Privacy Policy

1. Purpose

Recycling Lives Services (Recycling Lives Compliance Services Limited and Recycling Lives Environmental Services Limited) respects your privacy and is committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website (regardless of where you visit our website from) and tell you about your privacy rights and how the law protects you.

This Privacy Policy explains how we collect, use, and protect your personal data when you interact with our website. This includes any information you provide when you sign up for our newsletter, purchase a product or service, submit an enquiry, or otherwise share personal data through this site.

Our website is not intended for children, and we do not knowingly collect personal data relating to children.

Please read this Privacy Policy together with any other privacy or fair processing notices we may provide on specific occasions when we are collecting or processing personal data about you. These additional notices will help you understand fully how and why we use your data. This Privacy Policy is designed to supplement those notices and should not be seen as overriding them.

2. Data Controller

Recycling Lives Services is the data controller responsible for your personal data.

This Privacy Policy is issued on behalf of the Recycling Lives Services. When we refer to “Recycling Lives Services”, “we”, “us”, or “our”, we are referring to the specific entities that are responsible for processing your personal data. We will inform you which entity is acting as the controller when you purchase a product or service from us. Recycling Lives Services is the controller responsible for the operation of this website.

2.1 Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee matters relating to this Privacy Policy and our data protection practices. If you have questions about this Privacy Policy, or wish to exercise your data protection rights, please contact our DPO using the details below:

• Data Protection Officer: Jade Hall
• [email protected]
• Recycling Lives, 1a Essex Street, Preston, PR1 1QE
• 0330 175 1111

You have the right to lodge a complaint at any time with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection (www.ico.org.uk). However, we would appreciate the opportunity to address your concerns before you contact the ICO, so please reach out to us first.

3. Third party links

Our website may contain links to third‑party websites, plug‑ins, or applications. Clicking on these links may allow third parties to collect or share data about you. We do not control these third‑party websites and are not responsible for their privacy statements.

When you leave our website, we encourage you to read the privacy policy of every website you visit.

4. The data we collect about you

Personal data, or personal information, means any information that can identify an individual. It does not include data where your identity has been removed (anonymous data).

We may collect, use, store and transfer different categories of personal data about you. To help you understand what we collect and how it is used, we group personal data into the following categories:

(a) Identity Data

Includes your name, username or similar identifier, title, date of birth, and any other identifying information.

(b) Contact Data

Includes your billing address, delivery address, email address, telephone number, and any other contact details.

(c) Technical Data

Includes internet protocol (IP) address, login data, browser type and version, time zone setting, browser plug‑in types, operating system and platform, and other technology on the devices you use to access our website.

(d) Transaction Data

Includes details about payments to and from you, and other details of products or services you have purchased from us.

(e) Profile Data

Includes your username and password, purchases or orders made by you, your interests, preferences, feedback, and survey responses.

(f) Usage Data

Includes information about how you use our website, products, and services.

(g) Marketing and Communications Data

Includes your preferences for receiving marketing from us and your communication preferences.

We collect, use and share Aggregated Data, such as statistical or demographic information. Aggregated Data may be derived from your personal data but is not considered personal data in law, as it does not directly or indirectly reveal your identity.
For example, we may aggregate your Usage Data to understand how many users access a particular website feature.

If we combine Aggregated Data with your personal data so that you can be identified, we treat the combined data as personal data, and it will be handled in accordance with this Privacy Policy.

We do not intentionally collect Special Categories of Personal Data via our website. However, where such information is voluntarily provided by you, it will be processed in accordance with applicable data protection law. We also do not collect information relating to criminal convictions or offences.

4.1 Failure to provide personal data

Where we are required by law, or under the terms of a contract with you, to collect certain personal data, and you fail to provide that information when requested, we may be unable to perform the contract we have or are attempting to enter into with you.
In such circumstances, we may need to cancel a product or service you have with us. If this becomes necessary, we will inform you at the time.

5. How your personal data is collected

5.1 Direct Interactions

You may provide Identity, Contact and Financial Data by filling in forms or corresponding with us by post, phone, email or other means. This includes when you:

• Apply for our products or services
• Create an account on our website
• Subscribe to our services or publications
• Request marketing materials
• Complete a survey
• Provide feedback or contact us

5.2 Automated Technologies or Interactions

As you interact with our website, we may automatically collect Technical Data about your device, browsing behaviour and usage patterns. We collect this data using cookies and similar technologies.
Further information regarding our use of cookies is set out in our separate Cookie Policy available on our website.

How we use your personal data

We will only use your personal data where the law allows, please see the table below. The most common circumstances are:

• To perform a contract with you
• Where it is necessary for our legitimate interests (and your rights do not override those interests)
• To comply with a legal obligation

We generally do not rely on consent as a lawful basis for processing, except where required for third‑party direct marketing by email or SMS.

You may withdraw consent at any time by contacting us.

5.1 Change of purpose

We will only use your personal data for the purposes for which it was collected unless:

• we reasonably consider a new purpose compatible with the original purpose, or
• the law requires or permits such use.

Where required, we will notify you of the change and provide the lawful basis.

6. Marketing

We aim to give you choices regarding how your personal data is used in marketing and advertising.

6.1 Promotional Offers

We may use your Identity, Contact, Technical, Usage and Profile Data to assess what products or services may interest you.

You will receive marketing communications if:

• you have requested information from us, or
• you have purchased from us, and
• you have not opted out of marketing.

6.2 Third‑Party Marketing

We will ask for your express opt‑in consent before sharing your data with any third party for marketing purposes.

6.3 Opting Out

You may opt out of marketing at any time, without affecting service communications (e.g., order confirmations).

7. Data Sharing

We may share your personal data with:

• IT and system administration providers
• Website hosting providers
• Professional advisers
• Payment processors
• Regulators and authorities where required by law

All third parties are required to respect the security of your personal data and treat it in accordance with the law.

8. International Transfers

We do not routinely transfer your personal data outside of the United Kingdom.

However, some of our third-party service providers may be based outside of the UK. Where this occurs, we ensure that appropriate safeguards are in place to protect your personal data, such as International Data Transfer Agreements (IDTAs) or UK adequacy regulations.

9. Data Security

We have implemented appropriate technical and organisational security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorised way.

Access to your personal data is limited to employees, agents, contractors and third parties who have a business need to know.

10. Data Retention

We will retain your personal data only for as long as reasonably necessary to fulfil the purposes for which we collected it, including for the purposes of satisfying legal, accounting or reporting requirements.

Typical retention periods include:

• Customer contract data – up to 6 years
• Enquiry data – up to 12 months
• Marketing data – until you opt out

11. Your legal rights

Under data protection law, you have rights including:

• The right to access your personal data
• The right to request correction
• The right to request erasure
• The right to restrict processing
• The right to object to processing
• The right to data portability
• The right to withdraw consent

If you wish to exercise any of the above rights, please contact our DPO. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your personal data has been processed unlawfully.

12. Automated Decision-making

We do not use your personal data for automated decision-making or profiling.

13. Policy updates

We keep this Privacy Policy under regular review. This version was last updated in February 2026.