Montaj Digital Ltd · Updated 7 September 2026
Privacy policy
Who is responsible
WasteProviders.co.uk is a brand operated by Montaj Digital Ltd, registered in England and Wales (company number 13521589). Montaj Digital Ltd is the controller of personal information described here. Registered office: C/O SGB Accountants, Sopers House, Sopers Road, Cuffley, EN6 4RY, United Kingdom. Its ICO registration is ZC208152. Contact kaiyan@montajdigital.io for privacy matters.
Information we collect
When you enquire, we collect your name, email, telephone number, postcode, waste requirements, message, requested provider and the page you used. Please do not include sensitive information or details about other people unless needed and authorised. For providers, we hold business listing details, business contact details, communications, permission records and verification evidence. Hosting and security services process technical information such as IP address, browser, request time and errors. Optional analytics is described in our cookie policy.
Why we use it and our lawful bases
We use enquiry details to respond and help arrange the waste services you request, relying on our legitimate interests in operating a useful enquiry and directory service. Where processing is necessary to take steps at your request towards a contract with us, we rely on that contractual basis. We use legitimate interests to maintain accurate business listings, manage business relationships, prevent abuse and keep records of communications. We balance those interests against your rights and expectations. We rely on consent for optional analytics and permission-based promotional emails. We rely on legal obligations to handle data rights and applicable regulatory requirements. We may retain limited information for establishing or defending legal claims.
Who receives your information
Our authorised administrator reviews enquiries. For quote requests we may share relevant contact and job details with suitable waste providers, including a provider you selected, so they can respond. A listing alone does not mean that provider has received your enquiry. Providers receiving an enquiry act as independent controllers for their own quotations and services, and their privacy notices apply. General contact messages are not routinely sent to providers. We do not sell a consumer mailing list or enrol enquirers in marketing automatically.
Our service providers and overseas processing
We use Supabase for database storage and administrator authentication, Vercel for hosting and security, and Resend for sending and recording email delivery. Replies are handled in our business mailbox. Google Analytics is loaded only if you choose analytics cookies. Our Supabase database is hosted in Frankfurt, Germany; other suppliers may process data outside the UK, including in the EEA and United States. We use contractual data protection arrangements and, where required, recognised adequacy arrangements or approved international transfer safeguards. Contact us for information about the applicable safeguards. We may disclose necessary information to professional advisers, authorities where required by law, or a successor to the business with appropriate protections.
Retention
Our operating schedule is to review and remove or anonymise closed enquiries after 12 months, inactive prospect contact records after 12 months, and message content after 24 months. Import source files and staging rows are removed after 30 days. Published business listings are retained while relevant and reviewed when changes are reported; active partner records are kept for the relationship and reviewed within 24 months after it ends. We retain minimal opt-out records while we operate partner communications so that we do not contact you again. Data-rights handling records are reviewed after three years. Information needed for a legal obligation, active dispute or claim may be kept longer, with access restricted. Removal from operational systems does not instantly remove records from supplier backups; those expire under the supplier’s backup cycle. Mailbox and supplier records require a separate review when a request is handled.
Your choices and rights
You can ask for access, correction, erasure, restriction or, where applicable, portability of your personal information. You may object to processing based on legitimate interests and to direct marketing at any time. Withdraw consent using cookie settings or an email opt-out link, without affecting earlier lawful processing. Email kaiyan@montajdigital.io; we may request proportionate identity information. We normally respond within one month and will explain any permitted extension or refusal. You can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or telephone 0303 123 1113. Contacting us first may help resolve the issue but is not required.
Security, children and automated decisions
We restrict administration to authorised access and use access controls and secure connections. No system can guarantee absolute security. The service is intended for adults arranging waste services, not children. We do not make solely automated decisions with legal or similarly significant effects. Search ordering and calculator recommendations are informational; an administrator reviews enquiry routing.
Updates
This notice was updated on 7 September 2026. We will publish revisions here and provide additional notice where a material change requires it. See our provider privacy notice for business listing sources and our cookie policy for storage choices.