Last updated: June 2026
Wastefull is a neighbourhood bin space sharing platform operated at wastefull.uk. If you have any questions about this policy, contact us at admin@wastefull.uk.
Account data: your email address and username when you sign up.
Location data: your postcode and street name to power map-based listing discovery and distance sorting. We never request or access your device's GPS location. When you approve a request, the house number you enter is stored with that arrangement so the claimer can find the drop-off, and removed once the drop-off is confirmed or the arrangement ends.
Listing data: bin or skip space details you post, including size, waste type, availability, and arrangement (free, bin duty, or cash).
Transaction data: records of space requests, approvals, drop-offs, and ratings between users.
Messages: messages sent between listing owners and claimers within a transaction thread.
Payment data: cash payments are processed by Stripe. We do not store your card details — these are handled entirely by Stripe. If you set up a payout account to accept payments, you provide identity verification documents, bank details, and tax information directly to Stripe as part of their own onboarding — we never see or store this, only a reference ID against your profile. See "Third-party services" and "Your rights" below for what this means if you want a copy of, or want to delete, that specific data.
Push notification subscriptions: if you enable push notifications, a device or browser subscription token is stored so we can send you alerts — a browser push subscription if you use Wastefull on the web, or a device token if you use the iOS or Android app.
Supabase — our database and authentication provider. Your data is stored on Supabase infrastructure in the EU.
Stripe — payment processing. Card data never touches our servers. For accepting payments, Stripe also processes your payout account details (identity verification, bank details, tax information) directly — this data is provided straight to Stripe during their own onboarding, governed by Stripe's own privacy policy, not just ours. See stripe.com/privacy.
Google Places API — used for street address autocomplete during sign-up and listing creation. Only the text you type into address fields is sent to Google.
Nominatim / postcodes.io — open-source geocoding to convert addresses to map coordinates.
We do not sell your data. Your username and listing details are visible to other logged-in users. Your email address is never shown publicly. Your full address is never shown on public listings — a listing only displays your street and an approximate map location. Your house number is revealed solely to a claimer whose request you approve, so they can complete the drop-off, and is removed once the arrangement ends.
Your data is retained for as long as your account is active. Records of transactions involving a payment are retained for 6 years after the end of the financial year they relate to, as required by UK tax law (Companies Act 2006) — this applies even if you delete your account.
Under UK GDPR you have the right to access, correct, or delete your personal data. You can download a copy of your data at any time from Profile → Download my data, or delete your account directly as described above. For anything else — corrections, or if you can't access your account — email admin@wastefull.uk.
If you've set up a payout account, your identity verification documents, bank details, and tax information are held directly by Stripe, not by us — our export and account deletion only cover the reference ID we store, not that underlying data. To access, correct, or delete that information, you'll need to contact Stripe directly or use your Stripe Express dashboard.
We use session cookies to keep you logged in. No advertising or tracking cookies are used.