PRIVACY & SECURITY
Data Breach & Incident Response Policy
How suspected loss, disclosure or compromise of personal information is escalated and assessed.
Website edition: 5 October 2026 · Quality Waste Limited
Report promptly
Staff and partners must report a suspected breach immediately to management. Customers should call 03330 386560 and email sales@qualitywaste.co.uk with “Urgent data security incident” in the subject. Provide the time, affected service and a safe contact number; avoid forwarding exposed personal data unnecessarily.
Contain and assess
Take safe steps to contain further loss, preserve evidence and record what happened. Management coordinates an assessment of the information, individuals affected, likelihood of harm and required remedial action. Do not destroy evidence or make unverified assurances.
Notifications
Where we act as a processor, notify the relevant controller without undue delay. Where we act as controller, notify the ICO of a notifiable personal-data breach without undue delay and within 72 hours of awareness, providing further information in stages if necessary. Individuals must be informed without undue delay where the breach is likely to present a high risk to their rights and freedoms. These are different notification tests.
Records and improvement
Record incidents, decisions, mitigation and the reasons for notifying or not notifying. Keep customers informed as appropriate, investigate the cause and review controls to reduce recurrence.