Privacy Policy - Man With Van Crystalpalace

This Privacy Policy explains how Man With Van Crystalpalace collects, uses, stores, shares, and protects personal data. It applies to all Man With Van Crystalpalace customers in the area, including individuals, households, landlords, tenants, and businesses that use our moving, delivery, loading, unloading, and related services. We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Man With Van Crystalpalace provides removal and transport services for customers in the local area. In the course of providing these services, we may act as a data controller for the personal data we collect and use. This means we decide how and why personal data is processed for our service, administrative, legal, and operational purposes.

2. Personal Data We Collect

We only collect personal data that is necessary for the delivery and management of our services. Depending on your interaction with us, the data may include:

Identity information: name, title, and any information needed to identify you as a customer or authorised representative.
Contact details: telephone number, email address, and service address details.
Booking and service information: moving dates, collection and delivery locations, property access details, item descriptions, and service preferences.
Payment information: billing details and transaction records, where applicable.
Communication records: enquiries, messages, complaints, quotes, and notes relating to your booking or service.
Operational data: information needed to plan and carry out services safely and efficiently, such as parking restrictions, access instructions, or special handling requirements.
Technical data: limited information such as device or browser details if you contact us electronically, where needed for security and service administration.

We do not seek to collect unnecessary personal data. Where possible, we reduce the amount of information processed to what is relevant and proportionate.

3. How We Use Personal Data

We use personal data for the following purposes:

to provide quotes and manage bookings;
to plan, perform, and complete moving and transport services;
to communicate with customers about service arrangements or changes;
to process payments and maintain financial records;
to handle complaints, disputes, and customer support requests;
to comply with legal, tax, insurance, and regulatory obligations;
to improve our service quality, safety, and efficiency;
to prevent fraud, misuse, or unlawful activity;
to maintain records for business administration and accountability.

We will not use your personal data for purposes incompatible with those described in this policy unless we are legally permitted or required to do so.

4. Lawful Basis for Processing

We process personal data only where we have a lawful basis under UK GDPR. The lawful bases we rely on include:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes managing bookings, arranging service delivery, communicating about the job, and taking payment where relevant.

Legal Obligation

We may process personal data where needed to comply with legal obligations, including accounting, tax, insurance, record-keeping, and lawful requests from authorities.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This may include service administration, business planning, safeguarding against fraud, customer support, and operational efficiency. We carefully consider the impact of such processing and limit it to what is necessary.

Consent

In limited situations, we may rely on your consent, for example where it is appropriate for optional communications or certain uses not covered by other lawful bases. If we rely on consent, you may withdraw it at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before withdrawal.

5. Sharing Your Data and Processors

We may share personal data with trusted third parties where necessary for the operation of our services. These third parties act as processors when they process data on our behalf and under our instructions. Examples may include:

Payment processors that handle card or electronic payments;
IT and cloud service providers that support storage, email, scheduling, or record management;
Accounting and bookkeeping processors that help maintain financial records;
Customer communication tools used to manage enquiries and service updates;
Professional advisers such as insurers, legal advisers, or auditors where needed;
Public authorities or law enforcement where disclosure is required by law.

We require processors to protect personal data, process it only for the agreed purpose, and apply appropriate security measures. We do not sell personal data. We also do not allow processors to use your information for their own independent purposes unless they are separately acting as controllers under their own legal obligations.

6. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including satisfying legal, accounting, tax, insurance, and operational requirements. Retention periods depend on the type of information and the reason it is held.

Booking and service records: retained for a reasonable period to manage service history, disputes, and customer support.
Financial and tax records: retained for the period required by applicable law.
Communication records: retained for as long as needed to manage enquiries, complaints, or ongoing service matters.
Legal or insurance-related records: retained where needed to defend or establish legal claims.

When personal data is no longer required, we will securely delete, anonymise, or archive it in line with our retention practices. We aim to keep data for the shortest time reasonably necessary.

7. Data Security

We take appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, restricted permissions, and staff awareness procedures. While no system can be guaranteed completely secure, we work to protect personal data in a way that is proportionate to the risks involved.

8. International Transfers

Where personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place in accordance with data protection law. These safeguards may include adequacy decisions, contractual protections, or other lawful transfer mechanisms designed to protect your information.

9. Your Rights

Under data protection law, you may have the following rights in relation to your personal data:

Right of access: you may request a copy of the personal data we hold about you.
Right to rectification: you may ask us to correct inaccurate or incomplete data.
Right to erasure: you may request deletion of your data in certain circumstances.
Right to restriction: you may ask us to limit processing in certain situations.
Right to object: you may object to processing based on legitimate interests or direct marketing where applicable.
Right to data portability: you may request transfer of certain data in a structured, commonly used format where applicable.
Right to withdraw consent: if we rely on consent, you may withdraw it at any time.

These rights are subject to legal limitations and may not apply in every case. If you exercise your rights, we may need to verify your identity before responding.

10. Complaints

If you believe your personal data has been handled improperly, you may raise your concern with us so that we can review the matter. You also have the right to complain to the UK data protection supervisory authority if you are dissatisfied with how we handle your data. We encourage you to contact us first so we can try to resolve any issue promptly and fairly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, business practices, or operational needs. Any updated version will apply from the date it is issued. We recommend reviewing this policy periodically to stay informed about how your personal data is handled.

12. Scope of This Policy

This Privacy Policy applies to all Man With Van Crystalpalace customers in the area and to any personal data processed in connection with our services. By using our services or providing your information to us, you acknowledge that your data will be handled in accordance with this policy and applicable law.