Privacy Policy

Last updated 15 May, 2026

Who we are

Keenan (Recycling) Ltd are market leaders in organics recycling with provision of recycling operations, manufacture of compost and associated products, contract screening, shredding and related hires services, commercial food waste collections and supply of biofuel. Keenan (Recycling) Ltd is registered in Scotland with company number SC254053. We are committed to protecting and respecting your privacy and act as the primary controller of your personal data.

We form part of the Biffa group of companies (“Biffa”). In delivering our services, some personal data may be processed by Biffa, which includes Biffa Ltd and its subsidiaries such as Biffa Waste Services Ltd, Cressex Insurance Services Ltd. are also part of Biffa Waste Services Ltd. Each Biffa company may act as a controller of your personal data when providing services on our behalf.

What Personal Data do we collect?

  • For customers and business contacts of Keenans (Recycling) Ltd, we may collect your name, company name (where applicable), address, contact details (such as email address and telephone number), and details about your enquiry or service requirements. This may include information relating to the type and volume of materials for recycling, collection or delivery requirements, site location details, and any other information necessary to prepare quotations or provide services.
  • Where you request a quotation or engage our services, we may collect and retain records of quotations provided, service agreements, correspondence, and details of services carried out.
  • We may collect information you voluntarily provide to us, which could include personal data and, in limited circumstances, special categories of personal data where relevant to the services requested (for example, health and safety requirements for site access).
  • We may collect your communication preferences, including how you wish to receive updates, service information, or marketing communications from us.
  • We may collect your personal data when you participate in surveys, feedback requests, or events organised by us.
  • Personal data may also be collected when you contact us with an enquiry, request a quotation, provide feedback, make a complaint, or communicate with us via our website, email, telephone, or social media channels. This may include records of correspondence.
  • When you visit our website, we may collect technical information such as your IP address, browser type, operating system, and usage data, as well as any personal data you submit through contact or enquiry forms.
  • We may also collect personal data if you report a problem with our website or services.

Keenans (Recycling) Ltd will only collect personal data that is necessary for the purposes described above and will not sell or trade personal data to third parties. Where possible, information is anonymised, particularly in relation to website usage and analytics.

We may share personal data with trusted third-party service providers who support our operations (such as IT and website providers), but only where necessary and in accordance with applicable data protection laws.

Personal data may be used for administrative purposes, including invoicing and record keeping, to fulfil contractual obligations, to comply with legal and regulatory requirements, and to manage business relationships with customers and suppliers.

Personal Data we received from third parties

We may receive personal data about you from various third-party sources, including:

  • Social Media and Online Platforms – Google, Meta, TikTok and LinkedIn, which may provide data related to your device, interactions, or preferences.
  • Publicly Available Sources
    • This includes data from public records such as the UK Companies House, the electoral register, and other publicly accessible address or postcode databases.

Business Representatives

  • When you are referred to us or a quotation is requested on your behalf by another organisation (such as a contractor, partner, or local authority)
  • Where your employer or organisation provides your details as a contact for services we deliver

How we use your personal data

We may use your personal data for the following purposes (“Permitted Purposes”):

  • To provide quotations, deliver recycling and waste management services, and carry out our obligations where processing is necessary for the performance of a contract entered into between you and us;
  • To communicate with you, including responding to enquiries, providing updates about services, and notifying you of any changes relevant to the services we provide;
  • To provide you with information about services that you have requested or enquired about prior to entering into a contract;
  • To manage our business operations, including administrative purposes such as invoicing, record keeping, and maintaining customer relationships;
  • Where you voluntarily provide us with personal data, including any special categories of personal data (for example information relating to health and safety requirements), we process this on the basis of your consent or where otherwise permitted by law;
  • Where necessary, to share information with third parties such as regulators, local authorities, or emergency services where required for legal compliance, safety, or the protection of individuals;
  • To use images, video, or other visual representations for marketing and promotional purposes, where appropriate permissions have been obtained and in accordance with applicable data protection laws.

Marketing and Advertising

We may use your information to deliver personalised marketing communications about services within the Group, based on your interactions with our website, services, or previous purchases. This may include updates, offers, or recommendations related to services you’ve shown interest in, unless you have opted out of receiving such marketing.

You can opt out of receiving marketing communications from us at any time by following the unsubscribe link in any marketing email or replying “STOP” to texts.

For certain marketing communications, we will seek your explicit consent where required by law, and we will only send such communications once we have obtained your consent.

Opting out of marketing does not affect our ability to send essential service or safety communications that we are legally required to provide, such as product recalls, food safety alerts, or other mandatory notices related to your purchases or our services.

Digital Marketing

When you visit our website, we may show you tailored advertisements for our services and products on other websites, including social media platforms. These adverts are based on your interactions with our site and the pages you have visited, which help us understand what may be of interest to you. We work with trusted partners who use cookies and similar technologies to display these ads on your devices. You can manage your cookie preferences through our cookie banner and choose to reject non-essential cookies at any time (please refer to our Cookie Policy for more information).

Aggregated Data

We also collect, use and share Aggregated Data such as statistical or demographic data for any purpose. Aggregated Data could be derived from your Personal Data but is not considered Personal Data in law as this data will not directly or indirectly reveal your identity. For example, we may aggregate your Usage Data to calculate the percentage of users accessing a specific Website feature.

However, if we combine or connect Aggregated Data with your Personal Data so that it can directly or indirectly identify you, we treat the combined data as Personal Data, which will be used in accordance with this Privacy Notice.

Sharing data with Third Parties

We share your personal information within the Biffa Group of companies and with trusted third-party service providers to manage and deliver our products, applications, and services. We do this to ensure the smooth operation of our business and improve the customer experience. Below are the categories of recipients with whom we may share your data:

Service Providers and Suppliers

We may share your personal data with trusted third parties, such as:

  • Service providers who support our operations, including IT systems, communications providers, and business software platforms
  • Contractors, suppliers, and logistics partners involved in delivering our recycling and waste management services
  • Professional advisors, including legal, financial, and business consultants
  • Marketing and communications providers who assist with customer engagement and service updates

These service providers are contractually obligated to handle your data securely and use it only for the specific purposes we define. We assess their compliance with data protection regulations and ensure they implement appropriate safeguards.

Additionally, your data may be disclosed in certain situations such as :

  • in the event that we sell our business or assets, in which case we may disclose your personal data to the prospective buyer of such business or assets;
  • if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to enforce or apply our Terms and Conditions and other agreements; or to protect the rights, property, or safety of either or both of the Companies, our customers, or others


Marketing Partners

For marketing purposes, we may share personal data with platforms like Google, Meta, TikTok and other social media channels. This data is used to serve relevant advertisements to you based on your previous interactions with our website. You have the option to opt-out of targeted advertising through these platforms.

These partners may use this information in accordance with their own privacy policies to provide services such as ad targeting, performance measurement, and audience insights.

Where appropriate, we implement measures to protect your personal data before sharing it, such as hashing identifiers (e.g., email addresses) to ensure the information is not directly identifiable.

In some instances, these marketing partners will act as a data controller using data solely for their own purposes. In some situations, Keenans (Recycling) Ltd and these partners will be acting as Joint Controllers.

In accordance with data protection legislation, Keenans (Recycling) Ltd has entered arrangements with Meta and Google to define each party’s respective responsibilities for complying with the requirements of the General Data Protection Regulation (GDPR) and the UK GDPR in relation to joint processing activities. These arrangements are documented in the Controller Addendum (for Meta) and relevant joint controller terms (for Google).

Under these agreements, Keenans (Recycling) Ltd is responsible for providing data subjects with the required privacy information. Meta, TikTok and/or Google, as applicable, are responsible for executing data subject rights under Articles 15 to 20 of the GDPR and UK GDPR, with respect to the personal data they hold following joint processing.

You have the option to opt out of targeted advertising through the settings provided by these platforms.

To find out more about how these companies handle your personal data please visit their privacy policies below:

How Google uses information from sites or apps that use our services – Privacy & Terms – Google

Meta | Privacy Centre | Manage your privacy on Facebook, Instagram and Messenger | Facebook Privacy

Privacy Policy | TikTok

 Mergers and Acquisitions

In the event of a merger, acquisition, or other significant corporate transaction, your personal data may be shared with the parties involved in the transaction. We will ensure that appropriate data protection measures are in place, and any third party receiving your data will continue to comply with our privacy obligations.

Government Bodies and Legal Requirements

We may share your personal data with government bodies, regulatory agencies, or law enforcement when required by law or in response to legal processes (such as court orders or subpoenas). We also share data to protect our rights, prevent fraud, or address any potential threats to personal safety or property.

International Transfers

In some cases, your personal data may be transferred outside the UK, such as for processing or storage by our service providers or cloud storage providers. When this happens, we ensure that the transfer is in line with data protection laws. Appropriate safeguards, such as contractual obligations, are in place to protect your data when transferred to countries outside the UK.

How long do we retain your data and where is it stored?

All personal data you provide to us is stored on secure servers which are based in the UK.

Your personal data may be transferred to and stored at a destination outside of the European Economic Area (EEA). It may also be processed by our suppliers for the purposes set out above. In order to ensure that any third party processes your personal data in a way which is consistent with the UK and European Union (EU) laws on data protection, we have put in place agreements with those third parties, which contain provisions approved by the EU for protecting personal data. Please ask us if you would like to see a copy of these agreements.

Legal Basis for Processing

Keenans (Recycling) Ltd will collect and use your personal data because it is necessary for

  • The pursuit of our legitimate interests,
  • The purpose of complying with our duties and exercising our right under a contract between ourselves and the customer
  • Complying with Legal obligations.

In general, we do not rely on consent as a legal basis for processing beyond direct marketing communication through E-Mail or text messages. If consent is withdrawn, then we will cease to process data from the date consent was withdrawn.

Legitimate Interests

  • Managing enquiries, quotations, and customer relationships
  • Delivering and improving our recycling and waste management services
  • Communicating with you about services you have requested or shown interest in
  • Maintaining and improving our website, including user experience and functionality
  • Analysing website usage and service demand to help improve our operations
  • Detecting and preventing fraud, misuse of services, or other unlawful activity
  • Complying with legal and regulatory requirements and responding to requests from authorities
  • Managing our business operations efficiently, including IT systems, security, and internal processes

Legal Obligations

We may process your data to comply with legal requirements, including:

  • Processing your Personal Data when required to comply with legal and regulatory obligations, such as law enforcement requests or statutory requirements.
  • We process your Personal Data to verify your identity and fulfil data subject rights (DSR) requests, such as access, correction, or deletion of your data.
  • We may also process data to meet compliance obligations related to security, tax, and accounting laws.

Consent

For certain activities, such as marketing communications and push notifications, we rely on your consent. This includes:

Marketing emails and messages

  • Keeping you informed about offers, updates, and relevant services.
  • You have the right to withdraw your consent at any time by updating your consent status through unsubscribe processes in our marketing communication or through the notification settings on your device.

Your Rights

Right of Access

You have the right to request a copy of personal data we hold about you.

Right to Rectification

You can ask us to update or correct any incorrect personal data we have about you.

Right to Erasure or to be Forgotten

You can request us to delete your personal data in certain situations so long as we have no justifiable reason for retaining it.

Right to Restrict Processing

In some situations, you can ask us to “restrict processing” your data which means he keep it stored and secured but no longer use it beyond that.

Right to Object to Processing

You have to right to opt-out of any marketing communication we send you and object to the use or storage of your data if we have no legitimate reason to do so.

Right to Data Portability

In some circumstances, you have the right to supply or provide information in a machine-readable format to another organisation.

Data Security

Keenans (Recycling) Ltd takes appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, misuse, or alteration.

Access to personal data is restricted to employees, contractors, and service providers who have a legitimate business need to access it and who are required to handle it securely and in confidence.

Information submitted through our website or by email, including enquiries and job applications, is processed using appropriate security measures. However, the transmission of information via the internet is not completely secure, and any transmission is at your own risk.

We will retain personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, regulatory, or operational requirements.

Cookies

We use cookies and similar technologies such as pixels, tags, and other identifiers to enhance your experience on our Website and Apps. These tools help us remember your preferences, analyse how our platforms are used, and tailor our marketing efforts to better serve you.

You can find more information on how we use cookies by visiting our cookie policy.

Contact & Complaints

If you wish to exercise any of your rights detailed above, would like to make a complaint or have any questions regarding this privacy policy, please email us at info@keenanrecycling.co.uk or write to us at: Keenan Recycling, Donside House, Innovation Business Park, Campus One, Bridge of Don, Aberdeen AB22 8GT.

If we are unable to resolve your complaint, You can lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been violated. The ICO is the UK’s independent authority set up to uphold information rights.

For more information or to make a complaint, you can contact the ICO directly at:

ICO Contact Details
Website: https://www.ico.org.uk
Helpline: 0303 123 1113

Links from the website

The Website may contain links to and from the websites of our partner networks, advertisers and affiliates. If you follow a link to any of these websites, please note that these websites have their own privacy policies and that we do not accept any responsibility or liability for these policies. Please check these policies before you submit any personal data to these websites.

Changes to our Privacy Policy

This policy may be reviewed and amended from time to time. Any changes we may make to our privacy policy in the future will be posted on this page and, where appropriate, notified to you by e-mail.