Privacy Notice

Last updated: 13 May 2026

This Privacy Notice explains how Blackpool Rubbish Removal processes your personal data under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

Blackpool Rubbish Removal, Blackpool, Lancashire.
Email: [email protected].

2. Contact for data protection

For any data protection query, email [email protected].

3. What we collect

Name, phone number, email address and town/postcode when you request a quote.
Free-text description of the rubbish-removal job you submit.
If you call our line: caller ID, call recording, and AI-generated transcript of any voicemail.
Server logs (IP address hash, user agent, pages visited) for security and analytics.

Source: the data subject directly (you).

4. Purpose & lawful basis

Quote response & service delivery — performance of a contract / taking steps at your request to enter into a contract (UK GDPR Art. 6(1)(b)).
Pay-per-lead distribution — we share your quote details with a vetted local rubbish-removal contractor from our network, who pays per lead unlocked. This is done with your consent (the consent checkbox on our quote form) and is necessary to respond to your enquiry (Art. 6(1)(a)/(b)).
Direct marketing — only with separate, explicit opt-in. We don't send marketing SMS or emails unless you tick a clearly marked marketing checkbox AFTER your first interaction with us.

5. Processors & sub-processors

We share data only with the following processors, each bound by a written agreement under Art. 28 of the UK GDPR:

Cloudflare, Inc. — DNS, CDN, email routing.
Hostinger International Ltd — web hosting, database, email forwarding.
Twilio, Inc. — call tracking, voicemail recording.
fal.ai — voicemail audio transcription (Whisper model).
Anthropic, PBC — voicemail field extraction (Claude model). The audio recording itself is not retained by Anthropic; only the text transcript.
Resend, Inc. — transactional email delivery.
Google LLC (Gmail) — owner's inbox for lead notifications.
LeadsManager (Vercel + Supabase) — internal CRM that aggregates leads across the operator's lead-gen sites.
Vetted rubbish-removal contractors — your full quote details are released to one contractor when they unlock the lead at our per-lead price. All contractors agree in writing to UK GDPR-compliant handling.

6. International transfers

Some processors above (Cloudflare, Twilio, fal.ai, Anthropic, Resend, Google, Vercel) host data outside the United Kingdom, primarily in the United States and European Union. Each operates under published Data Processing Agreements that incorporate the UK International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses, or relies on an adequacy decision.

7. Retention

Quote enquiries: 3 years from last contact.
Voicemail recordings: 90 days, then audio is deleted (transcripts retained 3 years).
Tax invoices: 6 years (HMRC).
Server access logs: 90 days.
Marketing consent records: for as long as you remain opted in, plus 12 months.

8. Your rights

Under the UK GDPR you have the right to:

Access your personal data (right of access).
Request correction (rectification) or deletion (erasure).
Object to processing, including direct marketing.
Restrict processing.
Withdraw consent at any time.
Data portability where technically feasible.
Lodge a complaint with the Information Commissioner's Office (ICO).

9. Direct marketing opt-out

Reply STOP to any SMS, click unsubscribe in any email, or email [email protected]. Opt-outs are effective within 5 business days.

10. Cookies and tracking

This site uses functional cookies only (session, anti-spam) plus minimal first-party click tracking (phone button taps) to measure ad effectiveness. No third-party analytics (GA4 / Meta Pixel / Hotjar) are currently loaded. If we add any tracking third party, a granular consent banner will appear above any analytics scripts firing.

11. Security & breach notification

The site is served over HTTPS, the database is encrypted at rest, sessions use HttpOnly cookies, and access is audit-logged. If a personal data breach is likely to result in a risk to your rights and freedoms, we will notify you and the ICO as required by the UK GDPR.

12. Complaints to the ICO

Information Commissioner's Office (UK)
Website: ico.org.uk
Helpline: 0303 123 1113
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF

13. Changes to this notice

Material changes will be flagged in a banner on the site for 30 days before they take effect. The "Last updated" date at the top will always reflect the most recent revision.