Privacy Policy

1. Who We Are

Endlos RVM UK (“Endlos”, “we”, “us”, or “our”) is a manufacturer and supplier of reverse vending machine (RVM) solutions, helping UK businesses and organizations comply with the Deposit Return Scheme (DRS) through smart, automated recycling technology.

• Registered office: London, UK.
• Company number:
• ICO registration number:

We are committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website, use our services, or contact us. Please read it carefully.

2. Information We Collect

We may collect and process the following categories of personal data:

• Identity Data: first name, last name, company name.
• Contact Data: email address, telephone number, postal address.
• Technical Data: IP address, browser type and version, time zone, browser plug-in types, operating system, and platform.
• Usage Data: information about how you use our website and services.
• Communications Data: messages you send us via our contact form or email.

3. How We Collect Your Data

We collect data through:

• Direct interactions — when you fill in forms on our website or contact us by email or phone.
• Automated technologies — cookies, server logs, and similar tracking technologies as you interact with our website.
• Third parties — analytics providers and advertising networks.

4. How We Use Your Data

We use your personal data to:

• Respond to inquiries and provide you with information about our products and services.
• Generate illustrative ROI and revenue estimates through our Solution Finder tool, based on the details you provide and publicly available UK Deposit Return Scheme (DRS) guidance—see our Terms & Conditions for details.
• Process and fulfil service agreements and contracts.
• Send you marketing communications where you have opted in or where we have a legitimate interest.
• Improve our website, products, and services.
• Comply with legal and regulatory obligations.

The Solution Finder tool produces illustrative estimates only, using rules and public DRS guidance—it does not make any decision that produces a legal or similarly significant effect about you, and results can be reviewed with a member of our team on request.

5. Legal Basis for Processing

Under UK GDPR, we rely on the following lawful bases to process your personal data: Consent (where you have given clear consent); Contract (where processing is necessary to perform a contract with you); Legitimate Interests (where processing is in our legitimate business interests); and Legal Obligation (where we must comply with a legal requirement).

6. Data Sharing

We do not sell your personal data. We share data with the following categories of trusted third parties, subject to confidentiality and data protection obligations:

• Cloud hosting and IT infrastructure providers
• Website analytics providers (e.g. Google Analytics)
• Email delivery and customer communication tools
• Professional advisors (legal and accounting) where necessary

We may also disclose your data where required by law or to protect our legal rights.

6(A). International Data Transfers

Some of our third-party service providers — including cloud hosting, analytics, and advertising providers — may process personal data outside the UK, including in the United States and India. Where this happens, we ensure an appropriate safeguard is in place, such as the UK International Data Transfer Agreement (IDTA), the UK Addendum to the EU Standard Contractual Clauses, or reliance on a UK adequacy regulation. You can request further details of the specific safeguard used for any given transfer by contacting us at info@endlos.co.uk.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements:

• Contact enquiry data: up to 3 years from your last contact with us
• Marketing consent records: until you withdraw consent, plus a short period to evidence compliance
• Contract and customer data: for the duration of the contract, plus [NEEDS INPUT: confirm retention period — commonly 6 years] to meet statutory limitation periods
• Website analytics data: per our analytics provider's default retention setting, unless configured otherwise

We may also disclose your data where required by law or to protect our legal rights.

8. Your Rights

Under UK data protection law, you have rights including:

• Access: request a copy of the personal data we hold about you.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure: request deletion of your data in certain circumstances.
• Restriction: request that we limit how we use your data.
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to processing based on legitimate interests or for direct marketing.

To exercise any of these rights, please contact us at info@endlos.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

9. Cookies

Our website uses cookies and similar technologies. We categorise these as

• Strictly Necessary Cookies — required for the site to function; these do not require consent.
• Analytics Cookies (e.g. Google Analytics) — help us understand how the site is used; set only with your consent
• Advertising Cookies (e.g. Google Ads) — used to measure and deliver relevant advertising; set only with your consent.

On your first visit, you will be shown a cookie banner where you can accept, reject, or manage non-essential cookies before they are set. You can change your preferences at any time via Cookie Settings or through your browser settings. A full list of the cookies we use, their purpose, and how long each is stored is available in our Cookie Policy.

10. Security

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, and unauthorised disclosure. However, no internet transmission is completely secure and we cannot guarantee absolute security.

10(A). Children's Privacy

Our website and services are directed at businesses and organizations, not consumers, and are not intended for use by children. We do not knowingly collect personal data from children under the age of 16.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date at the top of this page. We encourage you to review this policy periodically.

11(A). Scope — RVM Machines & Mobile App

This policy covers our website, endlos.co.uk. Data collected via our RVM kiosks and our mobile application is described in our separate RVM Privacy Policy.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us: