WeeShred Shredding Services Manchester FAQ
Every question answered, from GDPR obligations and accreditation standards to pricing, what gets shredded, and how to choose a provider
About this guide
This FAQ draws on current UK data protection law, industry standards including BS EN 15713:2023, guidance from the ICO, the BSIA, and the UKSSA, and the operational practices of professional shredding companies across the UK. It covers everything an individual, small business, or large organisation needs to know about confidential waste destruction in Great Britain.
01. What shredding is and why it matters
Q What is a professional shredding service?
A professional shredding service is a third-party company that securely collects, transports, and destroys confidential documents and materials on behalf of businesses or individuals. Unlike office desktop shredders, professional services use industrial-grade machinery capable of destroying large volumes quickly, to certified security levels, with a documented audit trail. The result is paper pieces (or confetti, for high-security levels) that cannot be reconstructed, along with a formal certificate of destruction proving the work was done.
Q Why can't I just put confidential documents in the recycling bin or general waste?
Because the information in those documents remains readable and accessible until the paper is destroyed. Documents in recycling bins pass through multiple handling points, collection crews, sorting facilities, processing plants, where they can be read, photographed, or extracted. UK GDPR and the Data Protection Act 2018 place a legal duty on organisations to securely destroy personal data. Putting identifiable information into general or recycling waste is a data breach. The ICO can fine organisations up to £17.5 million or 4% of global annual turnover for serious breaches.
Q Can't my staff just use our office shredder?
Office shredders have limitations that make them unsuitable for full compliance in most organisations. They produce larger strip-cut or cross-cut pieces that can sometimes be reconstructed. They require staff time and create liability if documents are left unshredded. They generate no audit trail or certificate of destruction. They break down frequently under volume. And crucially, under GDPR, you need to demonstrate compliant disposal, an in-house shredder without documentation leaves you exposed during audits. For small volumes of low-sensitivity documents, an office shredder is fine. For anything requiring proven compliance, a professional service is the correct choice.
Q How big is the UK shredding industry?
The global document shredding services market was valued at approximately £2.5 billion in 2024 and is growing at around 6-7% annually. Europe holds roughly 30% of the global market, with the UK, Germany, and France being the largest contributors. The sector’s growth is driven by rising data protection regulation, increasing awareness of identity fraud, and the ongoing need for businesses to demonstrate GDPR compliance. In the UK specifically, demand spans every sector, from sole traders and households through to the NHS, banks, legal firms, and central government.
02. Legal obligations in the UK
Q What law governs how I dispose of confidential documents?
Several pieces of legislation apply simultaneously:
- UK GDPR and the Data Protection Act 2018, the primary framework. Require that personal data be disposed of securely and that you can demonstrate compliance. Apply to all organisations processing personal data.
- Environmental Protection Act 1990, imposes a duty of care on organisations to handle and dispose of waste responsibly.
- Companies Act 2006, sets retention periods for company records.
- The Limitation Act 1980, defines how long records should be kept in case of future legal claims (generally 6 years for most contracts).
- HMRC regulations,require tax and financial records to be kept for defined periods before secure destruction.
- Waste Electrical and Electronic Equipment (WEEE) Regulations govern the disposal of electronic devices including hard drives.
Q Is secure shredding a legal requirement under UK GDPR?
Yes, in effect. UK GDPR’s Article 5 requires that personal data be processed in a way that ensures appropriate security, including protection against unauthorised or unlawful processing and accidental loss. When data is no longer needed, GDPR’s data minimisation and storage limitation principles require it to be deleted or destroyed. Simply throwing documents away does not meet this standard. For many sectors, healthcare, financial services, legal, and education, certified shredding is considered non-optional by regulators. The ICO’s guidance is clear that organisations must implement appropriate technical and organisational measures to secure personal data at every stage, including disposal.
Q Does UK GDPR still apply after Brexit?
Yes. The EU GDPR was incorporated into UK law as “UK GDPR” and continues to apply to all UK organisations. It sits alongside the Data Protection Act 2018, which provides UK-specific details and enforcement mechanisms. The requirements for secure data disposal are identical to those under the original EU GDPR. UK businesses that also operate in, or process data relating to individuals in, the EU must comply with both UK GDPR and EU GDPR.
Q Does the law apply to paper documents or only digital data?
Both. UK GDPR is technology-neutral and covers any filing system, paper or digital, that is structured to allow access to personal data. Filing cabinets of client records, printed payslips, invoices, medical notes, and any other physical documents containing personal data are all subject to GDPR’s disposal requirements. The misconception that data protection law only covers digital information is one of the most common compliance errors made by UK businesses.
Q When I use a shredding company, who is responsible for the data during collection and destruction?
Your organisation remains the data controller, responsible for ensuring the data is handled lawfully. The shredding company becomes a data processor under GDPR Article 28. This means you should have a written Data Processing Agreement (DPA) in place with your shredding provider. The DPA sets out what data they handle, how they handle it, and the obligations they take on. Any reputable shredding company will already have a standard DPA. If a provider cannot or will not supply one, do not use them.
Q Do I need to report a data breach if documents are disposed of insecurely?
Potentially yes. Under UK GDPR, if a breach is likely to result in a risk to the rights and freedoms of individuals, it must be reported to the ICO within 72 hours of discovery. Incorrectly disposed of paper records containing personal data would generally constitute a reportable breach. If the breach is likely to result in high risk to those individuals, you also need to notify the affected people directly. Keeping a proper audit trail of shredding activity is the cleanest way to defend against such events.
03. Document retention periods
Q How long should I keep business documents before shredding them?
UK law sets minimum retention periods by document type. Shredding before these periods expire creates legal and financial risk. Here are the main categories:
Document Type | Minimum Retention | Legal Basis |
Accounting & financial records (private company) | 3 years from creation | Companies Act 2006 s.388 |
Accounting & financial records (public company) | 6 years from creation | Companies Act 2006 s.388 |
VAT records | 6 years | HMRC regulations |
Tax records & invoices | 6 years from end of tax year | HMRC |
Employee/HR records | Employment period + 6 years | Limitation Act 1980 |
Payroll records | 3 years after the tax year | PAYE regulations |
Business contracts (simple) | 6 years after expiry | Limitation Act 1980 |
Business contracts (deeds) | 12 years after expiry | Limitation Act 1980 |
Health & safety records | 5 years | H&S regulations |
Statutory sick pay records | 3 years after tax year | SSP Regulations 1982 |
Company statutory books | 10 years | Companies Act 2006 |
Employers’ liability insurance | 40 years (recommended) | Industry best practice |
Customer personal data | Only as long as necessary | UK GDPR Art. 5(1)(e) |
These are minimums. Specific industries (NHS, financial services, legal) often have their own additional requirements that extend these periods.
Q What happens if I shred documents before their retention period ends?
Destroying documents prematurely carries real risk. HMRC can penalise businesses that fail to maintain required records. Courts can draw adverse inferences in litigation if documents that should have been retained are missing. For contracts specifically, if you destroy evidence relevant to a dispute, you lose your ability to defend a claim. Under the Limitation Act, legal claims for breach of contract can be brought for up to 6 years, so shredding contracts before that period leaves you exposed.
Q What is a document retention policy and do I need one?
A document retention policy is a formal, written document that sets out how long each type of record should be kept and the process for secure disposal at the end of the retention period. Under UK GDPR, you are expected to be able to demonstrate compliance with storage limitation principles, which effectively requires some form of retention policy. It is good practice for any organisation, regardless of size. The policy should cover what categories of documents you hold, their retention periods, who is responsible for managing disposal, and which shredding service you use.
04. What can be shredded
Q What types of documents should be shredded?
Any document containing personal, commercially sensitive, or confidential information. Common examples include:
- Client and customer records, correspondence, and contracts
- Employee personnel files, payslips, performance reviews, and HR records
- Financial statements, bank records, invoices, and tax documents
- Medical and patient records
- Legal documents, case files, and confidential correspondence
- Credit card details, account numbers, and identity documents
- Business plans, R&D files, and intellectual property
- Meeting minutes containing sensitive decisions or data
- Supplier and partner agreements
- Printed emails, faxes, and internal memos containing personal data
- Boarding passes and travel documents (contain personal data)
- Prescription forms and pharmaceutical records
- X-rays and medical imaging records
Q Can shredding companies destroy more than paper?
Uniform fraud, where someone wears branded workwear to gain unauthorised access to premises or impersonate staff, is a recognised security risk, particularly in healthcare, financial services, security, and emergency services. When uniforms are rebranded, replaced, or when employees leave, the old clothing should be destroyed rather than donated or binned. Industrial shredders destroy all fabric types including zips, buttons, leather, and rubber, reducing the garments to unrecognisable fragments. Shredded textiles are then recycled where possible into materials such as industrial rags, car insulation, or fuel for energy-from-waste facilities.
Q Why would I need to shred uniforms?
Yes. Most professional shredding companies in the UK now offer destruction of a wide range of materials beyond paper. Industrial shredders can process:
- Electronic media: Hard drives, SSDs, USB drives, magnetic tapes, CDs, DVDs, Blu-rays, memory cards
- Uniforms and branded clothing: Workwear, security badges, ID cards, access control cards, to prevent impersonation and brand fraud
- Credit and debit cards
- X-rays and microfilm
- Counterfeit or end-of-line products
- Faulty or recalled goods
- Branded promotional materials
- Pharmaceuticals and medical supplies (with specialist providers)
Q What about X-rays and medical records on film?
X-rays and photographic medical imaging records contain identifiable patient data and silver-based compounds. Specialist shredding services handle these under healthcare-specific compliance requirements. The silver can be recovered and recycled. Healthcare providers, dental practices, and pharmaceutical companies should use providers with specific experience in medical records destruction to ensure both GDPR compliance and correct WEEE/environmental handling.
05. Types of shredding service
Q What types of shredding services are available in the UK?
UK shredding providers typically offer several distinct service models:
- One-off / ad hoc shredding: A single collection for businesses clearing out old files, or households with accumulated paperwork. No ongoing contract required.
- Regular scheduled collections: A recurring service, weekly, fortnightly, monthly, or quarterly, where the provider collects filled consoles or sacks on an agreed schedule.
- On-site (mobile) shredding: A shredding truck comes to your premises and destroys documents on the spot, in front of you if required.
- Off-site shredding: Documents are collected in secure, locked containers and transported to a certified facility for destruction.
- Drive-through shredding: Some providers offer drop-off points where you bring your material directly.
- Postal/courier shredding: Designed for individuals and small businesses. You receive sealed sacks, fill them, and post or courier them back for destruction. Suitable for low volumes.
- Purge / clearance shredding: A large one-time service for office moves, building clearances, or major compliance projects. Can handle tonnes of material.
Q What are lockable consoles and why are they used?
Lockable consoles (also called confidential waste bins or shredding consoles) are secure, lockable containers supplied by the shredding company and placed in your office. Staff deposit confidential documents through a slot at the top, like a letterbox, and the bin locks shut, preventing anyone from accessing the contents. When the console is full or at the scheduled collection date, the provider collects it and replaces it. This approach means documents are secured from the moment they leave a staff member’s hand until they are destroyed, maintaining a chain of custody throughout. Consoles come in various sizes from desk-top bins to full-height cabinets.
Q Is there a minimum amount required for a collection?
Most professional shredding companies do not impose a minimum quantity. They handle everything from a single bag to multi-tonne site clearances. Pricing is typically volume-dependent, so small collections will cost more per kilogram than large ones. Some providers have a minimum charge per visit rather than a minimum weight. For very small residential or small-business quantities, postal/courier services are usually the most cost-effective option.
06. On-site vs off-site shredding
Q What is on-site (mobile) shredding?
On-site shredding means a purpose-built mobile shredding truck arrives at your premises and destroys your documents immediately, before leaving your site. The vehicle contains industrial-grade shredding equipment. You can watch the process live, which gives complete visibility and immediate proof of destruction. A certificate of destruction is issued on the spot. The shredded material is then taken away for recycling.
Q What is off-site shredding?
Off-site shredding involves your documents being collected in sealed, locked containers and transported, under chain of custody, to a certified secure shredding facility where they are destroyed. The collection vehicle is GPS-tracked and the containers are locked at all times during transit. At the facility, material is shredded under CCTV and within tight time windows specified by the BS EN 15713 standard. A certificate of destruction is issued after the job is complete.
Q Which is better, on-site or off-site?
Neither is universally better. The right choice depends on your priorities:
On-Site | Off-Site | |
Best for | High-security needs; witnessed destruction; legal/medical sectors | High volumes; regular collections; cost efficiency |
Transparency | Documents never leave your site until destroyed | Secure transport with GPS tracking and locked containers |
Cost | Generally higher per collection | Lower, especially at volume |
Convenience | Requires parking/access for a large vehicle | Very low effort; driver collects and replaces consoles |
Compliance | Both meet BS EN 15713 when delivered by accredited providers | Both meet BS EN 15713 when delivered by accredited providers |
Many organisations use a combination: regular off-site collections for day-to-day waste, with occasional on-site shredding for sensitive purge projects or when compliance demands witness destruction.
Q How quickly must documents be destroyed after collection?
Under the BS EN 15713:2023 standard, confidential material collected for destruction must be destroyed within one working day of arriving at the destruction facility. Reputable providers adhere to this strictly. It is a key question to ask any prospective provider, and their answer tells you a lot about their operational standards.
07. Security standards & accreditations
Q What is BS EN 15713 and why does it matter?
BS EN 15713 (most recently updated as BS EN 15713:2023) is the European Standard for the secure destruction of confidential material, adopted as the British Standard. It is the primary benchmark for the UK shredding industry and takes precedence over all national standards. The standard defines:
- How confidential material must be collected and stored before destruction
- Security requirements for vehicles, premises, and facilities
- Staff vetting and training requirements
- Shred sizes for different security levels (from P-1, the coarsest, to P-7, the finest for highly classified material)
- The requirement to destroy material within one working day of arrival at the facility
- Documentation and chain of custody requirements
- Environmental handling of shredded material
Always ask whether a provider is compliant with BS EN 15713:2023. Non-compliant providers should not handle your confidential material.
Q What security levels (shred sizes) exist and which do I need?
BS EN 15713 and DIN 66399 define security levels from P-1 (strips up to 2,000mm²) to P-7 (particles of 1mm² or less). In practice for UK businesses:
- P-1 / P-2: General office waste, non-sensitive paper. Rarely appropriate for any business holding personal data.
- P-3 / P-4: Standard business documents with personal data. Cross-cut shred at 320mm² or less. Suitable for most commercial purposes.
- P-5 / P-6: Highly sensitive information, financial sector, medical records. Micro-cut particles of 30mm² or less.
- P-7: Classified government and national security documents. Confetti-level destruction at 1mm² or less.
Most businesses need P-4 or P-5. The key is that the chosen level makes reconstruction virtually impossible, not just impractical.
Q What is BS 7858 and what does it mean for staff vetting?
BS 7858 is the British Standard for security screening of individuals employed in a security environment. Under BS EN 15713, all staff working for a shredding company should be screened to BS 7858 standard. This includes:
- DBS (Disclosure and Barring Service) criminal record checks
- Credit checks
- Five years of written employment history verification
- Gap in employment verification
- Character references
- Right-to-work checks
- Signed deed of confidentiality
Staff vetting is one of the most important security factors to ask about when selecting a provider. You should also ask whether sub-contracted staff are vetted to the same standard.
Q What certifications should a reputable UK shredding company hold?
Look for the following as a minimum:
- ISO 9001:2015, Quality management systems, incorporating EN 15713 and BS 7858
- ISO 14001:2015, Environmental management
- BS EN 15713:2023 compliance, The core shredding standard
- ICO registration, Legal requirement for data processors
- BSIA membership, British Security Industry Association. The main trade body for the UK security sector.
- UKSSA membership, United Kingdom Security Shredding Association. The only UK trade body dedicated specifically to security shredding operational standards.
Additional certifications to look for depending on your sector:
- ISO 27001, Information security management
- PCI DSS Level 1, For providers handling payment card data environments
- Cyber Essentials, For providers with digital systems handling your data
- SafeContractor / CHAS, Health and safety compliance
- FORS accreditation, For responsible fleet operation
Q What is a certificate of destruction and what should it contain?
A certificate of destruction is the formal documentation that confirms your material has been securely destroyed. It is the primary proof you hold for GDPR compliance audits. A proper certificate should include:
- Your company name and details
- The date and time of destruction
- The volume or weight of material destroyed
- The security level to which it was destroyed
- The shredding company’s name, address, and accreditation details
- A reference number for the job
- A signature or authorised declaration from the provider
Keep these certificates. They are your evidence of compliance if the ICO comes knocking or if you face a claim related to data disposal. Some providers now offer electronic certificates with individual serial numbers for each consignment.
Q What is "chain of custody" and why does it matter?
Chain of custody is the documented, unbroken record of who has had access to your material from the moment it leaves your hands to the moment it is destroyed. A proper chain of custody includes: collection logs signed at your premises, GPS tracking on vehicles during transit, CCTV footage at the destruction facility, and a time-stamped destruction record. If the chain of custody is broken at any point, say, a driver leaves a vehicle unlocked, or material is left overnight at an insecure location, you have a potential data breach. Ask prospective providers how they document and maintain chain of custody at every step.
08. The shredding process explained
Q What happens step by step when I use a shredding service?
The typical off-site process runs as follows:
- Consultation & setup: You agree volumes, frequency, and the type of service. The provider delivers lockable consoles or sacks to your premises.
- Collection: On the agreed date (or when consoles are full), a vetted driver arrives in a GPS-tracked, locked vehicle. Consoles are collected and sealed. A collection note is signed by both parties.
- Transport: Material is transported to the certified destruction facility without intermediate stops. Vehicles are locked and alarmed at all times.
- Destruction: Material is shredded within one working day of arrival. This happens under CCTV. For high-security levels, mixing of shredded output with other customers’ material further prevents any reconstruction.
- Recycling: Shredded paper is baled and sent to paper mills for recycling. Electronic fragments follow WEEE-compliant disposal routes.
- Certificate of destruction: Issued to you, either by post, email, or through a client portal.
Q What happens if I accidentally include something that shouldn't be shredded?
Contact the shredding company immediately, ideally before collection, but as soon as you realise. If the material has not yet been shredded, a reputable provider will quarantine it and return it to you securely. Once material has entered the industrial shredder, recovery is not possible. This is why proper preparation of materials before collection matters, and why it is worth having a clear process for what goes in the confidential waste console. Most providers will work with you to return a misplaced item if it has not yet been processed.
Q Can I watch my documents being shredded?
Yes, with most providers. For on-site shredding, you can watch the process live as the mobile truck shreds on your premises. For off-site shredding, many providers offer a facility viewing service where you travel to the shredding plant and observe destruction in person. Some providers also offer CCTV footage or live webcam feeds of destruction. For industries with very high confidentiality requirements, legal, government, financial services, witnessed destruction is sometimes a contractual requirement.
Q How long does a shredding collection typically take?
Collection visits for scheduled off-site shredding are usually quick, a driver swaps out consoles and is gone in 10–20 minutes for a typical office. On-site mobile shredding visits take longer, depending on volume. A typical on-site session processing a few boxes to a few hundred kilograms might take 30 minutes to 2 hours. Large-scale office clearances or site purges are planned in advance and may take a full day or span multiple visits.
09. Hard drive & electronic media destruction
Q Why can't I just delete the data on a hard drive and dispose of it?
Standard deletion does not erase data from a hard drive. It simply removes the pointer to the file, leaving the underlying data intact and recoverable with freely available software. Even “factory reset” and disk formatting leave substantial data that forensic tools can recover. The only way to guarantee data cannot be recovered is to physically destroy the storage medium, or to use certified cryptographic erasure (which is harder to prove and cannot be used on all drive types). For GDPR compliance purposes, physical destruction with a certificate is the most defensible approach.
Q What methods are used to destroy hard drives?
UK data destruction providers use several methods, often in combination:
- Physical shredding: The drive is fed through an industrial shredder and reduced to metal fragments. Definitive and irreversible. The most common method.
- Degaussing: A powerful electromagnetic field is applied to magnetic media (HDDs and tapes), scrambling the magnetic domains that store data. Effective for traditional HDDs and magnetic tape but useless on SSDs, which don’t use magnetic storage.
- Disintegration / pulverisation: Used for SSDs, flash media, and small components. Produces very fine particles to prevent recovery of data from individual memory chips.
- Cryptographic erasure: Software-based, used for drives that need reuse. Only GDPR-defensible when combined with rigorous documentation and sometimes physical destruction of the controller.
Q What electronic devices can be destroyed?
Any data-bearing device. This includes: laptop and desktop hard drives, solid-state drives, mobile phones and tablets, USB drives and flash memory cards, magnetic backup tapes (DAT, LTO), server drives and RAID arrays, chip & PIN card readers, photocopier hard drives (which store images of everything ever copied, a commonly overlooked risk), optical media (CDs, DVDs, Blu-rays), and electronic ID cards with embedded chips.
Q Do hard drives have to be disposed of under WEEE regulations?
Yes. Electronic waste, including hard drives and any electronic device, falls under the Waste Electrical and Electronic Equipment (WEEE) Regulations 2013. Organisations have a duty of care to ensure that e-waste is handled by an authorised treatment facility. Professional data destruction companies who are WEEE-compliant will recycle the metal and other recoverable materials from destroyed drives, diverting them from landfill. Always ask a provider for their WEEE compliance documentation and waste transfer notes.
Q Do I get a certificate of destruction for hard drives?
Yes, and for hard drives the certificate should go further than for paper. It should include the serial number of each drive destroyed, giving you a traceable, auditable record tied to specific assets. This serial-number-level documentation is critical for large organisations managing IT asset disposal and GDPR compliance. Some providers also offer video evidence of destruction.
10. Pricing & cost factors
Q How much does shredding cost in the UK?
Pricing varies by service type, volume, location, and provider. Typical UK benchmark prices (excluding VAT):
Service Type | Typical UK Price Range |
Regular scheduled service (annual contract) | £250–£750 per year for monthly collections |
One-off off-site collection | From £73–£125 per collection (minimum charge varies) |
On-site mobile shredding | ~£125 per hour |
Per sack / bag (off-site) | £15–£50 per sack depending on volume and location |
Postal / courier service (residential) | £19–£36 per sack including VAT |
Hard drive destruction | From ~£5 per device at volume; higher for single units |
These are typical ranges. Your actual quote will depend on the volume you generate, the frequency of collections, your location, the security level required, and whether on-site or off-site shredding is more appropriate.
Q What factors affect the cost of a shredding service?
- Volume: More material generally means a lower cost per kilogram. Large-scale clearances are cheaper per unit than ad hoc single collections.
- Frequency: Scheduled contracts are cheaper per collection than one-off visits.
- Location: Rural and remote locations typically cost more due to travel. London and major cities are well-served with competitive pricing.
- Service type: On-site shredding costs more than off-site.
- Security level: Higher security levels require more processing time and cost more.
- Material type: Non-paper items (uniforms, hard drives, mixed media) often attract different pricing.
- Fuel surcharges: Some providers, including major nationals, add monthly-adjusted fuel surcharges.
- Environmental surcharges: Some providers levy a small environmental fee (typically 5–7%) for recycling and disposal compliance.
Q Is VAT charged on shredding services?
Yes. Professional shredding services are subject to standard-rate VAT at 20% in the UK. All quoted prices from reputable providers should clearly indicate whether the price shown is inclusive or exclusive of VAT. For VAT-registered businesses this is recoverable, but it is worth confirming when comparing quotes.
Q Are there any hidden costs to watch for?
Some costs that can catch businesses out:
- Fuel surcharges that adjust monthly
- Environmental levies
- Charges for providing and maintaining lockable consoles
- Minimum charges per visit regardless of volume
- Annual duty-of-care documentation charges (some providers charge separately for Duty of Care Transfer Notes)
- Charges for witnessed destruction or certificate issuance
- Contract termination fees on long-term scheduled agreements
Always ask for a fully itemised quote and read any contract carefully before signing.
11. Choosing a provider
Q What should I look for when choosing a shredding company?
Seven questions to ask any provider before engaging them:
- Are you compliant with BS EN 15713:2023? Non-negotiable. This is the floor, not a selling point.
- Are all staff vetted to BS 7858? Includes drivers, facility staff, and any sub-contractors.
- Do you have ISO 9001 incorporating EN 15713? Means an independent body audits their security processes regularly.
- Are you registered with the ICO? Legal requirement for any data processor.
- What does your Data Processing Agreement look like? Should be ready to supply one without hesitation.
- What is your chain of custody process? GPS tracked vehicles? CCTV at the facility? Time-stamped destruction logs?
- When exactly is material destroyed after collection? Should be within one working day per BS EN 15713.
Q Is it safe to use a shredding company I haven't heard of?
The accreditation framework is your protection. An unfamiliar company that holds ISO 9001 incorporating EN 15713, is BS 7858-compliant, ICO-registered, and a member of BSIA or UKSSA has been independently audited and verified to industry standards. Company size or brand recognition is less important than whether they have passed those audits. Ask for copies of their certificates, verify them on the relevant certification body websites, and check their ICO registration at ico.org.uk. Reputation and client references also matter.
Q Can a shredding company use sub-contractors?
Yes, but under BS EN 15713 they must inform you if sub-contractors are used, and sub-contracted work may only be allocated to companies that also follow BS EN 15713 standards. Staff vetting requirements apply equally to sub-contractors. If you are uncomfortable with sub-contracting, it is entirely reasonable to request in your contract that your material is only handled by the primary provider’s own vetted staff.
Q What questions should I ask about environmental practice?
Reputable providers recycle virtually all shredded paper. It goes to paper mills as a raw material. Ask for the provider’s recycling rate and where shredded material goes. A UKSSA Code of Practice commitment requires members to recycle shredded material wherever practicable. For hard drives and electronics, ask about WEEE compliance and waste transfer documentation. Some providers have zero-to-landfill policies and ISO 14001 environmental management certification.
12. Home & residential shredding
Q Can individuals and households use a shredding service?
Yes. Many UK shredding companies specifically cater to residential customers, particularly through postal or courier services. You receive sealed, tamper-evident sacks, fill them at home, and arrange for them to be collected or dropped off at a designated point. This is ideal for household clear-outs, accumulated bank statements, old tax returns, medical correspondence, or anything with personal identifiers. The service includes the same certificate of destruction as commercial services.
Q What home documents should I shred?
Any document containing your personal details, financial information, or account numbers. This includes: bank and credit card statements, utility bills (your name, address, account number), payslips, P60s and tax returns, NHS correspondence, prescriptions, passport copies and driving licence photocopies, insurance documents, old cheques and cheque books, loyalty card statements, mortgage and loan documents, and letters with your full name and address. Even junk mail addressed to you should ideally be shredded if it includes your full name and address.
Q How does the postal shredding service work for individuals?
You register online with a provider, they post you sealed sacks. You fill them with documents (no need to remove staples or clips). When ready, you drop them at a designated collection point, often a partner convenience store, post office, or courier collection point, or arrange a courier collection. The sacks are tracked to the destruction facility. You receive a certificate of destruction by email. Prices for residential customers typically range from £15 to £36 per sack depending on the provider and your location.
13. Environmental & recycling
Q Is shredded paper recycled?
Yes, in virtually all cases with reputable providers. After destruction, shredded paper is baled and sent to paper mills where it is repulped and used as raw material for new paper products. The shredding itself does not prevent recycling, the material becomes a paper fibre input that helps reduce demand for virgin wood pulp. Reputable providers have a zero-landfill policy for shredded paper and will provide information about their recycling chain. UKSSA members are specifically committed to returning shredded material to productive use wherever practicable.
Q Does using a shredding service increase or decrease my environmental footprint compared to doing it in-house?
For most organisations, professional shredding is more environmentally efficient than in-house. In-house desktop shredders are energy-intensive relative to their throughput, their shredded output is often mixed with general waste and goes to landfill, and they require maintenance and replacement. Professional services use industrial-grade equipment that processes material efficiently, maintain documented recycling chains, and in many cases run vehicles on alternative fuels. Providers with ISO 14001 certification are specifically measured on their environmental management performance. Many also offer sustainability reporting that feeds into your own ESG reporting.
Q What happens to shredded materials that can't be recycled?
For materials that cannot be directly recycled, certain mixed textiles, non-recyclable plastics, or contaminated paper, responsible providers use Energy from Waste (EfW) facilities, where the material is incinerated to generate electricity for the National Grid. This approach diverts material from landfill and recovers energy value. Some textile fragments are made into refuse-derived fuel (RDF) or solid recovered fuel (SRF). For metals from shredded electronics, a WEEE-compliant recycler recovers metals including copper, aluminium, and precious metals.
14. Industry sectors covered
Q Which sectors most commonly use professional shredding services?
Professional shredding is relevant to almost every sector, but the following have the highest compliance requirements:
- Healthcare and the NHS: Patient records, prescriptions, clinical notes, and medical imaging. Subject to NHS Records Management Code of Practice in addition to GDPR.
- Legal: Client files, case documents, correspondence. Solicitors and barristers have professional obligations around confidentiality that go beyond standard GDPR.
- Financial services: Banks, insurers, accountants, and financial advisers. Subject to FCA rules on data handling in addition to GDPR. PCI DSS requirements apply to card data.
- Local government and public bodies: High volume of personal data. ICO enforcement is stricter for public bodies.
- Education: Student records, admissions data, staff files.
- HR and recruitment: CVs, application forms, interview notes.
- Retail: Customer data, loyalty programme records, financial transactions.
- Pharmaceutical: Patient trial data, formulation records, regulatory submissions.
- IT companies: Hardware disposal, client data on decommissioned equipment.
Q Does the NHS have special requirements for document destruction?
Yes. The NHS Records Management Code of Practice (updated in 2021) sets out specific retention periods for NHS records, which differ significantly from standard commercial periods. For example, most health records for adults must be kept for 8 years after the last episode of care. Certain records (maternity, children’s mental health) have extended periods going up to 25 years. NHS organisations should use a shredding provider with specific NHS experience and a clear understanding of these extended retention requirements before destruction.
15. Common misconceptions
Q I'm a small business, does any of this apply to me?
Yes. UK GDPR and the Data Protection Act 2018 apply to any organisation, regardless of size, that processes personal data. A sole trader with ten client files is subject to the same legal obligations as a FTSE 100 company. The ICO’s guidance is clear that size is not a factor in whether the law applies. For a small business, the practical answer is often the postal shredding service or occasional one-off collections, low cost, no ongoing contract, full compliance.
Q We've always just used our office shredder, isn't that enough?
For low-sensitivity internal documents, an office shredder is acceptable. The problem is twofold: first, desktop shredders produce larger particles (often P-2 or P-3) that can be reconstructed with effort, which is inadequate for sensitive personal data. Second, and more significantly, an office shredder produces no audit trail. If you face an ICO inquiry or a client dispute about data disposal, you have no evidence that any particular document was shredded. A professional service provides a certificate of destruction that is dated, itemised, and signed. That certificate is your compliance documentation.
Q If I recycle paper, isn't that good enough?
No. Confidential documents placed in recycling bins pass through multiple handling points where the information is fully readable. Recycling is not disposal, it is a different form of processing. UK GDPR requires that personal data be securely destroyed, not merely redirected. Documents containing personal data must be shredded or otherwise rendered unreadable before recycling. Many professional shredding services do both: they destroy the document AND then recycle the resulting material.
Q Can't I just burn old documents?
Burning documents is not compliant with UK data protection requirements in a commercial context. The Environmental Protection Act 1990 and various local authority bylaws restrict burning of waste. There is no audit trail, no certificate, and no documented chain of custody. Depending on the volume and location, open burning may also violate air quality regulations. Professional shredding is the correct legal route for secure document disposal in the UK.
Q Shredding is expensive, is it really worth it?
Compare the cost of a regular shredding service, potentially £250–£750 per year for a small business, against the potential ICO fine of up to £17.5 million, or even a modest regulatory sanction in the tens of thousands. The reputational damage from a publicised data breach is a further cost that is hard to quantify. The risk-adjusted economics of professional shredding are clear. For most businesses, it is also more cost-effective than the staff time required for compliant in-house disposal.
Q Digital transformation means we don't have much paper, do we still need shredding?
Probably yes. Even the most digitised organisations generate paper: printed emails, delivered post, handwritten notes, forms, meeting printouts, visitor logs, delivery notes, and physical contracts. Beyond paper, digital transformation often means old IT equipment, hard drives, phones, USBs, that needs certified destruction when decommissioned. A paper-light organisation may need less frequent paper shredding but almost certainly needs IT asset destruction services as technology is replaced and upgraded. The shift to digital has not eliminated the need for secure physical destruction, it has changed its composition.
Q: What types of documents can be shredded?
Document shredding businesses are capable of handling a wide range of information, including paper files, invoices, financial records, medical records, legal documents, tax forms, and any other private or sensitive data. Find out more.
Q: What security measures do you have in place to protect the documents during the shredding process?
To protect the confidentiality and integrity of the documents, document shredding businesses use stringent security measures like background checks for workers, secure document transportation, video surveillance, access control, and secure shredding facilities. Find out how we can help you.
Q: Do I need to remove staples, paper clips, or binder clips before shredding?
Paper clips, staples, and small binder clips may typically all be destroyed by professional shredding machinery. Large binder clips or other non-paper objects should be taken out before shredding, though. Go here for a Quick Quote.
Q: Can you provide a certificate of destruction?
A certificate of destruction is given by trustworthy document shredding providers to show that your records have been safely destroyed. This paper demonstrates that the disposal was legal, ethical, and compliant. Find out more.
Q: What happens to the shredded paper after the shredding process?
To guarantee environmental sustainability, paper is normally recycled after being shredded. Companies that shred documents collaborate with recycling partners to safely recycle the paper after shredding it, preventing the possibility of information recovery. Get in touch here.
Q: Can you shred documents onsite at my location?
WeeShred offer off-site shredding of confidential documents, which entail our vetted and insured highly trained staff collecting the documents to be destroyed and transporting them back to our processing plant in Bury. Get more information.
Q: What happens if there is a paper jam during the shredding process?
A document shredder professional is educated to effectively manage paper clogs. They possess the equipment and knowledge required to clear the jam and guarantee a smooth continuation of the shredding operation. Quick Quote here.
Q: How do you ensure compliance with data protection regulations?
A document shredding business keeps up with compliance standards and data protection laws. To ensure compliance with pertinent regulations, such as the Health Insurance Portability and Accountability Act (HIPAA) or the General Data Protection Regulation (GDPR), they employ stringent rules and processes. More details here.
Q: Can you provide regularly scheduled shredding services?
A lot of document destruction businesses do really provide ongoing shredding services tailored to your individual requirements. This can involve picking up confidential documents on a weekly, monthly, or quarterly basis to ensure regular and secure destruction. We are here to help.
Q: Is there a minimum amount of documents required for shredding services?
The majority of document shredding businesses do not have a minimum quantity requirement. They are capable of handling shredding tasks of all sorts, from modest amounts to large-scale ones. Find out more.
Q: What happens if I accidentally include a document that shouldn't be shredded?
Document destruction businesses are aware that mistakes can occur. If you mistakenly include a document that shouldn’t be destroyed, notify the business right away, and they will take the necessary steps to rescue it and send it back to you in a secure manner. Find out how we can help you.
Q: Do you provide shredding services for electronic media or hard drives?
Many businesses that specialise in document destruction also provide services for the destruction of electronic media, such as hard drive shredding or degaussing, to guarantee total data erasure for storage devices. More details here.
Q: Do you offer a drop-off shredding service?
Certain document destruction businesses offer drop-off locations where people or enterprises can deliver their records for safe destruction. This choice is practical for minor shredding requirements. Quick Quote here.
Q: How long does the shredding process typically take?
Depending on the quantity of documents and the shredding technique employed, the time required to complete the procedure can vary. Companies that destroy documents might offer quotes based on your particular needs. Go here for a Quick Quote.
Q: Can you accommodate special shredding requests, such as oversized documents or unusual materials?
Yes, businesses that specialise in document destruction can frequently fulfil unique demands, such as shredding big papers, blueprints, X-rays, or things like CDs, DVDs, or credit cards. It’s advisable to ask the shredding firm about any unique requirements. Find out more.
Q: Do you offer any guarantees regarding the security and confidentiality of the shredding process?
Security and secrecy are given top priority by reputable document shredding companies. For your piece of mind, they might provide assurances or warranties on the safe management and disposal of your documents. We are here to help.
Q: How can I ensure compliance with industry-specific regulations through your shredding services?
A company that specialises in managing rules particular to a given area, like HIPAA for the healthcare business or FACTA for financial institutions, can customise its services to match your compliance requirements. They are aware of the regulations and take the appropriate safety measures to guarantee conformity. Get in touch here.
Q: What steps do you take to maintain the privacy and confidentiality of the documents during transportation?
To protect the secrecy of the papers during transportation to the shredding facility, document shredding businesses use secure transportation methods, such as locked containers or bins, GPS tracking, and trained people. Get more information.
Q: Are your employees trained in privacy and security protocols?
To ensure the proper handling and destruction of sensitive information, document shredding firms train their workers in privacy and security procedures. The greatest levels of confidentiality are upheld thanks to this instruction. More details here.
Q: Can you provide references or customer testimonials?
In order to demonstrate their track record and level of customer satisfaction, respectable document shredding organisations can, upon request, provide references or customer testimonials. Quick Quote here.