Privacy Policy
Last updated: Draft — not yet published
WASTRA (“we”, “us”, “our”) is committed to protecting your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains what personal data we collect, why, and your rights over it.
Data We Collect
We collect only what is necessary to operate your account and fulfil your orders: name, email address, phone number, delivery and billing addresses, and order history. We do not collect or store your card details — payments are processed entirely by Stripe, our PCI-DSS compliant payment provider.
How We Use Your Data
We use your data to process orders, provide customer support, prevent fraud, and, where you have given consent, to send you marketing communications. You can withdraw marketing consent at any time from your account or via the unsubscribe link in any marketing email.
Legal Basis
We process order-related data under contract necessity, and marketing communications under your consent. We may process limited data under legitimate interest for fraud prevention and site security.
Your Rights
You have the right to access, correct, delete, or export your personal data, and to object to or restrict certain processing. To exercise these rights, contact us using the details below. You may also request deletion of your account from your account settings; this is subject to our legal obligation to retain order and tax records for the period required by UK law.
Data Sharing
We share data only with the service providers necessary to run WASTRA: our payment processor (Stripe), image hosting provider, email delivery provider, and hosting infrastructure. We do not sell your personal data.
Contact
For any privacy query, contact us at the address listed on our Contact page.