How Binshare handles your data

We only collect what is needed to operate a UK waste-clearance marketplace:

• Account info — name, email, chosen role. Lawful basis: contract performance.
• Password (hashed) — bcrypt-hashed, never stored in plaintext. Lawful basis: contract.
• Phone number — only if you opt into SMS notifications or the waiting-list callout. Lawful basis: consent.
• Location — city/postcode you type when posting; precise coordinates only when you enable “Near me” and grant browser geolocation. Lawful basis: consent + contract.
• Photos — waste-post images and bin-listing images you upload. Lawful basis: contract.
• Carrier documents — Environment Agency waste carrier licence copy. Lawful basis: legal obligation + contract.
• Payment records — transaction amounts, statuses, timestamps (card details are handled solely by Stripe — we never see or store them). Lawful basis: contract + legal obligation (HMRC records).
• Messages — in-app chat between homeowners, businesses and carriers. Lawful basis: contract.
• Analytics events — pages visited, feature usage. Lawful basis: consent (see cookie banner) or legitimate interest for aggregate stats.

Binshare shares personal data with the following processors only for the specific purposes noted. Each is bound by a Data Processing Agreement and, where applicable, UK-approved international transfer safeguards.

We use two kinds of storage:

• Strictly necessary — an HttpOnly session token so we know you're logged in, and localStorage for your role/theme preferences. Always on. Cannot be disabled without breaking the app.
• Analytics — PostHog stores an anonymised event/session identifier for product analytics on the web app only. Enabled only after you accept the cookie banner. You can withdraw consent at any time by clicking Cookie preferences in the footer. Analytics is entirely disabled inside the iOS and Android apps — no tracking, no ATT prompt.

We do not use advertising cookies or third-party marketing pixels.

• Transaction records — 7 years (HMRC accounting law).
• Account profile & messages — while your account is active. Deleted within 30 days of a verified deletion request.
• Photos & posts — deleted when you delete the post or your account.
• Analytics events — 13 months, then anonymised.
• Password reset tokens — 1 hour.

You have the right to: access your data, correct it, delete it (“right to be forgotten”), object to processing, restrict processing, and receive a portable copy.

Delete your account any time from within the app. Sign in and go to Menu → Settings → Delete Account. Your account, open posts, spare-bin listings, messages and notifications are removed immediately. Historical transaction records are kept for the other party's business history but your name is replaced with “Deleted User” and your email & phone number are removed. You cannot delete while a job is in progress or money is in escrow — complete or cancel those first.

To exercise any other right, email support@binshare.co.uk. We respond within 30 days.

If you're unhappy with our response you can complain to the UK Information Commissioner's Office at ico.org.uk.

Binshare is not directed at children under 18. We do not knowingly collect data from anyone under 18. If you believe a child has an account, email us and we'll delete it.

Data-protection contact: support@binshare.co.uk.

We may update this policy as our service evolves. Material changes will be announced in-app and reflected here. Continued use after a change means you accept the revised policy.