The form prepares a message on your device. KiloCash does not receive it until you review it in WhatsApp and choose to send it. Bank details are not placed in the website’s pre-filled booking message; if bank transfer is selected, the minimum account information needed will be requested later in the conversation.
1. Who is responsible
KiloCash, the operator of the cash-for-clothes service based in Rochdale, Greater Manchester, is the controller of the personal information used to arrange and complete KiloCash collections.
For a privacy question, rights request or data protection complaint, call, text or WhatsApp 07405 726180. Please say that your message is about personal information so it can be handled correctly.
Privacy contactKiloCash · Rochdale, Greater Manchester, United Kingdom
Message us2. Information we collect
| Category | Examples | Where it comes from |
|---|---|---|
| Contact details | Name, telephone number, WhatsApp profile or message details | You and your communications |
| Collection details | Address, postcode, preferred day, bag estimate, item type and collection choice | Your booking request |
| Contactless access | Exact bag location, safe-place instructions, access permission, ownership/private-property confirmations and location photo | You through the form and WhatsApp |
| Payment details | Payment choice and, for a transfer, account-holder name, sort code and account number | You in the WhatsApp conversation |
| Transaction records | Date, accepted weight, rate, amount, payment status and collection notes | Created during the collection |
| Technical information | IP address, device/browser details, request time and basic server logs | Website and communications providers |
Please do not give us door or alarm codes, keys, card details, PINs, passwords, security codes, copies of identity documents, or information that is not needed for the collection.
3. How and why we use information
| Purpose | Why it is lawful |
|---|---|
| Respond to your request, plan the route, confirm the appointment, inspect items and make payment | Necessary to take steps at your request and perform the collection and purchase contract |
| Use access instructions and a photo for a contactless collection | Necessary to perform the collection you requested |
| Keep transaction, tax or accounting records where required | Compliance with legal obligations |
| Protect customers, collectors and the service; prevent misuse; resolve disputes; and maintain service records | Legitimate interests in safe, accountable service administration, balanced against your rights |
| Establish, exercise or defend a legal claim | Legitimate interests and, where applicable, legal obligations |
We do not need data-protection consent to use information that is necessary to arrange and perform your requested collection. We will ask separately before sending optional direct marketing where the law requires consent. The current booking form does not sign you up for marketing.
There is no solely automated decision-making or profiling that produces legal or similarly significant effects.
4. Website and WhatsApp booking flow
- You enter booking information in the website form on your device.
- When you select “Send booking on WhatsApp”, the website prepares a message and opens WhatsApp.
- You can review, edit or abandon the message. KiloCash receives it only if you press send in WhatsApp.
- Any later messages, location photos or payment instructions are handled within the WhatsApp conversation.
WhatsApp and Meta also process information as separate service providers under their own terms and privacy information. If you prefer not to use WhatsApp, you may call or text us, although we still need enough information to arrange the collection.
5. Who may receive information
We do not sell personal information. We disclose only what is reasonably needed to:
- KiloCash collectors or authorised people helping to schedule and complete your collection;
- WhatsApp/Meta and telephone or messaging providers that carry your communications;
- banks and payment providers that process a transfer;
- the website host and technical suppliers needed to operate or secure the site;
- professional advisers, insurers, law-enforcement bodies, regulators or courts where necessary and lawful; or
- a successor to the service if the business is reorganised or transferred, subject to appropriate confidentiality and legal safeguards.
Collection and access information is limited to people who need it for that booking. We ask recipients acting for us to protect it and use it only for the instructed purpose.
6. Use outside the United Kingdom
Some technology providers, including WhatsApp/Meta, Google and Unsplash, may process technical or communications information in countries outside the UK. Their privacy notices explain where they operate and the safeguards they use.
Where KiloCash itself makes a restricted international transfer, we will use an adequacy regulation, approved contractual protection or another safeguard required by UK data-protection law.
7. How long we keep information
We keep information only for as long as it is reasonably needed for the purpose collected, then delete or anonymise it. The period depends on the type of record:
- Uncompleted enquiries: until it is clear the booking will not proceed and any short follow-up or dispute period has ended.
- Contactless photos and access instructions: until the collection and any immediate access issue are resolved; they should not be retained as general customer notes.
- Bank instructions: only as long as needed to make, reconcile or investigate payment. Accounting records can be kept without retaining unnecessary full bank details.
- Completed collection and payment records: for the applicable tax, accounting, complaint and legal-claim periods, which can be up to six years.
- Provider logs and backups: according to the relevant provider’s security and deletion cycle.
We may retain a record longer if a payment, complaint, investigation or legal claim is active, and will restrict it to that purpose.
8. Keeping information safe
We use reasonable organisational and technical steps designed to protect personal information, including limiting access to people who need it, securing devices and accounts, minimising what is collected, and deleting access/payment information when it is no longer needed.
Send only the details requested. KiloCash will never ask for your bank login, PIN, card number, CVV, password or one-time security code. If a message seems suspicious, stop and call the number shown on the KiloCash website.
No internet or messaging service can be guaranteed completely secure. If we identify a personal-data breach, we will investigate and make any notification required by law.
9. Your data-protection rights
Depending on the circumstances, you may ask us to:
- confirm whether we use your information and provide a copy;
- correct inaccurate or incomplete information;
- delete information that no longer has a lawful reason to be kept;
- restrict how information is used while an issue is considered;
- provide eligible information in a portable format;
- object to processing based on legitimate interests or to direct marketing; or
- withdraw consent where consent is the basis being used.
These rights are not all absolute. We may need to verify that the request relates to you and may keep information where the law requires it or a valid exemption applies. Contact us using the details in section 1; there is normally no charge.
10. Data-protection complaints
If you believe your information has been handled incorrectly, contact KiloCash first by phone, text or WhatsApp and clearly say that you are making a data-protection complaint. We will acknowledge the complaint within 30 days, make appropriate enquiries without undue delay, keep you informed and tell you the outcome.
If you remain unhappy, you may complain to the UK Information Commissioner’s Office (ICO). The ICO normally expects you to raise the issue with us first. See how to make a data-protection complaint.
11. Cookies and external website services
The current KiloCash page does not set first-party cookies, use browser storage, run advertising trackers or run analytics. It does load fonts from Google and images from Unsplash, so those services can receive normal connection data such as your IP address and browser details. WhatsApp receives information when you follow a WhatsApp link.
Read the separate Cookie & Website Technologies Policy for the current service list and browser controls.
12. Changes to this notice
We may update this notice when the booking process, providers or law change. The latest version will appear on this page with a new “last updated” date. If a change materially affects an active booking, we will explain it directly where reasonably possible.
This notice should be read with the Collection & Purchase Terms and Cookie & Website Technologies Policy.