Last updated: 24 July 2026 · Reviewed at least annually
Anglo Doorstep Collections handles the personal data of thousands of householders who generously donate to our charity partners, and we take that responsibility seriously. This policy sets out how we comply with UK data protection law — the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, as amended (including by the Data (Use and Access) Act 2025) — and the standards everyone working for us must meet when handling personal data.
This policy explains how we protect personal data. For a plain-English explanation of what data we collect about you and why, please read our Privacy Policy — the two documents work together.
Anglo Doorstep Collections is a trading name of Anglo Recycling Company Limited, a company registered in England and Wales (company number 07917282) with its registered office at Unit 111, Image Court, 328 Molesey Road, Hersham, Surrey, KT12 3PD.
We are the data controller of the personal data we process: we decide why and how it is used, and we are legally responsible for it. We are registered with the Information Commissioner's Office (ICO), registration number ZB698233.
This policy applies to all personal data processed by us, in any format and on any system — including data about our customers and donors, website visitors, people who contact us, job applicants and staff. It applies to all our directors, employees and contractors, and to every third party that processes personal data on our behalf.
Day-to-day responsibility for data protection sits with our data protection lead, who can be contacted at info@anglodoorstepcollections.co.uk for any question about this policy, our data handling practices, or your rights.
Article 5 of the UK GDPR sets out seven principles that govern everything we do with personal data. This is what each one means and how we meet it:
| Principle | How we comply |
|---|---|
| Lawfulness, fairness and transparency | We identify a lawful basis before any processing begins, we never use personal data in ways people would not reasonably expect, and our Privacy Policy explains our processing in clear language. |
| Purpose limitation | We collect personal data for specified, explicit purposes — principally arranging and carrying out doorstep collections — and do not reuse it for unrelated purposes. |
| Data minimisation | We collect only what we need. Booking a collection requires a name, address and contact details — nothing more. We do not ask donors for payment details, dates of birth or any other data the service does not need. |
| Accuracy | Customers can view and update their details through our customer account pages, and we correct inaccurate data promptly when we are told about it. |
| Storage limitation | We keep personal data no longer than necessary, apply the retention criteria in section 14, and delete data on request wherever the law allows. |
| Integrity and confidentiality | Personal data is protected by the technical and organisational measures described in section 13, and access is restricted to those who need it. |
| Accountability | We document our processing, train our staff, put written contracts in place with our processors, and review our practices regularly — see section 10. |
We process personal data in order to:
The categories of data involved are: contact information (name, address, email address, phone number), booking details, communication preferences, correspondence, technical data about use of our website, and recruitment and employment records. Our collection service is free for donors and we do not collect payment card details from them. A full description of each category is in our Privacy Policy.
Every processing activity we carry out rests on one of the following lawful bases under Article 6 of the UK GDPR, identified and recorded before the processing begins:
We do not ask for, and do not routinely process, special category data (such as data about health, religion or ethnicity). If you choose to share such information with us — for example, telling us about a mobility or access need so our crew can collect from a convenient place — we record only what is needed to carry out your request, treat it with additional care, and rely on your explicit consent to hold it. You can ask us to delete it at any time.
We consider data protection at the design stage of any new system, page or process, not as an afterthought. By default, our systems collect the minimum data needed for the task, restrict access to those who need it, and avoid exposing personal data unnecessarily. Where a new processing activity is likely to result in a high risk to individuals, we carry out a data protection impact assessment before it begins.
As controller, we must be able to demonstrate our compliance — not just assert it. We do this by:
Personal data we hold is stored in the following locations:
Most of our data never leaves the United Kingdom. Where personal data is transferred outside the UK (for example, to our route planning provider in the USA), the transfer is made only with safeguards recognised under UK data protection law — such as the UK Extension to the EU–US Data Privacy Framework, or the ICO's International Data Transfer Agreement or Addendum — so that the data receives an equivalent standard of protection wherever it is processed.
We protect personal data with technical and organisational measures appropriate to the risk, including:
We keep personal data only for as long as necessary for the purposes it was collected for, including to satisfy legal, accounting or reporting requirements. The criteria we use to set retention periods are:
Specific retention periods for each category of data are set out in our Privacy Policy. When data is no longer needed it is deleted or irreversibly anonymised, and you can ask us to delete your data at any time.
Under the UK GDPR you have the right to:
Send your request to info@anglodoorstepcollections.co.uk or to our postal address below — no special form is needed. We will:
Our marketing emails comply with the UK GDPR and the Privacy and Electronic Communications Regulations (PECR). We only email existing customers about our own similar services (such as future collections in their area), every message identifies us and contains a working unsubscribe link, and an opt-out takes effect promptly and permanently. You can also opt out at any time via our unsubscribe page. The right to object to direct marketing is absolute — if you object, we stop.
We maintain procedures to detect, contain, investigate and record personal data breaches, and we keep a register of breaches and near misses whether or not they are reportable. Where a breach is likely to result in a risk to individuals' rights and freedoms, we will report it to the Information Commissioner's Office without undue delay and, where feasible, within 72 hours of becoming aware of it. Where a breach is likely to result in a high risk to you, we will also tell you directly, without undue delay, explaining what happened and what we are doing about it.
Before we appoint any third party to process personal data on our behalf, we check that it can provide sufficient guarantees about its security and compliance. Every processor operates under a written contract that meets the requirements of Article 28 of the UK GDPR: it may act only on our documented instructions, must keep the data confidential and secure, may not appoint sub-processors without permission, must assist us with data subject requests and breach obligations, and must delete or return the data when the contract ends. Our main processors and storage locations are listed in section 11.
If you have a concern about how we handle personal data, please contact us first — we take every concern seriously and will investigate and respond to you promptly. You also have the right to complain to the UK's supervisory authority at any time:
Information Commissioner's Office (ICO)
Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF
Helpline: 0303 123 1113
ico.org.uk/make-a-complaint
This policy is reviewed at least annually, and sooner if the law, ICO guidance or our processing activities change. The latest version is always published on this page with the date it was last updated.
Anglo Doorstep Collections
Anglo Recycling Company Limited
Unit 111, Image Court
328 Molesey Road
Hersham, Surrey, KT12 3PD
info@anglodoorstepcollections.co.uk