Privacy Policy
Who we are
RecycleIT Now Ltd provides IT Disposal and Asset Management Services. Our registered address is Unit 2 Summit Works, Manchester Road, Burnley, Lancashire, BB11 5HG. We are registered with the Information Commissioner’s Office as a Data Controller under registration number ZA079185.
Your Privacy
This policy explains when and why we collect personal information, how we use it, and the limited circumstances under which we may disclose it. Your privacy matters to us. We are committed to the highest data privacy standards and compliance with the Data Protection Act 2018 and UK GDPR.
We adopt the six core principles of data protection. We process personal data lawfully, fairly and transparently. We only collect personal data for specific, explicit and legitimate purposes and retain it only as long as necessary. We ensure personal data is adequate, relevant and limited to what is necessary. We take steps to ensure accuracy and to rectify or erase inaccurate data without delay. We delete personal data when no longer needed, following our retention strategy. We keep personal data secure against unauthorised or unlawful processing, accidental loss, destruction or damage, using appropriate technical and organisational measures.
We are committed to full co-operation with the ICO should it be required.
Collection of your Personal Data
Where you provide personal data to us, we are the Data Controller. We only collect data necessary to deliver our IT Asset services, supply refurbished IT equipment, or respond to enquiries. Data is collected directly from you via telephone, email or our websites.
When collecting redundant IT equipment from organisations, we may handle devices containing personal data. In such cases we are not the Data Controller. Any enquiries about that data should be directed to the organisation from which we collected the equipment.
Categories and Type of Personal Data
We collect contact details to provide our services, supply products or respond to enquiries. These may include name, address, telephone number, email address, financial details (for product purchases), marketing preferences, and CCTV images (if you visit our premises).
Additional data may be collected from job applicants to assess suitability and qualifications for vacancies. Some data may also be collected through our website, as explained in our Cookie Policy. Our website or updates may contain links to third-party sites for which we are not responsible.
We do not normally collect Special Category data or children’s data. All personal data is treated as confidential and kept secure.
Reason for Data Collection and Processing
We capture contact information to communicate with you about the services we provide or enquiries you make. Contact and financial information is collected when purchasing refurbished equipment and to enable delivery. We may also use your data to inform you about service developments, product offers, or other topics we believe may interest you.
Sharing of Personal Data
To deliver our services, we may share your data with contracted service providers acting as Data Processors. They are bound by contract to protect your data and only process it in line with our instructions. A full list of processors is available from our Data Protection Officer.
We may also share data with external agencies such as the police for fraud prevention or detection. If a claim is made, we may share data with our insurers. If our business is transferred, your data may be transferred as part of the assets. We do not share personal data with third parties outside the UK/EEA.
Securing and Processing of Personal Data
Your personal data is securely held in our systems and those of contracted services, with access limited to authorised staff. We employ technical and organisational measures aligned with ISO 27001, against which we are certified. Our IT disposal operations are also certified to the ADISA standard. Staff work under strict confidentiality agreements and receive training in data security.
In the event of a data loss or unauthorised access, we will inform you if there is potential harm. We may also report this to the ICO.
Legal Basis for Processing
We process personal data on the following grounds: consent, contract, legitimate interests, vital interests, public task, or legal obligation. Most of our processing is contractual. We may also rely on legitimate interests, for example, when using third-party systems for support or communication, or when contacting business clients with service updates or offers. Marketing to private individuals is based on consent. You may opt out of marketing at any time.
Data Retention
We retain personal data for the duration of contracts or services provided, and for up to seven years afterwards to meet legal obligations. Job applicant data for unsuccessful candidates is retained no longer than twelve months.
Your Rights
Under UK GDPR you have rights over your personal data, including the rights to be informed, to access, rectify, erase, restrict processing, data portability, object, and not to be subject to automated decision-making or profiling.
To exercise your rights, contact our Data Protection Officer at RecycleITDPO@clinicaldpo.com.
How to Raise a Complaint
If you have concerns about how we handle your data, you may raise a complaint by contacting our Data Protection Officer (Clinical DPO) by phone on 0203 411 2848 or by email at RecycleITDPO@clinicaldpo.com. Please provide your name and contact details, a description of your concern, and any supporting information.
We will acknowledge your complaint within 30 days and aim to resolve it without undue delay, keeping you informed throughout.
Your Right to Complain to the ICO
If you are not satisfied with our response or believe we are not processing your personal data lawfully, you can contact the ICO:
Website: https://ico.org.uk/concerns/
Phone: 0303 123 1113
Address: Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF.
Last Reviewed
01/08/2025