General

We recognize the importance of protecting personal information and all of our GDPR obligations – which are categorized under its seven principles:

• 1. Lawfulness, Fairness and Transparency
• 2. Purpose Limitation
• 3. Data Minimisation
• 4. Accuracy
• 5. Storage Limitation
• 6. Integrity and Confidentiality (security)
• 7. Accountability

Our Privacy and Cookie Policies are a visible statement of our compliance with GDPR and all other related legislation.

Our information security processes are certified to and maintained at the UK government’s CyberEssentials standard.

Personal Identifiable Information

We only use Personal information, such as names, addresses, e-mail addresses and so on, that you voluntarily provided to us. Under GDPR this is called ‘Consent and we only hold this data to provide you with the goods and services that you wanted. This is termed a ‘Contract’ and is our lawful reason for holding and processing your personal information. We only retain or process your data for the purpose of fulfilling the Contract and it is deleted after the contract is fulfilled – 6 months for consumers and 6 years (HMRC standard) for business customers.

Our Privacy and Cookies policies are our notification to you about how we will use this information. You can visit our site without telling us who you are, however some services may require registration. Whenever you provide us with information we limit it to the minimum we need to perform the Contract – name, email, delivery address etc. Some data is useful but optional, eg phone numbers.

We do not pass this on to anyone who is not directly involved in fulfilling the Contract. For example we might print a postage label or have a carrier deliver it to you. We do not pass personal information on to anyone else and when we back up our computer data, using 256-bit end to end encryption, it is stored on a server inside the EU or at a GDPR approved facility.

Right of Access

We do our best to keep any data up-to-date, accurate and complete, as well as abiding by your GDPR rights.

You have the right to access and review your personal data or have it deleted and be ‘forgotten’.

You also have the right to transfer it – for example a business customer might want their entire purchasing history transferred over to a new supplier (we do not keep consumer histories). Please contact us at any time by email, in writing or leave a message by phone – our details are below. The Managing Director holds overall responsibility for data and GDPR issues.

Shared Data

As with almost all websites, when you visit some of our pages they place information onto your computer. This is normal for all websites and these bits of information are called ‘cookies’. If you visit a page again its cookies are sent back from your device to the site you are looking at – and only to that site. Cookies are used to measure which pages are visited and by how many people. The aim is to use this information to improve websites. In a similar way you might have noticed how blue text in a link turns purple if you have used it. Our Cookies Policy covers this in more detail.

Brands and Trade Names

The designations, logos and other signs used on this site, including the logo and name The Compost Bag Company are trademarks and/or trade names protected by law. Any use of these or similar signs or any part of the website or any additional information we supply you with is strictly prohibited without the prior and written consent of The Compost Bag Company and our interests will be defended to the fullest extent of the law.

Liability for Content

The Compost Bag Company takes the greatest care in designing and maintaining this site but we cannot guarantee the accuracy of the information shown or be held liable for how it is used.

We do our best to vet and check any links placed on our website but we cannot assume responsibility for the content of any other sites if you use any such links.

Contact us

The Compost Bag Company Ltd, Comet Road, Leyland PR26 7PF

01772 641348         info@compostbaguk.com