privacy policy

Everything Managed Group

Who we are

We are Everything Managed Group, a collection of companies providing business comparison services. This Privacy Notice applies to the processing of personal data by companies within our group.

When we mention "we," "us," or "our" in this Privacy Notice, we are referring to the following company within Everything Managed Group that is responsible for processing your data;

Each of these companies operates as part of the Everything Managed Group, and your data may be shared within the group where necessary to provide our services.

Overview  

Maintaining the security of your data is a top priority for us, and we are committed to respecting your privacy rights. We pledge to handle your data fairly and legally at all times.  

This policy applies whenever you interact with us whether through our offices, our website, or other business engagements. It provides information such as:

  • how we use your data;
  • what personal data we collect;
  • how we ensure your privacy and
  • your legal rights relating to your personal data.

What Personal Data do we collect?

We may collect, use, store, and process different types of personal data depending on your relationship with us.

Identity Data

  • Includes your name, title, company name, job title, and email address.

Contact Data

  • Includes your contact address, billing address, email address, and phone number(s).

Payment Data

  • Includes bank details, payment information, and transaction history for services purchased.

Technical Data

  • Includes your IP address, browser type, operating system, and other technologies used to access our website.

Usage Data

  • Includes information on how you use our website, pages visited, and interactions with our services.

Marketing Preferences

  • Includes your preferences for receiving communications from us.

Chat & Correspondence Data

  • Includes online chat history and records of customer queries.

Recruitment Data

  • If you apply for a role with us, we may collect details such as your CV, qualifications, employment history, and interview notes.

Loyalty Data

  • Includes proof of purchase, invoice numbers, and personal or company billing addresses.

This list is not comprehensive, and there may be occasions where we need to gather additional information for the purposes specified in this policy. Some personal data is collected directly, for example, when you engage with our quotation process or reach out to our customer service team. We may also collect data indirectly, such as through your website browsing. In addition, we may receive personal information from third parties who have your permission to share it with us, or from publicly accessible sources.

Personal Data we received from third parties  

We may receive personal data about you from various third-party sources, including:

  • Social Media and Online Platforms
    • For example, Google, Facebook, Instagram, and LinkedIn, which may provide data related to your device, interactions, or preferences.
  • Location Services
    • For example, what3words, which provides location-related data.
  • Publicly Available Sources
    • For Example, this includes data from public records such as the UK Companies House, the electoral register, and other publicly accessible address or postcode databases.

We may also obtain your data from trusted third-party data brokers. These brokers acquire personal data from individuals who have consented to share their information with them. When we acquire data, we ensure that the suppliers have complied with applicable data protection laws, including obtaining consent from individuals for their data to be shared. We use this data to support our lead generation, marketing campaigns, and to enhance our customer outreach efforts.  

How we use your data

  • To provide you with accurate quotes and comparisons based on your preferences
  • To ensure you receive relevant updates or notifications related to the services you’ve viewed or shown interest in
  • To tailor the website experience, presenting the most relevant options and services for you
  • To improve the content and functionality of the website, ensuring it is user friendly and effective
  • To send you personalised marketing communications, such as offers and recommendations, based on your interests
  • To show targeted ads that are relevant to your preferences and past interactions
  • To analyse website traffic and usage to enhance performance and improve customer experiences
  • To detect and prevent fraudulent activity, ensuring safe transactions and interactions
  • To comply with legal obligations, including responding to lawful requests from authorities
  • To verify your identity when needed, ensuring your data is secure and protected

Marketing and Advertising

We may use your information to deliver personalised marketing communications about services within the Group, based on your interactions with our website, services, or previous purchases. This may include updates, offers, or recommendations related to services you’ve shown interest in, unless you have opted out of receiving such marketing.

In addition to this, we acquire personal data from third-party suppliers, such as data providers or brokers, who collect data from individuals who have consented to share their information. These suppliers support our lead generation activities and marketing campaigns. We ensure that these suppliers comply with all relevant data protection laws, including obtaining the necessary consent from individuals for their data to be shared and used by us.

You can opt out of receiving marketing communications from us at any time by following the unsubscribe link in any marketing email, adjusting your preferences on our website, or replying “STOP” to texts.

For certain marketing communications, we will seek your explicit consent where required by law, and we will only send such communications once we have obtained your consent.

Digital Marketing  

When you visit our website, we may show you tailored ads for our services and products on other websites, including social media platforms. These advertisements are based on products you've viewed during your visit, which we believe may interest you. We use partners to serve these ads through cookies and similar technologies on your devices. You can manage your cookie preferences or and you can choose to reject non-essential cookies at any time (refer to our cookie policy for more information).

Aggregated Data

We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data could be derived from your Personal Data but is not considered Personal Data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific Website feature.

However, if we combine or connect Aggregated Data with your Personal Data so that it can directly or indirectly identify you, we treat the combined data as Personal Data, which will be used in accordance with this Privacy Notice.

Sharing data with third parties

We share your personal information within the Everything Managed Group of companies and with trusted third-party service providers to manage and deliver our products, applications, and services. We do this to ensure the smooth operation of our business and improve the customer experience. Below are the categories of recipients with whom we may share your data:

Service Providers and Suppliers

We may share your personal data with trusted third parties, such as:

  • Waste management companies, IT support providers, contractors, telephone system providers, and marketing agencies.
  • Payment processing services, banking institutions, and credit checking organisations.

These service providers are contractually obligated to handle your data securely and use it only for the specific purposes we define. We assess their compliance with data protection regulations and ensure they implement appropriate safeguards.

Credit Reference Agencies

We may share your personal information with credit reference agencies to assess your creditworthiness, verify identity, or protect against fraud. These agencies will handle your data in compliance with applicable data protection laws.

Marketing Partners

For marketing purposes, we may share personal data with platforms like Google, Meta, and other social media channels. This data is used to serve relevant advertisements to you based on your previous interactions with our website. You have the option to opt-out of targeted advertising through these platforms.

These partners may use this information in accordance with their own privacy policies to provide services such as ad targeting, performance measurement, and audience insights.  

Where appropriate, we implement measures to protect your personal data before sharing it, such as hashing identifiers (e.g., email addresses) to ensure the information is not directly identifiable.

In some instances, these marketing partners will act as a data controller using data solely for their own purposes. In some situations, Everything Managed Group and these partners will be acting as Joint Controllers.  

In accordance with data protection legislation, EMG has entered arrangements with Meta and Google to define each party’s respective responsibilities for complying with the requirements of the General Data Protection Regulation (GDPR) and the UK GDPR in relation to joint processing activities. These arrangements are documented in the Controller Addendum (for Meta) and relevant joint controller terms (for Google).

Under these agreements, EMG is responsible for providing data subjects with the required privacy information. Meta and/or Google, as applicable, are responsible for executing data subject rights under Articles 15 to 20 of the GDPR and UK GDPR, with respect to the personal data they hold following joint processing.

You have the option to opt out of targeted advertising through the settings provided by these platforms.

To find out more about how these companies handle your personal data please visit their privacy policies below:  

How Google uses information from sites or apps that use our services – Privacy & Terms – Google

Meta | Privacy Centre | Manage your privacy on Facebook, Instagram and Messenger | Facebook Privacy

Mergers and Acquisitions

In the event of a merger, acquisition, or other significant corporate transaction, your personal data may be shared with the parties involved in the transaction. We will ensure that appropriate data protection measures are in place, and any third party receiving your data will continue to comply with our privacy obligations.

Government Bodies and Legal Requirements

We may share your personal data with government bodies, regulatory agencies, or law enforcement when required by law or in response to legal processes (such as court orders or subpoenas). We also share data to protect our rights, prevent fraud, or address any potential threats to personal safety or property.

International Transfers

In some cases, your personal data may be transferred outside the UK, such as for processing or storage by our service providers or cloud storage providers. When this happens, we ensure that the transfer is in line with data protection laws. Appropriate safeguards, such as contractual obligations, are in place to protect your data when transferred to countries outside the UK.

How long do we retain your data

We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including to meet any legal, regulatory, or contractual requirements. If you data is no longer required, we will ensure it is securely deleted from our organisation. The specific retention periods may vary depending on the type of data and the reason we hold it. If you would like more information about how long we keep your personal data or the criteria used to determine retention periods, you can contact us for further information.  

Legal Basis for Processing

Everything Managed Group will collect and use your personal data because it is necessary for  

  • The pursuit of our legitimate interests,  
  • The purpose of complying with our duties and exercising our right under a contract between ourselves and the customer  
  • Complying with Legal obligations.

In general, we do not rely on consent as a legal basis for processing beyond direct marketing communication through E-Mail or text messages. If consent is withdrawn then we will cease to process data from the date consent was withdrawn.  

Legitimate Interests

These functions are the main legal basis for processing the personal data of our customers and these include:  

  • To provide you with accurate quotes and comparisons based on your preferences and interactions with us.  
  • To ensure you receive relevant updates or notifications related to the services you’ve viewed or shown interest in.  
  • To tailor your website experience by presenting the most relevant options and services based on your browsing history.  
  • To improve the content and functionality of our website, ensuring it remains user-friendly, effective, and meets your needs.  
  • To send you personalised marketing communications, such as offers and recommendations, based on your interests and past interactions with us.  
  • To show targeted ads that are relevant to your preferences, ensuring you see content that aligns with your interests.  
  • To analyse website traffic and usage patterns to enhance performance and improve the overall customer experience.  
  • To detect and prevent fraudulent activity, safeguarding both your information and the integrity of our services.  
  • To comply with legal obligations, including responding to lawful requests from authorities and regulatory bodies.  
  • To verify your identity when needed, ensuring secure transactions and protecting your data from unauthorized access.  
  • To manage our business efficiently, including network security, fraud prevention, and operational improvements.  
  • To conduct research and development activities, allowing us to innovate and offer new products or services based on customer feedback.  
  • To maintain the security of our platform and protect it from cyber threats, ensuring a safe online environment.

Legal Obligations

We may process your data to comply with legal requirements, including:

  • Processing your Personal Data when required to comply with legal and regulatory obligations, such as law enforcement requests or statutory requirements.
  • We process your Personal Data to verify your identity and fulfil data subject rights (DSR) requests, such as access, correction, or deletion of your data.
  • We may also process data to meet compliance obligations related to security, tax, and accounting laws.

Consent

For certain activities, such as marketing communications and push notifications, we rely on your consent. This includes:

  • Marketing emails and messages – Keeping you informed about offers, updates, and relevant services.
  • Push notifications – Sending real-time updates or alerts to your device when you have opted in.

You have the right to withdraw your consent at any time by updating your consent status through unsubscribe processes in our marketing communication or through the notification settings on your device.

Your Rights

Right of Access  

  • You have the right to request a copy of personal data we hold about you.  

Right to Rectification  

  • You can ask us to update or correct any incorrect personal data we have about you.  

Right to Erasure or to be Forgotten

  • You can request us to delete your personal data in certain situations so long as we have no justifiable reason for retaining it.  

Right to Restrict Processing  

  • In some situations, you can ask us to “restrict processing” your data which means he keep it stored and secured but no longer use it beyond that.  

Right to Object to Processing

  • You have to right to opt-out of any marketing communication we send you and object to the use or storage of your data if we have no legitimate reason to do so.  

Right to Data Portability

  • In some circumstances, you have the right to supply or provide information in a machine readable format to another organisation.  

If you wish to exercise any of the above rights, please contact us at:

Email: gdpr@wastemanaged.co.uk  

Phone Number: 03333 44 54 77

Data Security

Our controls

We have implemented comprehensive security measures to protect your Personal Data from external threats, unauthorized access, loss, and disclosure. This includes:

  • Regular testing of our systems to identify vulnerabilities and improve security.
  • Firewalls, anti-malware, and other tools to guard against external attacks.
  • Clear data protection policies and employee training to promote security awareness.
  • Only authorised personnel and third parties with a legitimate business need can access your data.
  • All sensitive data is encrypted using AES-256 bit technology.

We periodically test and update our security measures to ensure continuous protection against emerging threats.

How to protect your data  

To ensure your personal data remains secure, we recommend the following:

  • Create passwords that are unique and complex, combining letters, numbers, and symbols. Avoid using the same password across multiple sites.
  • Enable 2 factor authentication (2FA) where possible for an extra layer of protection.
  • We will never ask for sensitive financial or personal information via email or public channels. Always verify the authenticity of such requests.
  • Ensure your devices have the latest security updates, and use anti-virus software to guard against malicious attacks.
  • Avoid entering personal information when connected to public or unsecured Wi-Fi networks.

Cookies

We use cookies and similar technologies such as pixels, tags, and other identifiers to enhance your experience on our Website and Apps. These tools help us remember your preferences, analyse how our platforms are used, and tailor our marketing efforts to better serve you.

How to get in touch with us

If you have any questions about how Everything Managed Group uses your personal data that are not answered here, Please contact us by:

Email: gdpr@wastemanaged.co.uk  

Phone Number:  03333 44 54 77

Data Protection Regulator

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated. The ICO is the UK’s independent authority set up to uphold information rights.

For more information or to make a complaint, you can contact the ICO directly at:

ICO Contact Details
Website: https://www.ico.org.uk
Helpline: 0303 123 1113
Email: casework@ico.org.uk

Updates

This policy was last updated in July 2025