Privacy Policy

At Knightcycle, we take your privacy seriously. This Privacy Policy explains how we collect, use, and protect your information when you use our website and services.

In short: We only collect the information necessary to provide our recycling services and process your orders. We don't sell your data, and we don't use invasive tracking technologies.

1. Information We Collect

Account Information

When you create an account or place an order, we collect:

• Name and email address
• Business name (for business customers)
• Shipping address (for collection and delivery)
• Phone number (optional, for delivery coordination)
• Order history and recycling statistics

Payment Information

We do NOT store credit card details. Payment processing will be handled by trusted third-party payment processors (such as Stripe or PayPal) when implemented. We only store:

• Transaction ID (for order reference)
• Order total and transaction history
• Billing address (same as shipping address)

Note: Payment processing is not yet implemented. When it is, we'll use PCI-compliant third-party processors who handle all card details securely.

Technical Information

We do NOT collect or store technical information such as IP addresses, browser details, or device information. Your web server may temporarily log this information in access logs for basic server operation, but we don't store it in our database or use it for tracking.

2. Cookies and Tracking

Essential Cookies We Use:

• CSRF Token: Protects you from security threats and cross-site attacks
• Session Cookie: Keeps you logged in during your visit
• Shopping Cart: Remembers items in your cart as you browse

What we DON'T use: We don't currently use analytics cookies, advertising cookies, or third-party tracking pixels. If we add analytics in the future, we'll update this policy and seek your consent where required.

3. How We Use Your Information

We use your information to:

• Process and fulfill your recycling orders
• Arrange collection and delivery of recycling boxes
• Track your recycling impact and calculate reward points
• Send order confirmations and collection notifications
• Provide customer support
• Improve our services and website
• Prevent fraud and ensure security
• Comply with legal obligations

4. Marketing Communications

With your consent, we may send you:

• Newsletter updates about sustainability and recycling
• Information about new services and products
• Special offers and promotions

You can unsubscribe at any time using the link in any marketing email, or by contacting us directly.

5. How We Share Your Information

We share your information only when necessary:

Service Providers:

• Delivery Partners (DPD): To collect and deliver recycling boxes
• Payment Processors: To process payments securely
• Email Service Providers: To send transactional and marketing emails
• Hosting Providers: To host our website and databases

Legal Requirements:

We may disclose your information if required by law, court order, or to protect our rights and safety.

We never sell your data to third parties.

6. Data Security

We take security seriously and implement industry-standard measures:

• SSL/TLS encryption for all data transmission
• Secure password hashing
• Regular security updates and patches
• Access controls and authentication
• Regular backups

While we strive to protect your data, no system is 100% secure. We encourage you to use strong passwords and keep your account credentials confidential.

Digital Signatures and Waste Transfer Notices (WTN)

For business customers using our Waste Transfer Notice system:

• Secure Storage: Digital signatures are stored securely during the WTN approval process
• Permanent Record: Signatures are embedded within the final PDF document, which is stored securely
• Audit Logging: All access to WTN data is logged for security and compliance purposes
• Legal Compliance: This process ensures compliance with UK Environmental Protection Act 1990

Shipping addresses and waste descriptions collected during the WTN process are retained for:

• Compliance with UK environmental waste tracking regulations
• Arranging collection and delivery of waste materials
• Legal proof of waste transfer as required by law
• Customer service and support

This information is retained for 7 years in accordance with UK waste management regulations.

7. Your Rights Under GDPR

If you're in the EU/UK, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restriction: Limit how we use your data
• Right to Data Portability: Receive your data in a portable format
• Right to Object: Object to processing of your data
• Right to Withdraw Consent: Withdraw consent for marketing communications

To exercise any of these rights, please contact us at info@knightcycle.co.uk

8. Data Retention

We retain your data for as long as necessary to provide our services:

• Account Data: Until you close your account or request deletion
• Order History: 7 years (for tax and accounting purposes)
• Marketing Consent: Until you unsubscribe or withdraw consent
• Technical Logs: 90 days

9. Third-Party Links

Our website may contain links to third-party websites (e.g., payment processors, social media). We are not responsible for their privacy practices. Please review their privacy policies separately.

10. Children's Privacy

Our services are intended for businesses and individuals aged 18 and over. We do not knowingly collect information from children under 18. If you believe we have inadvertently collected such information, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We'll notify you of significant changes by:

• Posting a notice on our website
• Updating the "Last Updated" date
• Sending an email to registered users (for major changes)

We encourage you to review this policy periodically.