Privacy & Compliance Policy

Last updated: June 12, 2026. This policy outlines how WasteLog.uk complies with the UK GDPR (Data Protection Act 2018), PECR (Privacy and Electronic Communications Regulations), and the Department for Environment, Food & Rural Affairs (DEFRA) open data specifications.


1. UK GDPR Compliance & Data Collection

When you configure a depot or use our Environment Agency receipt validator, we collect and store:

  • Contact details (Name, Work Email, Mobile Phone Number).
  • Business Information (Company Name, 5-digit SIC Code, Depot Postcode).
  • Uploaded waste tickets, receipts, and invoices (containing EWC Codes, mass/weight, and Carrier Licences).

We collect this data solely to configure your digital waste tracking mailbox, analyse ticket compliance, and submit filings to the DEFRA gateway on your behalf.

2. CRM Synchronization & PECR Rules

In accordance with PECR regulations, we sync contact parameters and compliance scan reports to our internal CRM database to trigger automated compliance status updates.

- For Corporate Bodies: We dispatch trial activation, onboarding alerts, and carrier licence warnings under Legitimate Interest guidelines.
- Opt-Out: Every SMS alert or email generated contains an immediate opt-out link. You may opt out of automated tracking reports at any time by replying "STOP" or using the unsubscribe link.

3. Environmental Compliance & Data Integrity

To ensure compliance with the 2026 digital waste tracking legislation, all logged records are securely submitted to the Environment Agency's DWT gateway. If our AI detects invalid EWC codes or missing licences, we are legally required to alert your nominated depot compliance officer within 2 working days of collection.

4. Contact Us

For data access requests or questions regarding our DEFRA integration compliance, please email: compliance@wastelog.uk.