Information last updated September 2025
Data Privacy Policy - UK
About us
Panda is a registered trademark and trading name for the waste, recycling and energy operations of our UK Panda Group (“Group”, “We” “us” “our”). Companies operating in the Panda Group are as follows
- Fletchers Waste Management Limited
- Fletchers Plant Limited
- Redford Waste Limited
- Tyrone Energy Limited
- Acumen Waste Services Limited
- Bagnall & Morris (Waste Services) Limited
- Associated Waste Management Limited
- WSR Recycling Limited
- Scotwaste Recycling
If you have questions about this policy your privacy or how we collect and store your personal data during any of our Group operations, please contact our privacy office.
Panda Privacy Office
The Data Privacy Officer
Victoria Works
Barnard Rd
Broomfields
Bradford
BD4 7ED
Email
Tel: 01274 370260
When we collect your personal data, we are Data Controllers and subject to the UKGDPR, Data Protection Act 2018, AI Act, Data Use and Access Act 2025 and appliable electronic privacy regulations for the UK and European directives.
We have different lawful basis for the collection of data depending on how you interact with us. For users accessing this website we rely on consent. When you order services from us, we will rely on contract and for communications such as service information, we will rely on legitimate expectation of our customers service needs.
This Privacy Policy applies to the users of our Panda UK website, who are above the age of data consent. Thirteen years old is the age of consent for data processing for online services in the UK. For children younger than 13, parental or guardian consent is required to use our website or our services.
Data Collection
We may collect your personal data and or data from which you could be identified as a person in a few ways. This depends on how you engage with us. If you submit an enquiry form online you will be asked to provide personal details such as your name, address, email address and phone number. We might ask you for those details to respond to your request for contact about a service you want us to provide. We rely on the legal basis of legitimate interests to do so. If you call us, we may record the call to evidence a contractual agreement or enable us to resolve an issue.
We may collect, also use and share Aggregated Data such as statistical or demographic data. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy notice.
The categories of personal data and the ways in which we might collect your personal data when using our website are as follows:
- Identity Data includes first name, maiden name, last name, username or similar identifier, marital status, title, date of birth and gender.
- Contact Data includes billing address, delivery address, email address and telephone numbers. Financial Data includes bank account and payment card details.
- Transaction Data includes details about payments to and from you and other details of products and services you have purchased from us.
- Technical Data includes internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform and other technology on the devices you use to access this website.
- Profile Data includes your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses.
- Usage Data includes information about how you use our website, products and services.
- Marketing and Communications Data includes your preferences in receiving marketing from us and our third parties and your communication preferences
How we store your personal data
We store personal data collected from this website and or from our services on the Azure cloud. This provides international best practice standards to protect your personal data. More about Microsoft Azure Cloud Services can read here.
How we process your personal data
Several providers assist us to support our website services and services delivery. They are:
- Google Analytics - Website usage
- Microsoft Azure - Data storage
- Usercentrics - Cookies management
- Digital Experience and Technology Agency - Website development
- Optimizely - CMS
- Freshworks - CRM management & sales
- Freshmarketer - Marketing activity
Your personal data rights
You have the right to make a complaint at any time about the way we may manage or control your personal data. The supervisory body for personal data in the UK is the Information Commissioner’s Office (ICO) website. If we fail to address your complaint, please contact us in the first instance before contacting the ICO.
Third party links
This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we encourage you to read the privacy notice of every website you visit.
We are not responsible for the protection and privacy of any information which you provide whilst visiting such sites and such sites are not governed by this privacy policy. You should exercise caution and look at the privacy policy applicable to the website in question.
We may collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data may be derived from your personal data but is not considered personal data in law as this data does not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific website feature. However, if we combine or connect Aggregated Data with your personal data so that it can directly or indirectly identify you, we treat the combined data as personal data which will be used in accordance with this privacy notice.
Refusal to consent to necessary data collection may result in a loss of service.
The ways we collect personal data
We may collect personal data in the following ways.
Direct interactions. You may give us your Identity, Contact, Employment and Financial Data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:
- set up a payment process
- Log in to your online account
- Request services
- supply services to us
- create a website account
- subscribe to our service or publications
- request marketing to be sent to you
- requesting marketing opt out
- enter a competition, promotion or survey or
- give feedback.
Automated technologies or interactions. As you interact with our website, we may automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies, server logs and other similar technologies. This enables us to deliver an improved website user experience.
Third parties or publicly available sources. We may receive personal data about you from various third parties and public sources as set out below: from analytics providers based outside the EU, advertising networks and information providers based inside or outside the EU. Contact, Financial and Transaction Data from providers of technical, payment and delivery services based inside OR outside the EU. Identity and Contact Data from data brokers or aggregators based [inside OR outside] the EU] and or Identity and Contact Data from publicly availably sources such as Companies House and the Electoral Register based inside the EU.
Your Data Rights
Our website and service users have rights to control their data subject to the UK GDPR and Data Protection Act (2018). These are the right to request a copy of your personal data, the right to correct your data, the right to request your data is erased, right to request data access, right to request restriction of processing, data portability, the right to object, and rights related to automated decision-making where that decision making would impact your fundamental rights and freedoms. However, these are not absolute rights. Where we refuse your request or are unable to fulfil your personal data request, we will provide you with an answer as to why we could not. Please submit such requests to our Privacy Office. You will be asked to confirm proof of your identity to evidence your eligibility to request a data action.
Chief Executive Officer
25th September 2025