Safe and Secure

ISO 27001 Certified

At Aspire, we understand the importance of safeguarding sensitive data contained within donated items, and we take this responsibility seriously. That’s why we’re proud to announce our ISO 27001 certification for “Secure data erasure, recycling, and refurbishment of data storage devices”

All incoming equipment is meticulously processed within our state-of-the-art data destruction unit, which is monitored continuously, 365 days a year. Following globally recognised standards, we employ robust data destruction methods, including comprehensive cleansing and wiping, as well as rigorous physical destruction through crushing and shredding.

Secure data destruction is a critical aspect of our recycling process and all individuals involved in the handling of data are security vetted.

Data Erasure

The first step in secure data destruction involves erasing all data stored on electronic devices. Advanced software tools are used to overwrite the existing data multiple times with random patterns of binary code. This process effectively removes all traces of the original data, making it virtually impossible to recover using standard data recovery methods.

Physical Destruction

For devices where data erasure is not feasible or practical, such as damaged hard drives or solid-state drives (SSDs), physical destruction may be employed. This involves physically crushing and shredding the storage media into small pieces, rendering the data irretrievable. Specialised equipment designed for this purpose ensures that the destruction is thorough and irreversible.

Certification

Following data destruction, we typically provide an audit of the data bearing assets treated and a record of destruction to confirm that the process has been completed successfully. These documents serve as recognised proof that sensitive data has been securely disposed of in compliance with legal and regulatory requirements.

Disclaimer – A full audit will only be issued for qualifying quantities, usually in excess of 20 data bearing assets. Smaller amounts will be covered by a single record of destruction and a brief summary of the items.

Chain of Custody

Throughout the data destruction process, a strict chain of custody is maintained to ensure the security and integrity of the data. This involves following a strict protocol of the process, from the initial receipt of the data bearing devices to their final disposal or recycling.

Environmental Considerations

In addition to ensuring data security, we also take environmental considerations into account when disposing of electronic devices. Items that have been earmarked for secure data destruction may still contain hazardous materials, such as batteries or POPs, which need to be managed responsibly to prevent environmental contamination. We adhere to strict environmental regulations and best practices for the handling and disposal of hazardous materials to minimise their impact on the environment

GDPR and Your Data

In adherence to GDPR regulations, which govern the protection of personal data within the European Union and the European Economic Area, any data, regardless of its format, must be handled with the utmost care and diligence. To ensure compliance with these regulations, Aspire has implemented strict protocols for the transfer and handling of data-containing equipment.

Before any data-containing equipment is transferred to our facility, a signed data transfer agreement is required from both parties involved in the transaction. This agreement outlines the terms and conditions governing the transfer of data and serves as a legal contract between the donor and Aspire. By obtaining this agreement, we ensure that all parties understand their responsibilities and obligations regarding the handling and disposal of sensitive data.

Furthermore, our team facilitates this process by providing guidance and assistance to donors in completing the necessary paperwork. We understand the importance of clear communication and transparency in data handling practices, and we are committed to ensuring that all stakeholders are fully informed and aware of their rights and obligations.

Once the data transfer agreement is in place, the equipment can be securely transferred to our facility for processing. Throughout the entire process, we maintain the highest standards of data security and privacy to safeguard against any potential breaches or unauthorised access. Our state-of-the-art data destruction unit employs industry-leading techniques to ensure that all data is irreversibly erased or destroyed in accordance with GDPR requirements.

By adhering to these regulations and implementing rigorous data handling procedures, Aspire demonstrates its commitment to protecting the privacy and security of personal data while promoting responsible recycling practices. We understand the importance of maintaining trust and confidence among our donors and stakeholders, and we strive to uphold the highest standards of integrity and professionalism in all aspects of our operations.