PRIVACY POLICY

1. Introduction

Leeds Skip Services ("LSS", "we", "us", "our") is committed to protecting and respecting your privacy. This policy explains how we collect, use, store, and protect your personal data when you use our website, booking system, and services.

By using our website or booking a skip hire service, you agree to the collection and use of your data as described in this policy.

2. Information We Collect

We may collect the following personal information when you use our services:

• Contact details: your name, email address, phone number, and delivery address.
• Booking details: skip size, delivery date, hire duration, waste type, and any special instructions.
• Payment information: payments are processed securely by Stripe. We do not store your full card details on our servers. Stripe may collect card number, expiry date, and CVC for payment processing.
• Technical data: your IP address, browser type, device information, and pages visited on our site. This is collected automatically through cookies and similar technologies.
• Communication data: any correspondence you have with us via email, phone, or our website.

3. How We Use Your Information

We use your personal data for the following purposes:

• Fulfilling bookings: to process your skip hire order, arrange delivery and collection, and manage your booking.
• Payment processing: to take payment for our services via Stripe or cash on delivery.
• Communication: to send you booking confirmations, delivery updates, and respond to your enquiries via email and SMS.
• Legal compliance: to comply with our legal obligations, including waste transfer regulations and council permit applications.
• Service improvement: to improve our website, services, and customer experience.

4. Legal Basis for Processing

We process your personal data on the following legal grounds:

• Contract: processing is necessary to fulfil our contract with you (your skip hire booking).
• Legal obligation: we are required to keep certain records for tax, waste management, and regulatory purposes.
• Legitimate interest: to improve our services and communicate with you about your bookings.
• Consent: where you have given us specific permission, such as opting in to marketing communications.

5. Payment Security

All card payments are processed securely through Stripe, a PCI DSS Level 1 certified payment processor. We never see, store, or have access to your full card details. Your payment information is transmitted directly to Stripe using industry-standard TLS encryption. For more information on how Stripe handles your data, please visit Stripe's Privacy Policy.

6. Who We Share Your Data With

We may share your personal data with the following third parties:

• Stripe: for secure payment processing.
• Gmail (Google): to send you booking confirmation emails.
• Textlocal: to send you booking confirmation SMS messages.
• Local councils: when applying for skip permits on your behalf, we share your name, address, and delivery details.
• Our delivery team: drivers receive delivery addresses and contact numbers to fulfil your booking.

We do not sell, rent, or trade your personal information to any third parties for marketing purposes.

7. Cookies

Our website uses cookies and similar technologies to improve your browsing experience. These include:

• Essential cookies: required for the website to function correctly (e.g., session storage for booking data).
• Analytics cookies: to understand how visitors use our website so we can improve it.
• Payment cookies: set by Stripe to process payments securely.

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our booking system.

8. How Long We Keep Your Data

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

• Booking records: kept for up to 6 years for tax, legal, and regulatory compliance.
• Payment records: Stripe retains transaction records in accordance with their own retention policy.
• Communication records: kept for up to 2 years, unless required longer for dispute resolution.

9. Your Rights

Under UK data protection law (UK GDPR), you have the right to:

• Access: request a copy of the personal data we hold about you.
• Rectification: ask us to correct any inaccurate or incomplete data.
• Erasure: request that we delete your personal data where there is no compelling reason for its continued processing.
• Restriction: ask us to restrict the processing of your data in certain circumstances.
• Data portability: request your data in a structured, machine-readable format.
• Object: object to processing based on legitimate interests or for direct marketing.

To exercise any of these rights, please contact us using the details below.

10. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this privacy policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this page periodically to stay informed about how we protect your data.

12. Contact Us

If you have any questions about this privacy policy or how we handle your personal data, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data protection rights have been violated.