your data, we cannot guarantee absolute security. You provide data at your own risk.

10. Children's Privacy

Our website is not intentionally directed at children under the age of 13. We do not knowingly collect personal data from children under 13 without parental consent. If we become aware that a child under 13 has provided us with personal data, we will promptly delete such information and terminate the child's account.

11. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date at the top of this document.

Your continued use of our website after any modifications signifies your acceptance of the updated Privacy Policy.

12. Data Protection Authority Complaints

If you believe we have violated your data protection rights or have concerns about how we process your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):

Information Commissioner's Office (ICO)
Wycliffe House
Water Lane
Wilmslow, Cheshire, SK9 5AF
United Kingdom

Phone: 0303 123 1113
Website: www.ico.org.uk

13. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

Email: craig@ek-recycling.co.uk

Address:
20 Sterling Road
Castlehill Industrial Estate
Carluke
Lanarkshire, ML8 5WL
United Kingdom

We aim to respond to all data protection requests and enquiries within 30 days.