Legal
Privacy Policy
In effect from 30 September 2026
Effective Date: 30 September 2026
Wastify AI Limited (“Wastify AI,” “we,” “our,” or “us”), a company registered in England and Wales under number 16641783 and registered with the Information Commissioner’s Office under ZB957060, respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, and safeguard your information when you use our website, products, and services (“Services”).
This notice explains what we do with personal data and why. Most of it does not rest on your consent: we process personal data in order to perform a contract with you, to meet a legal obligation, or in our legitimate interests in operating, securing and improving the Services. Where we do rely on consent, we ask for it separately and you can withdraw it at any time.
1. Information We Collect#
We may collect the following types of information:
- Personal Information: Such as name, email address, phone number, and company details when you create an account, contact us, or purchase our Services.
- Usage Data: Information about how you use our Services, including IP address, browser type, operating system, and pages visited.
- Uploaded Data: Any files, images, or other content you upload while using the Services.
- Cookies and tracking technologies. On the public website, one cookie records your answer to the cookie question and nothing else. Anything that measures how the site is used runs only if you accept it, is not loaded until then, and can be switched off again from the footer of any page. On pages with the enquiry form on our contact page or a document request form, Cloudflare Turnstile also runs without asking, to check that the form is being used by a person; section 3 explains what it collects. Our Cookie Policy sets out what each group does.
2. How We Use Your Information#
We use your information to:
- Provide, maintain, and improve our Services.
- Respond to your inquiries and support requests.
- Process payments and deliver purchased Services.
- Monitor and analyze usage and trends to enhance functionality.
- Communicate updates, offers, or important notices.
- Keep our forms and the Services secure, including checking that a form is being submitted by a person and not an automated script (see section 3).
We may also anonymize and aggregate data for analytical and business purposes.
3. How We Share Your Information#
We do not sell your personal information. We may share information with:
- Service Providers: Third parties who assist with hosting, analytics, payments, or support.
- Security and bot protection: Cloudflare, Inc., a company based in the United States, provides Cloudflare Turnstile, which checks that the enquiry form on our contact page and our document request forms are being filled in by a person and not an automated script. When you open a page with one of those forms, before you press submit, Turnstile collects your IP address and signals about your browser, device and connection, such as its user agent and TLS fingerprint, and runs short tests in your browser. It does not read what you type into the form. When you submit the form, we send Cloudflare the pass Turnstile issued, together with your IP address, so it can confirm the check. Cloudflare acts as our processor for this, and we rely on our legitimate interests in keeping our forms free of automated abuse (UK GDPR Article 6(1)(f)). When it acts for us, our contract with Cloudflare does not allow it to use this data for marketing or advertising. Cloudflare also uses the same signals, as a separate controller relying on its own legitimate interests, to improve its bot detection, and says it uses them to detect bots, not to identify, profile or target anyone. If a check fails, you can choose to send Cloudflare a feedback report, which goes directly to Cloudflare and contains a reference for the check, the kind of problem you pick from a short list, and anything you choose to write. Cloudflare explains how it handles this data in its Turnstile Privacy Addendum at cloudflare.com/turnstile-privacy-policy. If your browser blocks the check, the form cannot be sent, and you can email us at hello@wastify-ai.co.uk instead. Send any request about this data to us at hello@wastify-ai.co.uk.
- Legal & Compliance: If required by law, regulation, legal process, or to protect our rights and property.
- Business Transfers: In the event of a merger, acquisition, or sale of our assets.
4. Data Security#
We implement reasonable security measures to protect your information. However, no method of transmission or storage is completely secure. We cannot and do not guarantee the absolute security of your data.
We do not ask you to carry the risk of a breach. If personal data we hold is lost or exposed, our obligations under the UK GDPR and the Data Protection Act 2018 apply in full, including reporting the breach to the Information Commissioner’s Office and, where the risk to you is high, telling you directly.
5. Your Responsibilities#
You are responsible for ensuring that any data you submit to us does not violate applicable laws or the rights of others.
You should safeguard your account credentials and notify us immediately if you suspect unauthorized use of your account.
6. Your rights over your data#
The UK GDPR gives you rights over the personal data we hold about you. You can:
- Ask for a copy of it, and for an explanation of what we do with it.
- Ask us to correct it where it is wrong or incomplete.
- Ask us to delete it, where we have no continuing reason to keep it.
- Ask us to restrict what we do with it while a question about it is being resolved.
- Object to our use of it where we rely on our legitimate interests. Where you object to direct marketing we will stop, without exception.
- Ask for a copy in a portable format, or ask us to send it to another provider, where we hold it on the basis of your consent or of a contract with you.
- Withdraw consent at any time where consent is what we relied on. That does not affect anything we did before you withdrew it.
Ask at hello@wastify-ai.co.uk. We will respond within one month. There is no charge, and asking will never change how we treat you. We do not make any decision that has a legal or similarly significant effect on you by automated means alone. The check on our forms (see section 3) decides automatically whether a submission looks automated, and if it stops yours you can email us instead.
7. Data Retention#
We retain your personal information only as long as necessary to fulfill the purposes outlined in this Policy or as required by law. Retention periods for personal data in the platform are set out in the Data Processing Agreement. Where you have asked us to delete something and we have no continuing reason to keep it, we delete it rather than waiting for a period to run out.
Cloudflare does not publish a fixed retention period for the data Turnstile collects. When it acts for us, our agreement with Cloudflare allows it to keep that data only until the agreement ends or the data is no longer needed, whichever comes first. When it uses the data for its own purpose of improving its bot detection, how long it keeps it is governed by Cloudflare’s own privacy policy. The pass Turnstile issues expires after five minutes and can be used only once.
8. International Transfers#
Some of the providers listed in our Sub-processors document operate outside the United Kingdom, so your information may be processed there. Where that happens the transfer is covered by an appropriate safeguard under UK data protection law, which is the UK International Data Transfer Agreement or Addendum, or the EU Standard Contractual Clauses, as applicable. This does not depend on your consent. Email hello@wastify-ai.co.uk for a copy of the safeguard that applies to a particular transfer.
Cloudflare, Inc., which provides the security check on the enquiry form on our contact page and our document request forms (see section 3), is based in the United States and stores data mainly in the United States and the European Economic Area. Transfers to it rely on its certification under the UK Extension to the EU-US Data Privacy Framework, known as the UK-US data bridge. If that certification ever lapses, our agreement with Cloudflare switches to the EU Standard Contractual Clauses as amended by the UK Addendum.
9. Third-Party Links#
Our Services may contain links to third-party websites. We are not responsible for the privacy practices, content, or security of such websites.
10. Children's Privacy#
Our Services are not directed to children under the age of 18. We do not knowingly collect information from children. If we become aware of such data, we will delete it promptly.
11. Changes to This Policy#
We may update this Privacy Policy at any time. The updated Policy will be posted on our website with the new effective date. Your continued use of the Services indicates acceptance of the updated Policy.
12. Liability, and how to complain#
Where the law allows liability to be limited, the limits are the ones agreed in the Master Services Agreement. This notice neither adds to them nor creates any of its own.
Nothing in this notice excludes or limits our liability where the law does not allow it to be excluded or limited, and nothing in it affects your rights under the UK GDPR or the Data Protection Act 2018. If you think we have handled your personal data incorrectly, tell us at hello@wastify-ai.co.uk and we will look into it and reply. You can also complain to the Information Commissioner’s Office, the UK supervisory authority for data protection, at ico.org.uk, and you do not have to raise it with us first.
13. Contact Us#
If you have any questions about this Privacy Policy, please contact us:
📧 Email: hello@wastify-ai.co.uk
📞 Phone: UK: +44 7398 879983 | AUS: +61 283 598 379 | UAE: +971 54 500 4994
🌐 Website: wastify.co.uk