Privacy Policy

DRAFT for review. This policy is a template written for It’s Green and must be checked by Moshe (and ideally a data protection adviser) before the site goes live. Notes marked “Draft note” should be removed once confirmed.

Last updated: [date of publication]

Who we are

For the personal data described in this policy, It’s Green is the controller.

You can contact us about this policy or your data at info@itsgreen.co.uk.

What this policy covers

This policy explains how we use personal data when you visit this website, send us an enquiry or quote request, or work with us as a customer or supplier.

It does not cover data stored on equipment you send us for erasure or destruction. We handle that data on your behalf, under the terms agreed with your organisation, and we do not access it for our own purposes.

Draft note: confirm the written terms you will use with customers for data on devices (a data processing agreement under UK GDPR Article 28).

The personal data we collect

Enquiries and quote requests: your name, organisation, sector, email address, phone number, approximate device count, sites or postcodes, the services you need and your message.
Customers: contact details of the people we deal with, collection addresses and access arrangements, and records of collections, certificates and buy-back statements.
Suppliers: contact and payment details of the people we deal with.
Website: our hosting provider keeps standard server logs (such as IP address, browser type and the pages requested) for security and to keep the site running. We do not use analytics or advertising tools.

How and why we use it

To reply to your enquiry and prepare a quote. Lawful basis: our legitimate interests in responding to enquiries, or steps you ask us to take before entering into a contract.
To arrange and carry out collections, erasure, destruction, refurbishment and buy-back, and to issue certificates, reports and statements. Lawful basis: performance of a contract.
To keep business, tax and accounting records. Lawful basis: legal obligation.
To keep the website secure. Lawful basis: our legitimate interests.

We do not sell personal data, and we do not use it for automated decision-making or profiling.

Who we share it with

We share personal data only with service providers who help us run the business, under contract, such as our website host and form provider, email provider and accounting software. We may also share it where the law requires.

Draft note: list the actual providers once chosen (for example Netlify for hosting and forms, and your email provider). Some may store data outside the UK; if so, state the safeguard used (for example the UK International Data Transfer Agreement or the UK-US data bridge).

How long we keep it

Enquiries that don’t lead to work: up to [24 months] after our last contact.
Customer records, certificates and statements: [6 years] after the end of the work, for accounting and evidence purposes.

Draft note: confirm the retention periods above.

Your rights

Under UK data protection law you have the right to ask for a copy of your data, to have it corrected or erased, to restrict or object to how we use it, and to data portability. To use any of these rights, contact us at info@itsgreen.co.uk. We will reply within one month.

Complaints

If you’re unhappy with how we have used your data, please contact us first. You can also complain to the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint, telephone 0303 123 1113.

Cookies

See our cookie policy. This website does not set cookies.

Changes to this policy

We will post any changes on this page with a new “last updated” date.