Privacy Policy

Last updated: November 2024

Introduction

Mobius-X Ltd (“we”, “our”, “us”) is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our platform.

Company Details:

Mobius-X Ltd
86-90 Paul Street
London EC2A 4NE
United Kingdom

Company Number: 14125255
VAT Number: GB 468 5068 55

1. Information We Collect

1.1 Information You Provide

When you register for and use Mobius-X, we collect:

• Account Information: Name, email address, phone number, job title, company name
• Company Information: Company registration number, VAT number, registered address
• Regulatory Information: Waste carrier/broker/dealer registration numbers, permit numbers
• Payment Information: Billing address, payment method details (processed securely by our payment provider)
• Communications: Messages sent through our support system or contact forms

1.2 Information We Collect Automatically

• Usage Data: Pages visited, features used, time spent on platform
• Technical Data: IP address, browser type, device information, operating system
• Cookies: See our Cookie Policy below

1.3 Information from Third Parties

We collect publicly available information from:

• Environment Agency (EA) — England
• Scottish Environment Protection Agency (SEPA) — Scotland
• Natural Resources Wales (NRW) — Wales
• Northern Ireland Environment Agency (NIEA) — Northern Ireland
• Companies House — UK company registration
• Driver and Vehicle Licensing Agency (DVLA) — UK vehicle registration

This information is used to verify credentials, validate permits, and provide platform functionality.

2. How We Use Your Information

We use your information to:

2.1 Provide Our Services

• Create and manage your account
• Process waste movement transactions
• Generate duty of care documentation
• Verify regulatory compliance
• Match producers with processors
• Calculate carbon impact

2.2 Improve Our Platform

• Analyze usage patterns
• Develop new features
• Optimize user experience
• Conduct research and analytics

2.3 Communicate with You

• Send service updates and notifications
• Respond to support requests
• Send marketing communications (with your consent)
• Provide regulatory updates

2.4 Ensure Security and Compliance

• Prevent fraud and abuse
• Comply with legal obligations
• Enforce our terms of service
• Protect our rights and property

3. Legal Basis for Processing (General Data Protection Regulation)

We process your personal data under the following legal bases:

• Contract Performance: To provide our services to you
• Legitimate Interests: To improve our platform, prevent fraud, and ensure security
• Legal Obligation: To comply with waste regulations and tax requirements
• Consent: For marketing communications (you can withdraw consent at any time)

4. Data Sharing and Disclosure

4.1 We Share Data With:

Service Providers:

• Cloud hosting providers (AWS, Google Cloud)
• Payment processors (Stripe)
• Email service providers
• Analytics providers
• Customer support tools

Regulatory Authorities:

• When required by law
• To comply with waste regulations
• In response to valid legal requests

Business Partners:

• Other users on the platform (as necessary for waste transactions)
• Verified waste carriers, brokers, and processors

4.2 We Do NOT:

• Sell your personal data to third parties
• Share your data for third-party marketing
• Transfer data outside the UK/EEA without appropriate safeguards

5. Data Security

We implement appropriate technical and organizational measures to protect your data:

• Encryption: Data encrypted in transit using industry-standard security (TLS/SSL) and at rest
• Access Controls: Role-based access, multi-factor authentication
• Regular Audits: Security assessments and penetration testing
• Staff Training: All staff trained on data protection
• Incident Response: Procedures for handling data breaches

6. Data Retention

We retain your personal data for as long as:

• Your account is active
• Required to provide our services
• Required by law (e.g., waste transfer notes must be kept for 2 years)
• Necessary for legitimate business purposes

When data is no longer needed, we securely delete or anonymize it.

7. Your Rights Under Data Protection Law

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data (subject to legal obligations)
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured, machine-readable format
• Object: Object to processing based on legitimate interests
• Withdraw Consent: For marketing communications

To exercise these rights, contact us at our support page or email us.

8. Cookies

We use cookies and similar technologies to:

• Keep you logged in
• Remember your preferences
• Analyze platform usage
• Improve performance

You can control cookies through your browser settings. Note that disabling cookies may affect platform functionality.

9. Children’s Privacy

Mobius-X is not intended for individuals under 18. We do not knowingly collect data from children.

10. International Transfers

Your data is primarily stored in the UK and European Economic Area (EEA). If we transfer data internationally, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or platform notification.

12. Contact Us

If you have questions about this Privacy Policy or how we handle your data:

Data Protection Contact:
Mobius-X Ltd
86-90 Paul Street
London EC2A 4NE

Support: /support

Supervisory Authority:
You have the right to lodge a complaint with the Information Commissioner’s Office (ICO) — the UK’s data protection authority:
https://ico.org.uk/make-a-complaint/

13. Regulatory Compliance

As a registered waste broker/dealer (CBDU595352), we comply with:

• UK General Data Protection Regulation (GDPR) and Data Protection Act 2018
• Environmental Permitting Regulations
• Waste (England and Wales) Regulations 2011
• Duty of Care requirements