Trust, security & privacy

• DavWaste operates as a UK commercial waste carrier under the Davro Group Ltd umbrella, fully insured and registered with the relevant environmental authorities.
• Waste is handled and disposed of in line with UK waste-carrier regulations. We issue waste transfer notes on request for commercial collections.
• We are not independently audited against SOC 2, ISO 27001, or similar standards. If your procurement process requires evidence of specific controls, contact us and we will respond with what we can share.

• Loads are taken to licensed transfer stations and recycling facilities. We aim to divert as much material as possible from landfill.
• Hazardous items (e.g. asbestos, chemicals, clinical waste) are only collected when pre-agreed and routed through specialist disposal partners.

• Our website and booking portal are served over HTTPS with TLS encryption in transit.
• Customer records (bookings, enquiries, quotes) are stored in a managed Postgres database protected by row-level security so that only authorised staff can read them.
• Card payments are handled by Stripe. DavWaste never sees or stores full card numbers; only Stripe's tokenised references are kept against your booking.
• Administrative access requires email authentication and a role-based check before any back-office data is visible.

We rely on the following providers to operate the service:

• Stripe — card payment processing.
• Supabase — managed database, authentication and storage.
• Cloudflare / Lovable — application hosting and CDN.
• Google Maps Platform — address lookup and routing.
• Lovable AI Gateway — vision model used to estimate items from photos you upload to our estimator.

Photos uploaded to the estimator are sent to our AI provider only to generate an itemised quote. They are not used to train any third-party model.

• We collect only what we need to quote and deliver a collection: contact details, collection address, photos you choose to upload, and payment confirmation data from Stripe.
• We do not sell personal data. We only share it with the subprocessors above so we can deliver the service you've requested.
• You can request a copy of your data, ask for corrections, or ask us to delete your account-related records by emailing enquiries@davwaste.com.

If you believe you've found a security issue or have a privacy concern, please email enquiries@davwaste.com with details so we can investigate. We respond to verified reports within five working days.

For general queries, use the contact form or call 0800 311 8026.