Legal · Last updated 22 May 2026

Privacy Policy

Last reviewed: 15 May 2026

This policy explains how Stevenage Skip Hire Ltd collects, uses and protects your personal data when you book a skip or contact us, in line with the UK GDPR and the Data Protection Act 2018.

1. Who we are

Stevenage Skip Hire Ltd ("we", "us", "the Company") is the data controller for the personal data described in this policy.

  • Registered office: Envirowaste Recycling Centre, Jacks Hill, Graveley, Herts, SG4 7EQ
  • Company registration number: 05656492
  • VAT number: 895172585
  • Environment Agency waste carrier registration: CBDU220266
  • Telephone: 0203 780 2277
  • Email: bookings@stevenageskiphire.com
  • ICO registration number: [CLIENT TO CONFIRM — every UK business that pays the ICO data protection fee has a registration number; insert it here]
  • Data protection contact: [CLIENT TO CONFIRM — named contact if you have one; otherwise the email above is used]

2. The personal data we collect

When you make a booking or get in touch we may collect:

  • Identity and contact details: your name, email address and telephone number.
  • Address details: the billing address and the skip delivery/drop-off location (these may be different). We use the getAddress.io postcode lookup service to help you enter your address accurately.
  • Business customer details (optional): if you tell us you are booking on behalf of a business, we look your business up via the Companies House public register and record the company name, company number, registered office address and SIC code(s).
  • Booking notes: any free-text information you choose to add to your booking.
  • Waste Transfer Note signature evidence: when you accept our Terms and duty-of-care declaration at checkout, we record the name you provide, your IP address and the date and time, as electronic-signature evidence for the legally required Waste Transfer Note.
  • Payment information: card payments are processed securely by Stripe. We do not see or store your full card number — we only retain a payment reference and the payment status.

3. Vehicle cameras and CCTV

Our delivery and collection vehicles are fitted with dashcams and/or CCTV. During a delivery or collection these may record footage of the location, your property and people present, including you.

  • Purpose: road and workplace safety, insurance, and evidence in the event of an accident, damage claim or dispute.
  • Lawful basis: our legitimate interests (and, where relevant, compliance with legal obligations and the establishment or defence of legal claims).
  • Retention: footage is held only for a short rolling period and then automatically overwritten, unless it is needed for a specific incident, claim or investigation. [CLIENT TO CONFIRM — default suggested: 30 days rolling.]
  • Your rights: you can ask whether footage of you exists and request a copy; see "Your rights" below. We may need to redact other people in the footage.

4. Why we use your data and our lawful basis

PurposeLawful basis
Taking and fulfilling your booking, delivering and collecting the skip, invoicing and providing customer servicePerformance of a contract
Producing and retaining the Waste Transfer Note and meeting waste duty-of-care obligations; keeping financial and tax records; waste-carrier complianceLegal obligation
Obtaining a public-road skip permit from the council on your behalfPerformance of a contract / legal obligation
Fraud prevention on payments, vehicle-camera safety and evidence, and general business administrationLegitimate interests
Non-essential cookies and analytics (if and when enabled)Consent (see our Cookie Policy)

5. Who we share your data with

We do not sell your personal data and we do not send marketing emails — we contact you only about your booking (confirmation, invoice, payment receipt and Waste Transfer Note).

We share data with:

  • The local council / Hertfordshire highways authority — where your skip is to be placed on a public road, we obtain the required permit on your behalf and share your name and address with the relevant council/highways authority for that purpose.
  • Stripe — payment processing.
  • getAddress.io — UK address/postcode lookup.
  • Companies House — to match your business details against the public register (business customers only).
  • Resend — delivery of transactional emails (booking confirmation, invoice, receipt, Waste Transfer Note).
  • Regulators — including the Environment Agency, where we are required to produce waste duty-of-care records on request.
  • Our service providers and professional advisers — IT, hosting and professional advisers acting as our processors under contract.

6. International transfers

Some of our processors (including Stripe and Resend) may process data outside the UK. Where they do, the transfer is protected by appropriate safeguards — UK adequacy regulations, the UK International Data Transfer Agreement / Addendum, or the EU–US Data Privacy Framework as applicable.

7. How long we keep your data

  • Waste Transfer Notes: at least 2 years, as required by the Waste (England & Wales) Regulations 2011.
  • Financial and invoice records: 6 years, as required for tax and company-law purposes.
  • Booking and contact data: [CLIENT TO CONFIRM — default suggested: 6 years, aligned with financial records].
  • Vehicle camera footage: see section 3. [CLIENT TO CONFIRM — default suggested: 30 days].
  • Cookies: as set out in our Cookie Policy.

Where the law requires us to keep a record (for example a Waste Transfer Note or a tax record), we cannot delete it early even if you ask us to.

8. Your rights

Subject to legal exceptions (including the statutory retention above), you have the right to: access your data; have inaccurate data corrected; have data erased; restrict or object to processing; data portability; and withdraw consent at any time where we rely on consent. To exercise any of these, contact us at bookings@stevenageskiphire.com.

You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling its helpline. We would, however, appreciate the chance to address your concerns first.

9. Security, children, changes and contact

  • Security: we use appropriate technical and organisational measures, including encrypted (HTTPS) connections and access controls, and PCI-compliant payment handling via Stripe.
  • Children: our service is intended for adults; it is not directed at children.
  • Changes: we may update this policy from time to time. The "last reviewed" date above shows when it was last changed.
  • Contact: for any privacy question, email bookings@stevenageskiphire.com or call 0203 780 2277.