1. Who we are

Impact Recycling Ltd (“Impact Recycling”, “we”, “us”, “our”) is the data controller for personal information collected through this website. We decide how and why your personal data is processed and are responsible for it under UK data protection law.

Registered office: 100 Inchinnan Road, Bellshill, Glasgow, ML4 4NT, Scotland, UK
Company number: [TO CONFIRM]
Privacy enquiries: privacy@impact-recycling.com [TO CONFIRM]

2. Information we collect

3. How we use your information

The table below sets out each purpose, the data it relies on, and the legal basis under UK GDPR. Where analytics cookies are involved, we also rely on your consent under the Privacy and Electronic Communications Regulations (PECR).

4. Cookies

Cookies are small text files placed on your device. This website uses Google Analytics 4 for analytics purposes. No analytics cookies are set until you give consent via the cookie preference panel. You can change your preferences at any time.

This website does not set any cookies that are strictly necessary for its core function; it operates fully without analytics cookies if you decline.

The Measurement ID suffix in the second cookie name will be confirmed once the GA4 property is configured.

You can also delete cookies at any time through your browser settings, or install the Google Analytics Opt-out Browser Add-on. Declining analytics cookies does not affect your ability to use this website.

5. Google Analytics 4

We use Google Analytics 4 (GA4), provided by Google LLC. GA4 is configured with Consent Mode v2: all measurement is blocked by default, and analytics cookies are only activated after you explicitly accept them. IP anonymisation is built into GA4 by design — full IP addresses are never stored.

Where consent is given, analytics data is transmitted to and processed on Google’s servers. This may involve a transfer of data to the United States; see section 6 below.

Google’s privacy policy: policies.google.com/privacy

6. Sharing your information and international transfers

We do not sell your personal data. We may share it with the following categories of recipient:

• Google LLC — for website analytics via GA4 (consent-dependent). Data is transferred to the USA under the UK–US Data Bridge, the UK’s adequacy mechanism for US transfers, supplemented by Google’s standard contractual clauses where applicable.
• Website hosting and email providers — as strictly necessary to operate this website and send responses to your enquiries.
• Legal, regulatory, or law enforcement authorities — where required to do so by applicable law or a binding legal order.

No other third parties receive your personal data for their own purposes.

7. How long we keep your data

• Contact and enquiry data: retained for up to 3 years from the date of your last contact, or as long as necessary to fulfil any resulting commercial relationship.
• GA4 analytics data: retained for up to 14 months within the GA4 property, after which it is aggregated or deleted by Google.
• Server log data: retained for up to 12 months for security and diagnostic purposes.

Where data is no longer needed for the purpose for which it was collected, we delete or anonymise it.

8. Your rights

Under UK data protection law you have the following rights:

• Access — obtain a copy of the personal data we hold about you (a Subject Access Request).
• Rectification — ask us to correct inaccurate or incomplete personal data.
• Erasure — ask us to delete your personal data where it is no longer necessary for the purpose collected, or where you withdraw consent.
• Restriction — ask us to pause processing your data in defined circumstances.
• Portability — receive your data in a structured, machine-readable format where processing is based on consent or contract.
• Object — object to processing based on legitimate interests; we must stop unless we demonstrate compelling grounds that override your interests.
• Withdraw consent — where processing relies on your consent (including analytics cookies), withdraw it at any time via the cookie panel or by contacting us. Withdrawal does not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at privacy@impact-recycling.com [TO CONFIRM]. We will respond within one calendar month. We may ask you to verify your identity before acting on a request. For requests that are manifestly unfounded, repetitive, or disproportionately burdensome, we reserve the right to charge a reasonable fee or decline to act, in accordance with applicable law.

9. Right to complain

If you believe we have mishandled your personal data, we encourage you to contact us first so we can address your concern. You also have the right to lodge a complaint at any time with the UK Information Commissioner’s Office (ICO):

10. Changes to this policy

We review this privacy policy at least annually and whenever our processing activities change materially. Any updates will be posted on this page with a revised “last updated” date.