Privacy policy

Dumply is the data controller for the information described here. You can reach our privacy contact at [email protected].

If you are a customer:

• Name, email and phone number — to run your account and contact you about a collection.
• Collection address and access notes — to let a collector find and do the job.
• Photographs you upload — so collectors can price the job accurately.
• No payment details at all — you pay your collector directly, so Dumply never asks for a card and holds no payment information about you.
• Messages and reviews — to support the service and resolve disputes.

If you are a collector, additionally:

• Identity and address documents — to verify who you are, as required to run a trusted marketplace.
• Waste carrier registration and insurance — to check you are legally able to carry waste.
• Vehicle details — so customers know what is arriving.
• Bank account details — to pay you.
• Your postcode — to show you collectors nearby. Given by you, or looked up from your device's location if you ask us to.
• Location while working a booked job — see section 4.

• Contract — to provide the service you signed up for: matching, payment, messaging and completion.
• Legitimate interests — verifying collectors, preventing fraud, keeping the platform safe, and improving the service.
• Legal obligation — keeping financial records, and responding to lawful requests from authorities.
• Consent — marketing emails and live location sharing. You can withdraw consent at any time.

This is the most sensitive data we handle, so we are specific about it:

• A collector's live location is only recorded once they mark themselves on the way to a job they have been booked for.
• It is shared only with the customer for that specific job.
• Recording stops automatically when the job is marked complete.
• It is never shared with other collectors, and never used to track a collector outside a job.
• Location history is deleted after 30 days, except where it is needed as evidence in an open dispute.
• Consent is captured per booking, not once and forever.

A customer's exact address is only released to the collector whose quote they accept. Everyone else sees an approximate area, deliberately rounded to around 100 metres.

Finding your postcode. If you tap "Use my location" when signing up or posting a job, your browser asks your permission and then sends us your coordinates once. We round them to about ten metres and pass them to postcodes.io, a UK postcode lookup service, to work out the postcode. We do not store the coordinates themselves, and we never do this without you asking. You can always type your postcode instead.

We keep the postcode you give at sign-up so we can show you collectors nearby and save you retyping it. That is a postcode, not an address: your street is only collected when you post a collection.

• The other party in a job — a customer sees the collector's trading name, rating, vehicle and verification status. A collector sees the customer's first name and last initial, and the full address only after acceptance.
• Our hosting and email providers — as processors acting on our instructions.
• Authorities — where we are legally required to disclose, for example a fly-tipping investigation.

We do not sell your personal information, and we never will.

In-app chat automatically hides phone numbers, email addresses and messaging handles. This keeps your personal contact details private and means there is a complete record if a job is later disputed.

• Account details — while your account is open, then up to 12 months.
• Job records, photographs and messages — 6 years, to cover the limitation period for contract claims and our tax obligations.
• Payment and audit records — 7 years, as required for financial records.
• Collector identity documents — while you are active, then 12 months.
• Location history — 30 days.

Under UK GDPR you can ask us to:

• Give you a copy of the personal data we hold about you.
• Correct anything inaccurate.
• Delete your data, where we do not have to keep it for legal or accounting reasons.
• Restrict or object to how we use it.
• Export it in a portable format.
• Withdraw consent for marketing or location sharing.

You can download your data or request deletion from your account settings, or email [email protected]. We will respond within one month.

If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk.

• All traffic is encrypted in transit.
• Passwords are stored hashed, never in plain text.
• Identity documents are kept on private storage and only reachable by administrators through an authenticated route.
• Payment, refund and dispute actions are written to an append-only audit log.

We use a small number of essential cookies to keep you signed in and to protect forms against cross-site request forgery. These are required for the service to work. Web fonts are served from a privacy-friendly provider that does not log visitor IP addresses.

Email [email protected] with any question about this policy or your data.