Privacy Policy

Who we are

WasteCheck is operated by Haisoms Ltd, registered in England. Our contact email is info@wastecheck.co.uk.

What we collect

Account information

When you sign up, we collect your name, email address, and organisation name. If you subscribe to a paid plan, your payment is processed by Stripe. We do not store credit card numbers — Stripe handles all payment data directly. We store your Stripe customer ID to manage your subscription.

API usage data

Every API request is logged with the endpoint called, HTTP status code, response latency, whether the result was served from cache, and a sanitised version of the request parameters. We do not log full request bodies or personally identifiable information from API calls.

API keys are stored as SHA-256 hashes. We never store your full API key after it is first displayed to you.

Waste Transfer Notes

If you use the /v1/generate-wtn endpoint, the Waste Transfer Note is stored in our database and associated with your organisation. WTNs contain the data you submit: producer details, carrier details, waste descriptions, and destination information. This data is stored so you can retrieve WTNs later via the API.

Website analytics

We may use privacy-respecting analytics to understand how visitors use wastecheck.co.uk. We do not use advertising trackers or sell data to third parties.

How we use your data

We use your data to:

• Provide and maintain the WasteCheck API service
• Authenticate your API requests
• Enforce rate limits and usage caps on your plan
• Process payments via Stripe
• Send you service-related emails (account confirmations, usage alerts, billing notifications)
• Monitor API performance and debug issues

We do not use your data for advertising. We do not sell your data to third parties. We do not share your data with third parties except as described below.

Third-party services

We use the following third-party services to operate WasteCheck:

• Stripe — payment processing. Stripe's privacy policy applies to payment data: stripe.com/privacy
• Vercel — hosting and edge infrastructure
• Supabase — database hosting
• Anthropic — AI classification via the Claude API. Waste descriptions submitted to the /v1/classify-waste endpoint are sent to Anthropic's API for processing. Anthropic's usage policy applies: anthropic.com/policies

We do not send personally identifiable information to Anthropic. Only the waste description, source industry, and additional context fields are sent for classification.

Data retention

• Account data is retained for as long as your account is active. If you delete your account, we remove your data within 30 days.
• API request logs are retained for 12 months for debugging and billing reconciliation, then deleted.
• Waste Transfer Notes are retained for as long as your account is active. UK duty of care regulations require WTNs to be kept for at least two years. We recommend you maintain your own copies.
• Cached data (carrier verification results and waste classifications) expires automatically based on cache TTLs (24 hours for carrier data, 7 days for classifications).

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data (subject to legal retention requirements)
• Object to processing of your data
• Request a copy of your data in a portable format

To exercise any of these rights, email info@wastecheck.co.uk.

Cookies

wastecheck.co.uk uses essential cookies for authentication (keeping you logged in to the dashboard). We do not use marketing or tracking cookies.

Changes to this policy

We may update this policy from time to time. Material changes will be communicated via email to registered users. The "last updated" date at the top of this page reflects the most recent revision.

Contact

For questions about this privacy policy or how we handle your data:

Email: info@wastecheck.co.uk

Haisoms Ltd
Bournemouth, United Kingdom