Last updated: July 2026
RecycleSecure is a trading name of Ecoestates Solutions Ltd, a company registered in England & Wales (company no. 16292241), with registered office at Ground Floor, Radley House, Richardshaw Road, Pudsey, LS28 6LE. For the purposes of UK data protection law, Ecoestates Solutions Ltd is the data controller for the information described below.
This policy explains how we handle personal information when you use our website or our IT asset disposal, secure data destruction and recycling services. We are committed to protecting your information and handling it in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Information we collect
Depending on how you interact with us, we may collect:
- Business & contact details — your name, job title, company name, email address, telephone number and collection/site addresses.
- Service & collection information — collection dates, asset lists, quantities and weights, and any instructions you give us.
- IT asset information — makes, models, serial numbers and asset tags of the equipment we collect, which we record to provide chain-of-custody tracking and compliance certificates.
- Client portal data — if you use our portal, your login details and activity within it.
- Website & technical data — IP address, browser type, and pages visited, collected via cookies (see section 6).
2. Data held on the equipment we process
The devices we collect may contain your organisation's data. Our purpose is to securely erase or physically destroy that data to high, industry-recognised standards — not to access or use it. Where personal data is present on media we process, we act as a data processor on your behalf, under contract and on your instructions, and we destroy it securely. We issue a certificate of data destruction as evidence. We do not retain the contents of your devices after destruction.
3. How we use your information and our lawful bases
- To perform our contract with you — providing quotes, arranging collections, carrying out data destruction and recycling, issuing certificates and operating the client portal.
- To meet legal obligations — maintaining waste duty-of-care records, issuing Waste Transfer Notes and Hazardous Waste Consignment Notes, WEEE reporting, and accounting/tax records.
- For our legitimate interests — responding to enquiries, improving and securing our services, preventing fraud, and general business administration (balanced against your rights).
- With your consent — sending marketing communications and setting non-essential cookies. You can withdraw consent at any time.
4. Who we share your information with
We do not sell your personal data. We share it only where necessary with:
- Trusted partners and sub-processors who help us deliver our services — for example downstream WEEE recyclers, logistics providers, IT remarketing partners and our hosting/portal providers, all bound by confidentiality and data-protection obligations.
- Regulators and authorities where legally required — for example the Environment Agency and HMRC.
- Our professional advisers (accountants, legal advisers) where necessary.
Where any provider is based outside the UK, we ensure appropriate safeguards are in place (such as an adequacy decision or Standard Contractual Clauses).
5. How long we keep it
- Waste Transfer Notes — at least 2 years, as required by law.
- Hazardous Waste Consignment Notes — at least 3 years, as required by law.
- Asset records & data destruction certificates — for the duration of our relationship and as needed for compliance and audit.
- Accounting & financial records — 6 years, to meet tax obligations.
- Marketing preferences — until you opt out.
6. Cookies
Our website uses a small number of cookies:
- Essential cookies that make the site and client portal work — these do not require consent.
- Analytics cookies that help us understand how the site is used, so we can improve it — these are set only with your consent.
You can control or delete cookies through your browser settings. Blocking essential cookies may affect how the site works.
7. Your rights
Under UK data protection law you have the right to: access your data; have it corrected or erased; restrict or object to its processing; data portability; and to withdraw consent where we rely on it. To exercise any of these, email [email protected]. We will respond within one month.
If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113, though we'd appreciate the chance to put things right first.
8. How we keep your information secure
We apply appropriate technical and organisational measures — including access controls, encryption in transit, vetted personnel, secure facilities and audited processes aligned with recognised information-security standards — to protect your information against loss, misuse and unauthorised access.
9. Changes to this policy
We may update this policy from time to time. The current version is always published here, with the "last updated" date shown above.
10. Contact us
For any privacy question or request, contact the data controller, Ecoestates Solutions Ltd:
- Email: [email protected]
- Telephone: +44 7915 210690
- Post: Ground Floor, Radley House, Richardshaw Road, Pudsey, LS28 6LE