Privacy policy

Last updated: 1 October 2026

Who we are

BreakerHQ is a Digital Waste Tracking compliance service for UK vehicle dismantlers, and is a trading name of 1Z Digital Ltd, registered in England and Wales (company no. 17346613). 1Z Digital Ltd is the data controller for the personal data described on this page, and is registered with the ICO.

Contact for anything in this policy: support@breakerhq.co.uk

What we collect

• Your account email address and display name.
• Your yard's details: name, site address, environmental permit / authorisation number, and Defra registration codes.
• The operational records your yard creates: vehicles (registration marks and DVLA lookup results), waste receipts, depollution logs, Certificate of Destruction records, Defra submissions and their responses, and audit trails of who did what.
• Supplier and carrier details entered at the gate (names, registration numbers, delivery vehicle registrations).
• Photos you choose to capture against a vehicle.
• Signed waste transfer notes, when your yard turns them on: the other party's name, address, contact details and drawn signature, and, if your yard attaches one, a copy of the identity document a seller showed. Your yard is the data controller for these records, and 1Z Digital Ltd processes them on your yard's instructions. They are kept apart from the rest of the record, shown only to your yard's gate staff and above when a note is opened, and every look is logged. Your yard's owner sets how long they are kept (three years by default, never less), after which they are removed and the waste record stays.

Why we collect it

To provide the service, and to help your yard meet its legal duties: the duty of care under section 34 of the Environmental Protection Act 1990, the Waste (England and Wales) Regulations, and the digital waste receipt reporting required by Defra's Digital Waste Tracking service from 1 October 2026.

Our lawful bases under UK GDPR: performance of a contract (running the service for your yard), legal obligation (the waste-tracking records themselves), and legitimate interests (keeping the service secure and reliable).

Where your data lives

Data is stored on Google Cloud / Firebase in the London region (europe-west2). Records are backed up and access is restricted to your yard's members according to the roles you assign.

Who we share it with

• Defra: waste receipts are submitted to the government's Digital Waste Tracking service under your yard's registration. That is the point of the product. The exact submission and Defra's response are kept in your evidence trail.
• DVLA / DVSA: vehicle lookups send only the vehicle registration mark to the government's vehicle enquiry services.
• Stripe: if your yard takes a paid plan, Stripe processes the payment. Your billing email and card details go to Stripe, not to us. We never see or store card numbers.
• eBay: if your yard connects its eBay account, listing details (part, price, photos, donor vehicle details) are sent to eBay under your own seller account.
• Ionos: our email provider carries the emails we send (invites, alerts, and the copies of transfer notes sent to the addresses on a note).
• Google (Gemini): if your yard uses the AI listing writer or the part-number reader, the part and donor vehicle details, or the photo, you ask it to work from are sent to Google's Gemini service to produce the result.
• No advertising or analytics third parties. We do not sell data.

How long we keep it

Waste tracking records are legal records: they are retained for the record-keeping periods required by waste legislation, even if your account closes. Account data is kept until you ask us to delete it. The personal details on a transfer note (the other party's name, address, contact details, signature and any identity document copy) are removed after the retention period your yard sets, three years at the least, and the stored copy of the note is deleted with them. A person asking for those details to be removed earlier is told the date they will be, because the yard is required by law to keep them until then.

Your rights

Under UK GDPR you can ask for access to your data, correction, deletion (where the legal retention duties allow), restriction, portability, and to object to processing. Email support@breakerhq.co.uk and we will respond within one month. You can also complain to the ICO (ico.org.uk).

← back