Privacy Policy

Last updated: 9 June 2026  ·  v2026-06-09-v2

Who we are

Consigns (consigns.co.uk) is a digital hazardous waste consignment note service operated by Kaizen Web Ltd, a company registered in England and Wales.

• Company Registration No: 17007703
• Registered Address: Suite A, 82 James Carter Road, Mildenhall, Bury St. Edmunds, England, IP28 7DE
• Email: our contact form

What data we collect

We collect the following categories of personal data:

• Account information: your name, email address, company name, and password when you register for an account.
• Consignment data: information you enter into consignment notes, including waste descriptions, site addresses, EWC codes, carrier details, and consignor/consignee information.
• Signatures: digital signatures captured from drivers and customers during the waste collection process.
• Billing information: payment card details and billing address are collected and processed by Stripe. We do not store your full card details on our servers.
• Usage data: information about how you use Consigns, including pages visited, features used, and technical data such as browser type, device type, and IP address.

Why we collect it

We use your data for the following purposes:

• To provide the service: creating and managing consignment notes, generating PDFs, assigning jobs to drivers, and storing records.
• Legal compliance: maintaining waste document records as required by the Hazardous Waste (England and Wales) Regulations 2005 and the equivalent regulations in Scotland (the Special Waste Regulations 1996) and Northern Ireland (the Hazardous Waste Regulations (Northern Ireland) 2005).
• Billing: processing subscription payments and managing your account.
• Service improvement: understanding how Consigns is used so we can improve it.
• Communication: sending you essential service notifications, such as account confirmations and billing receipts.

Legal basis for processing

Under the UK General Data Protection Regulation (UK GDPR), we rely on the following legal bases:

• Contract performance: processing your account and consignment data is necessary to provide the service you have signed up for.
• Legitimate interests: we have a legitimate interest in understanding how Consigns is used, improving the service, and keeping it secure.
• Legal obligation: we are required to retain waste document records for the statutory retention period under the Hazardous Waste (England and Wales) Regulations 2005 and the equivalent regulations in Scotland and Northern Ireland.

How we store data

Your data is stored with Supabase on servers in the UK and the European Economic Area (EEA). All data is encrypted at rest and in transit. We use security measures such as secure sign-in, role-based access controls, and regular security reviews. We do not transfer your personal data outside the UK or the EEA.

Data retention

• Consignment data: kept for at least 37 months from the date the waste document was created, in line with the statutory retention duties that apply: the Hazardous Waste (England and Wales) Regulations 2005, the Special Waste Regulations 1996 in Scotland, and the Hazardous Waste Regulations (Northern Ireland) 2005.
• Account data: kept while your account is active, plus 30 days after account deletion to allow for any necessary follow-up. After this period, your account data is permanently deleted.
• Responsible-person data (for Environment Agency returns): kept while your account is open. If you close your account, it is held with the rest of your account records for up to 3 years and then deleted. You can delete a responsible person yourself at any time. See the section below for more.
• Billing records: retained as required by UK tax and accounting regulations.

Third parties

We share data with the following third-party services only to run and support Consigns:

• Stripe: for payment processing. Stripe processes your payment card details and billing information under their own privacy policy.
• Resend: for transactional email delivery, such as account confirmations and billing receipts.

We do not sell, rent, or trade your personal data to any third party.

Environment Agency returns and the responsible person

Some customers use Consigns to produce the returns they must send to the Environment Agency, such as the consignee return and the waste tonnage return. These returns can name a responsible person, like a Technically Competent Manager.

For this we may process:

• What we hold: the responsible person's name, and their date of birth when the customer needs it for the return. The date of birth is optional. If it is not needed, it is left blank.
• Why we hold it: only to help the customer produce their Environment Agency returns. We do not use it for anything else.
• Our role: we handle this data on behalf of the operator who runs the account. The operator decides what to record and what to send to the Environment Agency, and is responsible for the returns they submit.
• Where it is held: on our servers in the UK and the EEA, the same as the rest of your data. We do not transfer it outside the UK or the EEA.
• Who can see it: only the account owner and admins. It is kept apart from your waste records and is never shown on consignment notes, dashboards or PDFs.
• How long we keep it: while the account is open. When an account is closed, this data is kept for the account retention period and then deleted with the rest of the account, as set out under Data retention above.

The account owner or an admin can view, change or delete a responsible person at any time in Consigns. This lets us deal with any request to see or remove this data. You can also use our contact form for help.

Your rights

Under the UK GDPR, you have the following rights in relation to your personal data:

• Right of access: you can request a copy of the personal data we hold about you.
• Right to rectification: you can ask us to correct any inaccurate or incomplete data.
• Right to erasure: you can request deletion of your personal data, subject to our legal retention obligations for consignment records.
• Right to data portability: you can request your data in a structured, commonly used, machine-readable format.
• Right to object: you can object to processing based on legitimate interests.

To exercise any of these rights, use our contact form. We will respond within 30 days.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

Cookies

Consigns uses essential cookies for sign-in and user preferences, and analytics cookies, with your consent, to understand how Consigns is used. For full details, see our Cookie Policy.

Changes to this policy

We may update this privacy policy from time to time. If we make significant changes, we will notify you by email or by posting a notice in Consigns. Your continued use of Consigns after any changes constitutes acceptance of the updated policy.