Home/Compliance
Licensing & accreditation
Everything, in writing
Anyone can claim to handle data and waste responsibly. These are the registrations that back it up — all verifiable, with the licence documents available to download.
Registrations
Who we are, formally
| Registration | Reference | What it covers | Document |
|---|---|---|---|
| Registered company | 16774881 | PYCO RENEW LTD, registered in England & Wales | Companies House |
| VAT registration | GB505306526 | UK VAT registered; VAT invoices and self-billing supported | — |
| Waste carrier licence | CBDU607333 | Upper tier waste carrier, broker and dealer. Registered 20 Oct 2025, valid to 20 Oct 2028 | Download PDF |
| T11 exemption | EXP/KP3143JC | Repair and refurbishment of WEEE at Unit D13. Registered 25 Nov 2025, valid to 25 Nov 2028 | Download PDF |
| ICO registration | ZC018901 | Registered with the Information Commissioner’s Office as a data controller | ICO register |
| Cyber Essentials | Certified | Whole-organisation certification, profile 3.2 (Willow). Valid to 1 December 2026 | Download PDF |
| Sanitisation standard | NIST SP 800-88 Rev.1 | Media sanitisation methodology applied to all storage devices | How it works |
What each one means
In plain terms
Upper-tier waste carrier — CBDU607333
Under the Environmental Protection Act 1990 you have a duty of care to transfer waste only to an authorised person. Upper-tier registration is what authorises us to carry your WEEE, and it’s why we can issue a valid waste transfer note for every load. Without it, your duty of care isn’t discharged — and the liability stays with you.
T11 exemption — EXP/KP3143JC
A T11 waste exemption permits the repair, refurbishment and dismantling of waste electrical and electronic equipment. It’s what allows us to strip a server for reusable parts rather than send the whole unit for material recovery — keeping working hardware in service and material out of the waste stream.
ICO registration — ZC018901
We are registered with the Information Commissioner’s Office and handle any personal data encountered during decommissioning under UK GDPR and the Data Protection Act 2018. In practice that means data on your media is sanitised, never examined, never copied, and never retained.
Cyber Essentials — Certified
Government-backed certification confirming our own IT defences meet the Cyber Essentials scheme. Certified against profile 3.2 (Willow) at whole-organisation scope — not a single department or system — and valid until 1 December 2026. It matters here because we handle your asset registers and, briefly, your data-bearing media: our security posture becomes part of yours.
NIST SP 800-88 Rev.1
The internationally recognised guideline for media sanitisation, and the one auditors expect to see referenced. We apply Clear, Purge or Destroy according to media type and your policy, and certificate every device by serial number.
Documentation
What you get with every collection
The paperwork isn’t an afterthought — for most of our customers it’s the reason they went to a licensed buyer rather than a man with a van.
- Waste transfer note — issued on the day of collection, discharging your duty of care.
- Collection manifest — signed on site, listing exactly what was loaded.
- Certificate of erasure — per drive, by serial number, stating the method and result.
- Certificate of destruction — where media was physically punched, naming the tool and method.
- Consolidated audit report — the whole collection reconciled against your asset register.
- Insurance and licence copies — on request, for your supplier onboarding pack.
Procurement or infosec need something specific before onboarding us as a supplier? Ask — we’d rather answer the questionnaire up front than hold up your decommission.
Downloads
See the paperwork before you commit
Our licences, and worked examples of the documents you’ll receive. Nothing here is behind a form — take them to your infosec team and check them.
Cyber Essentials Certificate
Whole-organisation certification, profile 3.2 (Willow). Issued 1 December 2025, valid to 1 December 2026. QR-verifiable against the IASME register.
Waste Carrier Licence
Environment Agency certificate of registration, CBDU607333. Upper tier carrier, broker and dealer. Valid to 20 October 2028.
T11 Waste Exemption
Environment Agency confirmation of registration, EXP/KP3143JC, for WEEE repair and refurbishment at Unit D13. Valid to 25 November 2028.
Sample Asset Processing Report
A worked example over 24 data centre assets — servers, storage, drives, switching and a GPU — showing per-asset disposition, the sanitisation standard applied to each, and the reuse and CO2e figures.
Sample Waste Transfer Note
The duty-of-care document issued on the day of collection, with EWC codes, transfer type and electronic signatures from both sides.
Something else?
Insurance certificates, method statements, a completed supplier questionnaire or a signed NDA — ask and we’ll send them straight over.
Per-device certificates
The certificates we issue
Every device gets one, named by serial number. Worked examples below — the exact format your auditors will receive.
Certificate of Data Erasure
Issued for every drive successfully sanitised. Names the erasure software, the exact standard and command applied, drive health, start and end time, and the verification result.
- Example: Dell PowerEdge R640, SAS SSD
- NIST 800-88 Purge, verified by the drive
- Also cites HMG IS5 and UK GDPR
Storage Array Sanitisation
Controllers hold far more than data — host mappings, pool definitions, SNMP settings, certificates and admin credentials. This certificate covers the array configuration itself.
- Example: Dell EMC PowerVault ME4024
- Pre- and post-wipe state both recorded
- Fitted drives certificated separately
Network Equipment Sanitisation
Switches and firewalls retain configuration, VPN pre-shared keys, firewall policies, local user databases and certificates. All of it is erased and the result verified.
- Example: Fortinet FortiGate 80E
- Boot device formatted at BIOS level
- Checks performed are written down
Sample documents use fictional customer details and demonstration serial numbers throughout. They show the format and level of detail you receive — not a real customer’s data.