Nuclear Waste Services

Privacy Policy

INTRODUCTION

This Privacy Notice applies to individuals we engage with, including those who submit general enquiries about our work, attend meetings and sign up to receive our news and communications. We only process personal information for the purpose of delivering our corporate objectives and responding to enquiries, sending out news and communications and managing our meetings.

This Privacy Notice explains what data we process, why we do so, how it is legal and your rights.

About Us and this Privacy Notice

Whilst this Privacy Notice is provided by Radioactive Waste Management Limited (“RWM” or “we” or “us”), RWM and LLW Repository Limited (LLWR) began trading as Nuclear Waste Services (NWS) on 31 January 2022. RWM and LLWR remain separate limited liability companies incorporated under English law. We are a ‘controller’ for the purposes of the UK General Data Protection Regulation and the UK Data Protection Act 2018 (“Data Protection Laws”).

We take your privacy very seriously. We ask that you read this Privacy Notice carefully as it contains important information about our processing and your rights.

How to contact us

If you need to contact us about this Privacy Notice or would like this Privacy Notice in another format (for example, audio, large print) please use the details below:

Data Protection Officer
Nuclear Waste Services / RWM
Building 329, Thomson Avenue
Harwell Campus
Didcot
OX11 0GD

Email: gdfenquiries@nda.gov.uk

Changes to the Privacy Notice

We may change this Privacy Notice from time to time. Changes to the purposes for which we process your data will be highlighted to you.

Information we collect and what we use it for

  • Website visitors only
    If you are just browsing our website, we will not collect personal data.
  • General enquiries
    We process your name, contact details (including social media handles) and details of the enquiry when you send us enquiries about our work (for example, the siting process for a geological disposal facility (GDF) or forming a Working Group) or other general enquiries. We will use this information to respond to your queries.

In addition, we obtain names and contact details from publicly available sources (e.g. organisations’ websites and social media) and from databases collated by third parties.

How We Keep Your Personal Data Secure

We implement appropriate technical and organisational measures in order to protect your personal data against accidental or unlawful destruction, accidental loss or alteration, unauthorised disclosure or access and any other unlawful forms of processing. We aim to ensure that the level of security and the measures adopted to protect your personal data are appropriate for the risks presented by the nature and use of your personal data.

Legal Basis for Processing Your Information

Public Task
In relation to responding to general enquiries about our work on the GDF programme, we are allowed to process your personal data on the basis that it is necessary for the performance of a task carried out in the public interest which is laid down by law.

Organisations that we may share your data with

For general management and oversight purposes, we share personal information with the Nuclear Decommissioning Authority (“NDA”), as we are a wholly-owned subsidiary of the NDA, and, the relevant government department that sponsors us (please contact us if you would like information on which department sponsors us).

Like any business or organisation, we use third party suppliers to assist with our operations such as web page hosting, customer relationship management system hosting, contact centre services and other IT services. These third parties will process your personal data in order to carry out their services for us. We take steps to ensure that our service providers process your data in accordance with the Data Protection Laws, only use it in accordance with our contract with them and keep it secure. As part of providing their services, the service providers may from time to time, transfer personal data outside the UK. Any such international transfer of your data will be carried out in accordance with the Data Protection Laws to safeguard your privacy rights and give you remedies in the unlikely event of a security breach or to any other similar approved mechanisms. If you would like more information about our processors and any international transfers of your data, please contact us using the details at the “How to contact us” section.

Other than stated above, we do not pass your personal data to third parties, unless required to do so by law or unless we have your consent to do so.

We do not sell or exchange our mailing list with other companies or organisations for marketing purposes.

Retention and Deletion of your Personal Data

We only retain your personal information for as long as we need it in order to provide you with the service you have requested from us.

If you have contacted us with a general enquiry or question about the GDF siting process or we have processed your data as part of our routine dialogue and meetings, we will keep the data for a period of up to 20 years as we need to keep this information in order to evidence our engagement with stakeholders and members of the public as part of the planning applications which will be required to develop a GDF. If you have submitted your contact details via LinkedIn, your information will be stored on the LinkedIn ad manager platform for 90 days after which it will be securely deleted.

Separately, you can ask us to remove your personal information from our systems by contacting us via the details above in the section “How to contact us

Cookies

Our web page uses cookies to improve functionality and performance, to analyse traffic to the website and to enable social media features. To learn more please see our cookie policy [insert link].

Your Rights

You have the following rights under Data Protection Laws:

  • Right to object to processing of your personal data
  • Right of access to personal data relating to you (data subject access request)
  • Right to correct any mistakes in your personal data
  • Right to ask us to stop contacting you with direct marketing
  • Right to prevent your personal data being processed
  • Right to withdraw your consent
  • Right to erasure

If you would like to exercise your rights, please contact us at the details set out above in the section “How to contact us” section.

We will respond to any rights that you exercise within a month of receiving your request, unless the request is particularly complex, in which case we will respond within three months.

Please note that exceptions apply to some of these rights which we will apply in accordance with the law.

Complaints

When you provide us with information, we will process it in accordance with the Data Protection Laws. If you believe your information has not been handled in accordance with this Privacy Notice by RWM, please contact us using the details in the “How to contact us” section.

Alternatively, you may complain to the Information Commissioner’s Office. Information about how to do this is available on its website at www.ico.org.uk.