Privacy Policy

Effective Date: 19 July, 2026

1. Who we are

This Privacy Policy explains how BioMarsh Environmental Ltd ("BioMarsh", "we", "us" or "our") collects, uses and protects personal data when you visit our website at www.biomarsh.com (the "Website"), contact us, or otherwise interact with our business.

BioMarsh Environmental Ltd is a company registered in England and Wales under company number 01124715, with its registered office at Peartree Farm, Holyfield, Waltham Abbey, Essex, EN9 2EW. We are part of the Drains Direct UK Group.

For the purposes of the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018, BioMarsh Environmental Ltd is the data controller of the personal data described in this policy.

Contact: info@biomarsh.com | 0800 028 5942 | Peartree Farm, Holyfield, Waltham Abbey, Essex, EN9 2EW

2. Personal data we collect

We may collect and process the following categories of personal data:

  • Contact and enquiry data — your name, email address, telephone number, company name, job title and the contents of your message when you contact us through the Website, by email, by telephone or otherwise.

  • Newsletter data — your name and email address when you sign up to receive our newsletter or updates.

  • Business relationship data — contact details and correspondence relating to our clients, suppliers, subcontractors and their personnel, collected in the course of providing or receiving services.

  • Technical and usage data — your IP address, browser type and version, device information, pages visited and how you use the Website, collected automatically through cookies and similar technologies (see section 8).

  • Recruitment data — information you provide if you apply for a role with us, such as your CV, employment history and contact details. We do not intend to collect special category data (such as health or biometric data) through the Website, and we ask that you do not submit such information via our forms.

3. How we use your personal data and our lawful bases

We only use your personal data where the law allows us to. The purposes and corresponding lawful bases are:

  • Responding to enquiries and providing quotes — legitimate interests (responding to correspondence and developing our business), or taking steps at your request prior to entering into a contract.

  • Providing and administering our services — performance of a contract with you or the organisation you represent, and our legitimate interests in managing our business relationships.

  • Sending our newsletter and marketing updates — your consent, which you may withdraw at any time by clicking "unsubscribe" in any email or by contacting us. Where permitted, we may also send marketing to existing business contacts under the "soft opt-in" rules in the Privacy and Electronic Communications Regulations (PECR).

  • Operating, securing and improving the Website — our legitimate interests in maintaining a secure, functional and effective website.

  • Complying with legal and regulatory obligations — including environmental, health and safety, tax and accounting requirements applicable to our industry.

  • Recruitment — taking steps at your request prior to entering into an employment contract, and our legitimate interests in assessing candidates.

4. Who we share your personal data with

We may share your personal data with:

  • Other companies within the Drains Direct UK Group, where necessary to respond to your enquiry or deliver services;

  • Service providers who support our business, such as website hosting, IT, email and marketing platform providers, acting as processors on our behalf;

  • Subcontractors and professional advisers (such as accountants, insurers and solicitors) where necessary;

  • Regulators, law enforcement or other authorities where we are required to do so by law; A prospective buyer or seller in connection with any sale, transfer or reorganisation of our business.

We do not sell your personal data.

5. International transfers

Some of our service providers (for example, website hosting and email platforms) may process personal data outside the United Kingdom. Where this happens, we ensure appropriate safeguards are in place, such as a UK adequacy regulation covering the destination country or the use of approved contractual clauses (including the UK International Data Transfer Agreement or Addendum).

6. How long we keep your personal data

We keep personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, regulatory or reporting requirements. In general: enquiry data is kept for up to 2 years after our last contact with you; contractual and financial records are kept for at least 6 years after the end of the relevant contract or financial year; newsletter data is kept until you unsubscribe; and unsuccessful recruitment applications are kept for up to 6 months. When data is no longer required, we securely delete or anonymise it.

7. Your rights

Under data protection law, you have rights in relation to your personal data, including the right to:

  • Request access to a copy of the personal data we hold about you;

  • Request correction of inaccurate or incomplete data;

  • Request erasure of your data in certain circumstances;

  • Object to processing based on legitimate interests, and object at any time to direct marketing;

  • Request restriction of processing in certain circumstances;

  • Request transfer (portability) of data you provided to us in certain circumstances;

  • Withdraw consent at any time where we rely on consent, without affecting the lawfulness of processing before withdrawal.

To exercise any of these rights, contact us at info@biomarsh.com. We will respond within one month. We may need to verify your identity before acting on a request. You will not usually have to pay a fee.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection (www.ico.org.uk / 0303 123 1113). We would appreciate the chance to address your concerns first, so please contact us in the first instance.

8. Cookies and similar technologies

The Website uses cookies and similar technologies. Cookies are small text files placed on your device that help the Website function and provide information about how it is used.

  • Strictly necessary cookies — required for the Website to function and cannot be switched off.

  • Analytics cookies — help us understand how visitors use the Website so we can improve it.

These are only set with your consent where required by law. You can control and delete cookies through your browser settings. Blocking some cookies may affect how the Website functions.

9. Security

We have put in place appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration or disclosure. Access to personal data is limited to those employees, contractors and service providers who have a business need to know it and who are subject to a duty of confidentiality.

10. Third-party links

The Website may include links to third-party websites (such as LinkedIn or Google Maps). Clicking those links may allow third parties to collect data about you. We do not control these websites and are not responsible for their privacy practices. We encourage you to read the privacy policy of every website you visit.

11. Changes to this policy

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised "Last updated" date. Please check back periodically.

12. How to contact us

Questions about this Privacy Policy or our handling of your personal data should be sent to:

  • BioMarsh Environmental Ltd

  • Peartree Farm, Holyfield, Waltham Abbey, Essex, EN9 2EW

  • Email: info@biomarsh.com

  • Telephone: 0800 028 5942