Privacy Policy

We Shred It Ltd
Last updated: July 2026

We Shred It Ltd (“we”, “us”, “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website or services, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

We Shred It Ltd
Kingsway House, 40 Foregate Street, Worcester, England WR1 1EE

Email: [email protected]
Phone: 0800 999 1002

We are the “data controller” for the personal data we collect and process, as described in this policy.

2. What Information We Collect

We may collect and process the following types of personal data:

Contact details: name, email address, postal address, telephone number
Business information: company name, job title, VAT/registration details (for business customers)
Booking and service information: collection dates, service history, invoicing details
Payment information: billing details necessary to process payment. Payments are processed securely by Stripe, our third-party payment provider. We do not store or have access to your full card details — these are collected and processed directly by Stripe (see Section 7a)
Account information: if you choose to create an account, this includes saved addresses and your order/booking history. If you check out as a guest, we only retain the information necessary to fulfil that specific booking
Website usage data: IP address, browser type, pages visited, and cookie data (see Section 8)
Communications: records of emails, calls, or messages you send us, including complaints or enquiries

We do not need to see or retain the content of the confidential documents you send us for shredding. Those materials are destroyed as part of our service and are not read, copied, or processed as data by us.

3. How We Collect Your Information

We collect personal data when you:

Make a booking or enquiry via our website, phone, or email
Create an account on our website, or check out as a guest
Sign up for a recurring shredding service
Make a payment through our website (processed via Stripe)
Contact us with a question or complaint
Browse our website (via cookies and similar technologies)

4. How We Use Your Information

We use your personal data to:

Provide and manage our shredding services, including scheduling collections
Process payments and issue invoices
Communicate with you about your bookings, account, or service changes
Respond to enquiries and complaints
Send Certificates of Destruction, provided as standard with every completed service
Improve our website and services
Send you marketing communications, where you have consented to this (see Section 6)
Comply with our legal, regulatory, and accounting obligations

5. Our Legal Basis for Processing

We rely on the following legal bases under UK GDPR:

Contract: processing necessary to provide the services you have requested
Legitimate interests: to run and improve our business, respond to enquiries, and maintain records, provided this does not override your rights
Legal obligation: to comply with tax, accounting, and regulatory requirements
Consent: where you have opted in to receive marketing communications

6. Marketing Communications

We will only send you marketing emails or messages if you have opted in to receive them. You can withdraw your consent and unsubscribe at any time by clicking the “unsubscribe” link in any marketing email, or by contacting us at [email protected].

7. Sharing Your Information

We do not sell your personal data. We may share your information with:

Service providers who support our operations, such as our payment processor (Stripe), IT and website hosting providers, and accounting software providers
Regulatory or legal authorities, where required by law
Professional advisors, such as accountants or solicitors, where necessary

Any third parties we share data with are required to handle it securely and in accordance with data protection law.

7a. Payment Processing via Stripe

All payments made through our website are processed by Stripe, Inc. When you make a payment, your card and billing details are entered directly into Stripe’s secure payment system — we do not receive, view, or store your full card number, expiry date, or CVC.

Stripe may process your payment data in the UK, EU, or elsewhere, in accordance with its own privacy policy and applicable data protection safeguards. We encourage you to review Stripe’s privacy policy at stripe.com/gb/privacy for further detail on how it handles your information.

We do not save your card details for future use — payment details are entered fresh for each transaction.

We retain a record of successful transactions (amount, date, and a reference from Stripe) for invoicing, accounting, and legal purposes, but this does not include your full payment card details.

8. Cookies

Our website uses Google Analytics to help us understand how visitors use our site (such as pages visited and time spent on site), and Google Search Console to monitor and improve our site’s presence in search results. These tools may use cookies and collect data such as your IP address and browsing behaviour. You can control or disable cookies through your browser settings, or opt out of Google Analytics tracking using Google’s official browser opt-out tool. Disabling cookies may affect the functionality of our website.

9. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, including:

Meeting legal, tax, and accounting requirements (typically up to 6 years for financial records)
Maintaining service and booking history for ongoing customer relationships
Resolving disputes or complaints

If you have created an account, we retain your account information for as long as your account remains active. You can delete your account at any time directly through your account settings on our website, or by contacting us at [email protected]. If you check out as a guest, we retain only the information necessary for that booking, invoicing, and legal record-keeping purposes.

When data is no longer required, it is securely deleted or destroyed.

10. Data Security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or alteration. This includes secure storage systems, restricted access to personal data, and secure handling procedures consistent with the confidential nature of our business.

11. Your Rights

Under UK GDPR, you have the right to:

Access the personal data we hold about you
Rectify inaccurate or incomplete data
Erase your data in certain circumstances
Restrict or object to certain processing
Data portability, where applicable
Withdraw consent at any time, where processing is based on consent

To exercise any of these rights, please contact us at [email protected]. We will respond within one month, in accordance with UK GDPR requirements.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been mishandled: www.ico.org.uk.

12. Children’s Privacy

Our services are intended for business and adult use. We do not knowingly collect personal data from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. Any updates will be posted on this page with a revised “last updated” date.

14. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

We Shred It Ltd
Kingsway House, 40 Foregate Street, Worcester, England, WR1 1EE
Email: [email protected]
Phone: 0800 999 1002