Privacy policy

Every purpose below has a lawful basis, and it is recorded per person rather than assumed.

• Nothing, to see your options. A postal code prefix and an item type get you the recommendation. No account, no email, no phone number.
• Your email, to send you quotes. Lawful basis: performance of a contract you asked us to start. Without it there is nowhere to send the answer.
• Your job description and any photos, shared only with the companies you picked. Never more than three, never anyone else.
• Analytics about how pages are used. Emails, phone numbers, full postal codes and street addresses are stripped before anything is written down. We keep the postal prefix because that is the unit of geography this product works in.
• A consent record holding the exact wording you were shown and when. That is not us being thorough for its own sake: a consent you cannot evidence is not a consent.

• We do not sell, rent or broker your details to anyone.
• We do not pass your request to companies you did not choose.
• We do not require a phone number to show you prices, and we do not sell phone leads.
• We put no tracking pixels in our emails, so we do not know whether you opened one.

Go to /privacy, confirm your address with a one-time link, and you can download everything we hold or delete all of it. Deletion deletes: it does not set a flag and keep the row.

• Access and portability, as a JSON file you can keep or take elsewhere.
• Erasure, immediately, with backups rolling off within thirty days.
• Correction, by replying to any email from us.
• Objection and restriction, including to any analytics processing.

You can also complain to a regulator. In the UK that is the ICO, in Canada the Office of the Privacy Commissioner or the Commission d’accès à l’information in Quebec, and in the EU your national authority.

• Quote requests and quotes: two years, so you can look up what you were charged.
• Job outcomes and reviews: kept while the company is listed, because they are the public record.
• Consent records: as long as the law requires us to be able to evidence them.
• Sign-in tokens: fifteen minutes, then they are dead whether used or not.
• Analytics: twenty-five months, with nothing in them that identifies you.

Data is held on servers we control, and we prefer keeping Canadian personal data in Canada where that is practical. Where a processor is outside your region, the transfer is documented and covered by the appropriate safeguards. We do not move data somewhere cheaper and work out the paperwork afterwards.

We set one cookie, and only after you sign in: a session cookie so the site knows it is still you. There is no advertising cookie and no third-party tracker. The detail is on the cookies page.

This is a service for householders and businesses arranging waste collection. It is not directed at children and we do not knowingly collect anything from one.

Privacy questions go to privacy@helpmedump.com and reach a person, not a queue. If you would rather not email, everything above is also available as a button at /privacy.