Privacy Policy

Important notice

Template requiring legal review

This policy is supplied as editable website starter content. It must be reviewed and adapted by qualified legal counsel before the website or platform launches, including company identity, jurisdiction, processing activities, retention periods and regulatory obligations.

1. Who controls the information

The final policy should identify the legal company operating ParaWaste, its registered address, company number, contact email and any appointed privacy contact or data-protection representative.

2. Information collected

Depending on the live features, ParaWaste may collect account and business details, contact information, marketplace activity, material and transaction data, uploaded documents, support messages, technical logs, consent records and website analytics.

3. How information is used

Information may be used to provide accounts and platform functions, match marketplace opportunities, manage enquiries and transactions, improve security, communicate service updates, respond to support, meet legal obligations and improve the product.

4. Legal grounds and consent

The final policy must describe the legal basis used for each processing purpose. Marketing communications and non-essential cookies should be controlled through appropriate consent mechanisms where required.

5. Sharing and processors

Information may be shared with authorized marketplace participants when the user chooses to disclose it, and with contracted service providers such as hosting, email, analytics, security, payment or support providers under suitable agreements.

6. International transfers

Any transfer of personal data outside the relevant jurisdiction must use an appropriate legal mechanism and be described accurately after the hosting and service-provider architecture is confirmed.

7. Retention

Retention periods should be defined by data category, business need, transaction requirements, security, dispute handling and applicable law. Data should not be kept longer than necessary.

8. Security

ParaWaste should use proportionate technical and organizational measures including access controls, encryption in transit, backups, logging, role-based permissions and incident-response procedures.

9. Individual rights

The final policy should explain how individuals can request access, correction, deletion, restriction, portability, objection or withdrawal of consent, where those rights apply.

10. Contact and complaints

Provide a clear privacy contact and explain the right to contact the relevant supervisory authority where applicable.