Refer & Earn Privacy Notice

Individual referrers and recommendations

Referrer's name and contact details supplied with permission, age-18-or-over confirmation, who recommended GRIDCO on an enquiry, and the verified attribution.

Following up recommendations, verifying referrers, arranging services and administering qualifying rewards without creating a customer account.

Programme referrals without booking or financial evidence: eligible for removal of personal details after 12 months since last activity. Unmatched recommendations in original customer enquiries remain subject to separate manual review; they are not part of programme automation.

Partner applications

Name, business, category, email, telephone, area, notes, consent choices.

Reviewing your application, creating your referral code, paying rewards, programme administration.

Pending applications and active partners: regular manual review. Rejected applications: 12 months since last activity. Inactive partners: 6 years since last activity. Personal details are not automatically removed while a remaining referral or financial history needs the partner identity; undated legacy decisions require manual review.

Customer referrals

Customer name, business, telephone or email, area, service details, partner code.

Contacting the customer about their enquiry, recording the referral, checking reward eligibility.

Without booking or financial evidence: eligible for removal of programme personal details after 12 months since last activity. Records with any booking, completion, payment, earned reward or necessary duplicate evidence are excluded from automatic removal and reviewed manually.

Reward payment records

Payment date, reference, amounts, partner identity.

Paying rewards and meeting accounting and tax duties.

No automatic removal. Accounting records require manual review against legal duties; the proposed 6 years from the end of the financial year requires separate confirmation.

Marketing consent

Whether you opted in, and when.

Only sending programme news if you opted in. Withdraw at any time.

Until withdrawn.

Customer details supplied by partners

Partners must have the customer's permission before sharing their details. Where a customer completes an enquiry themselves using a partner code, they confirm they are happy for their details to be used for that enquiry and recorded against the partner code.

Lawful bases

Programme administration and requested services use contractual steps or legitimate interests, subject to your rights. Accounting records are retained to meet legal obligations. Optional marketing uses your separate consent, which you can withdraw without affecting participation.

Who sees it

Partner and customer records are available only to authorised GRIDCO administrators. Customer enquiry details are passed to licensed waste operators only as needed to arrange the service. Replit hosts the website and database, and Gmail processes email notifications and welcome messages. We do not sell personal information. Any international processing by these providers requires appropriate UK data-transfer safeguards.

Spam protection and security

Forms use a time-limited security token, a hidden field and rate limiting. A hashed identifier derived from the request IP address and time window is used for rate-limit buckets. Buckets expire after 15 minutes and expired records are cleared on the next administrator sign-in. Administration uses an essential, four-hour HttpOnly session cookie. These controls do not depend on optional analytics consent.

Retention and your rights

GRIDCO approved conservative programme retention rules on 11 October 2026. Automation defaults to reporting only; removing personal details requires separate operational approval, including explicit production approval. Only programme partner and referral details are in scope; audit history and record links remain, and original enquiries or external email copies are not erased. Accounting records remain protected for manual legal review. You can request access, correction, deletion, restriction or portability, object to processing, or withdraw marketing consent. Email support@gridcowastemanagement.com or call 0191 323 5082. Rights may be limited by accounting duties or other legal requirements. You may complain to the Information Commissioner's Office at ico.org.uk.