Data Protection Policy

Smart Tech Recycling is a UK-based IT recycling and data destruction service. We are committed to protecting the privacy and security of all personal data we handle. Our contact details: • Email: info@smarttechrecycling.co.uk • Phone: 0161 707 4020

We only collect personal information that is necessary to provide our services: • Contact Information: Name, email address, phone number, postal address • Company Details: Company name, position (for business customers) • Collection Details: Information about equipment to be collected, preferred dates and times • Communication Records: Messages sent through our contact forms or email correspondence

We use your personal data solely for the following purposes: • Processing Collection Requests: To arrange and complete IT equipment collections • Customer Service: To respond to your enquiries and provide support • Documentation: To provide certificates and reports related to your collection • Legal Compliance: To meet our regulatory obligations under WEEE and waste carrier regulations • Service Improvement: To improve our services based on customer feedback We do NOT: • Share your data with third parties for marketing purposes • Sell your data to anyone • Use your data for purposes beyond those listed above

We do not share your personal data with third parties, except in the following limited circumstances: • Legal Obligation: Where required by law or to comply with regulatory requirements • Service Delivery: With our logistics partners, only to the extent necessary to complete your collection (e.g., sharing your collection address with our drivers) • Data Processors: With carefully selected service providers who process data on our behalf (e.g., email hosting), under strict confidentiality agreements We never sell your data or use it for third-party marketing.

We take the security of your data seriously: • Secure Systems: All data is stored on secure servers with encryption • Access Controls: Only authorised staff have access to personal data • Data Destruction: We follow CESG/NCSC guidance for data-bearing media we collect • Regular Reviews: We regularly review our security measures to ensure they remain effective • Staff Training: Our team is trained in data protection and confidentiality

Under UK GDPR, you have the following rights: • Right of Access: Request a copy of the personal data we hold about you • Right to Rectification: Request correction of inaccurate or incomplete data • Right to Erasure: Request deletion of your personal data in certain circumstances • Right to Restrict Processing: Request that we limit how we use your data • Right to Data Portability: Request your data in a portable format • Right to Object: Object to our processing of your data in certain situations To exercise any of these rights, please contact us at info@smarttechrecycling.co.uk

We retain your personal data only for as long as necessary: • Active Customers: We keep your data for the duration of our business relationship • Completed Collections: Collection records are retained for 7 years to meet regulatory requirements • Enquiries: If you make an enquiry but don't proceed with a collection, we'll delete your data after 2 years • Marketing Opt-Out: If you opt out of communications, we keep a record of your preference to respect your wishes

Our website uses minimal cookies: • Essential Cookies: Required for the website to function (e.g., session management) • Analytics: We may use anonymised analytics to understand how visitors use our site We do not use tracking cookies or third-party advertising cookies. You can control cookie preferences through your browser settings.

We may update this policy from time to time to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated revision date. Last updated: January 2025

If you have any questions about this data protection policy or how we handle your data, please contact us: Email: info@smarttechrecycling.co.uk Phone: 0161 707 4020 Or use our contact form: /contact We aim to respond to all data protection queries within 30 days.