Privacy Policy
Last updated: 20 July 2026
1. Who is responsible for your data
DRS Software Solutions Ltd, company number 17189542, registered office 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, is the data controller for personal data processed in Wast3Not. We are registered with the Information Commissioner's Office, registration number ZC155938. Contact: support@wast3not.com. You have the right to complain to the UK Information Commissioner's Office (ico.org.uk) at any time.
2. What we collect
Account data: email address, name, and preferences you set. Inventory data: the items, dates, photos and notes you choose to add — see Section 3 for medicine data. Payment data: purchases are processed by Paddle as merchant of record and independent data controller; we receive your plan and billing status but never your card details. Technical data: device and usage information needed to run and secure the Service, error diagnostics via Sentry (session replays, where used, are masked so entered text is not readable), and a push notification token if you enable notifications. Support data: messages you send us.
3. Health data — the Medicine category
If you use the Medicine category, the details you record (such as medicine names, dosages and batch numbers) are health data, a special category of personal data under UK GDPR. We process it only with your explicit consent, which we ask for in the app before you first use the Medicine category. You can withdraw consent at any time by deleting your medicine items or your account; withdrawing consent means the Medicine category is no longer available to you.
4. Why we process your data
To provide the Service under our contract with you: accounts, inventory, reminders, sync. With your consent: health data (Section 3), marketing emails, push notifications. For our legitimate interests, balanced against your rights: securing the Service, preventing abuse, diagnosing errors, and improving features. We do not sell your personal data, and we do not use your inventory data for advertising.
5. Who processes data for us
We use trusted providers under data processing agreements: Supabase (database and authentication, hosted in Ireland, eu-west-1), Vercel (web hosting), Paddle (payments, as independent controller), Resend (transactional email), Sentry (error monitoring), Google Firebase (push notifications), Anthropic (AI suggestions — item details you request suggestions for are processed to generate the suggestion and are not used to train models), and Zapier (internal operational alerts). Where providers process data outside the UK, transfers are safeguarded by the UK International Data Transfer Agreement or Addendum, or the UK–US Data Bridge, as applicable.
6. How long we keep data
We keep your data while your account is active. When you delete your account, your personal data — including inventory items and photos — is deleted from live systems, and cycles out of routine backups within approximately 30 days. We may retain minimal records where the law requires it.
7. Your rights
You can: access and export your data (Settings → Backup); correct it in the app; delete it by deleting items or your entire account (Settings); object to or restrict certain processing; withdraw any consent; and complain to the ICO. To exercise a right you cannot action in the app, email support@wast3not.com — we respond within one month.
8. Complaints about data protection
Email support@wast3not.com with "Data protection complaint" in the subject. We acknowledge complaints within 30 days and keep you informed of progress. This does not affect your right to complain directly to the ICO.
9. Cookies and similar technologies
See our Cookie Policy at /cookies for what we store on your device and why.
10. Children
The Service is for adults aged 18 and over. We do not knowingly process children's data; if you believe a child has created an account, contact us and we will delete it.
11. Changes to this policy
We will post updates here and, for material changes, notify you in the Service or by email. This policy was last updated on the date shown above.