MA EnviroTech Group ("we", "us", "our") is committed to protecting your privacy. This policy explains how we collect, use, store and protect personal data when you use our website and platforms, including MukAway, Materials Away and BNG Away (together, "the Platforms").

This policy is written to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

MA EnviroTech Group is the parent company of MukAway, Materials Away and BNG Away.

Company name: MA EnviroTech Grouo Company registration number: Registered address: Chadwick House, Birchwood Park, Warrington, Cheshire, WA3 6AE Contact: info@mukaway.com

2. What Personal Data We Collect

Depending on how you use our Platforms, we may collect:

• Account and contact data — name, job title, company name, email address, phone number, business address

• Transaction data — listings, orders, purchases, haulage arrangements and payment records made through the Platforms

• Site and land data — location data, site surveys, material listings, biodiversity assessments and habitat data submitted by users

• Technical data — IP address, browser type, device information, and cookies (see Section 8)

• Communications data — records of correspondence if you contact us

We do not knowingly collect special category data (e.g. health, religion, ethnicity) and ask that users do not submit this to us.

3. How We Use Your Data

We use personal data to:

• Provide and operate the Platforms, including matching listings, processing transactions and generating compliance documentation

• Verify user and seller identity to maintain trust and safety across the Platforms

• Generate and store compliance records, including Material Management Plans and CO₂e calculations

• Communicate with you about your account, transactions or enquiries

• Improve our services and website functionality

• Meet legal and regulatory obligations, including those relating to waste management, biodiversity net gain reporting, and environmental compliance

• Send marketing communications where you have consented, or where permitted under the "soft opt-in" rules for existing customers (you can opt out at any time)

4. Legal Basis for Processing

We process personal data under the following UK GDPR legal bases:

• Contract — to provide the Platforms and fulfil transactions you enter into

• Legal obligation — to meet regulatory and compliance requirements (e.g. waste documentation, BNG registration)

• Legitimate interests — to operate, secure and improve our Platforms, and for direct marketing to existing business contacts

• Consent — where you have explicitly agreed, such as for marketing communications to new contacts

5. Sharing Your Data

We may share personal data with:

• Other users of the Platforms where necessary to complete a transaction (e.g. a buyer and seller matched through MukAway, Materials Away or BNG Away)

• Service providers who support our operations (e.g. hosting, payment processing, IT support), under contractual data protection obligations

• Regulatory bodies and authorities where required by law, including in connection with the national BNG register or waste compliance reporting

• Professional advisers (legal, accountancy) where necessary

We do not sell personal data to third parties.

6. International Transfers

Where any of our service providers are located outside the UK, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses, in line with UK GDPR requirements.

7. Data Retention

We retain personal data only as long as necessary for the purposes it was collected, including:

• Material Management Plans and compliance documentation — retained for 10 years, as required for audit and regulatory purposes

• Account data — retained for the duration of your account with us, plus a reasonable period afterward for legal and administrative purposes

• Marketing data — retained until you opt out or withdraw consent

8. Cookies

Our website uses cookies to operate effectively and understand how it is used. You can control cookie preferences through your browser settings or our cookie banner where applicable. [Expand with a full cookie table once cookie audit is complete.]

9. Your Rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you

• Request correction of inaccurate data

• Request deletion of your data, subject to our legal retention obligations

• Object to or restrict certain processing

• Request data portability

• Withdraw consent at any time where processing is based on consent

To exercise any of these rights, contact us at info@mukaway.com

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if you believe your data has been mishandled.

10. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure, including secure storage of compliance records for the required retention periods.

11. Changes to This Policy

We may update this policy from time to time. The "last updated" date at the top of this page will reflect the most recent changes. We encourage you to review this policy periodically.

12. Contact Us

If you have any questions about this policy or how we handle your data, please contact: