Privacy Policy - Man With Van Crystalpalace

Man With Van Crystalpalace is committed to protecting the privacy and personal data of all customers who use our services in the Crystal Palace area and surrounding local service area. This Privacy Policy explains how we collect, use, store, share, and protect personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to all Man With Van Crystalpalace customers in the area, including individual customers, households, and business clients who request removals, transport, delivery, packing, loading, unloading, or related services. By using our services, you acknowledge that your personal data may be processed as described in this policy.

1. Who We Are

For the purposes of data protection law, Man With Van Crystalpalace acts as the data controller for the personal information collected in connection with our services. This means we determine why and how personal data is processed. We take our responsibilities seriously and apply appropriate technical and organisational measures to protect the information entrusted to us.

2. Personal Data We Collect

We collect only the information necessary to provide our services effectively and lawfully. The types of personal data we may collect include:

Identity information such as your name or business name.
Contact information such as phone number, email address, and service address.
Booking details including service date, collection and delivery locations, volume of items, access notes, and special handling requirements.
Payment information such as billing details and records of payments made.
Communication records including enquiries, quotes, messages, complaints, and service-related correspondence.
Service history including past bookings, preferences, and requests.
Technical information if you interact with us electronically, such as basic device or usage data where relevant for security or troubleshooting purposes.

We do not intentionally collect special category data unless it is specifically required for a lawful reason and is voluntarily provided by you. If any sensitive information is shared with us, we will handle it with extra care and only process it where permitted by law.

3. How We Use Your Data

We use personal data for legitimate business and service purposes, including:

Providing quotes and arranging bookings.
Delivering moving, transport, and related services.
Managing customer accounts and service records.
Processing payments and issuing invoices or receipts.
Communicating with you about schedules, service changes, or important updates.
Handling complaints, claims, or service queries.
Maintaining business records and complying with legal obligations.
Protecting against fraud, misuse, or unauthorised access.
Improving our services, efficiency, and customer experience.

We will only use your personal data in ways that are compatible with the purposes set out in this policy.

4. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis for each use of personal data. Depending on the context, we may rely on one or more of the following lawful bases:

Contract

We process personal data where it is necessary to perform a contract with you or to take steps at your request before entering into a contract. This includes preparing quotes, confirming bookings, delivering services, and handling payment-related matters.

Legal Obligation

We may process and retain certain information to meet legal and regulatory obligations, such as tax, accounting, insurance, and record-keeping requirements.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include service management, customer communication, internal administration, security, and business improvement.

Consent

In limited situations, we may rely on your consent, for example where you clearly agree to receive certain types of marketing communications or where consent is needed for an optional processing activity. If we rely on consent, you may withdraw it at any time.

5. Sharing and Processors

We may share personal data with trusted third parties where necessary to deliver our services or comply with legal requirements. These third parties may act as processors on our behalf, meaning they process data only under our instructions and are required to protect it appropriately.

Examples of processors or service providers may include:

Accounting and bookkeeping providers.
Payment processing services.
IT support, cloud storage, and data security providers.
Communication and scheduling tools used for service administration.
Professional advisers such as insurers, auditors, or legal advisers where necessary.

We may also disclose personal data where required by law, court order, regulatory authority, or to protect our rights, customers, staff, or property. We do not sell personal data.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, insurance, and reporting obligations. The retention period will vary depending on the type of information and the purpose of processing.

In general, we may retain:

Booking and service records for a period needed to manage aftercare, dispute handling, and business records.
Financial records for the period required by tax and accounting law.
Communication records for a reasonable period to resolve queries and maintain service history.

When data is no longer needed, we will securely delete, anonymise, or archive it in line with our retention practices.

7. Data Security

We use appropriate security measures to help protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, staff confidentiality obligations, secure storage, and careful management of data sharing. While no system can be guaranteed completely secure, we take reasonable steps to protect the information we hold.

8. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. Subject to legal conditions and exemptions, these rights may include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to request that we limit how we use your data in certain situations.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to receive certain information in a structured, commonly used format where applicable.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

You also have the right to raise a concern with the relevant data protection supervisory authority if you believe your data has been handled unlawfully. We encourage customers to contact us first so we can address any issue promptly.

9. Marketing Communications

We may send service-related communications that are necessary for bookings, updates, or administration. Where permitted, we may also send limited marketing communications. If marketing is based on consent, you may opt out at any time. If marketing is based on legitimate interests, you still have the right to object.

10. Children’s Data

Our services are intended for adults and business customers. We do not knowingly collect personal data from children unless it is incidentally included in service arrangements and is necessary for the provision of the service. Where relevant, we handle such data in a lawful and careful manner.

11. International Transfers

If any personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place to protect the information in accordance with applicable data protection law.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, business practices, or service arrangements. Any revised version will apply from the date it is published. We encourage customers to review this policy periodically to stay informed about how their data is used.

13. Summary of Our Commitment

At Man With Van Crystalpalace, we only process personal data that is necessary, relevant, and handled with care. We use it to provide reliable services, maintain compliance, and support our customers in the Crystal Palace area. We remain committed to transparency, fairness, and respecting your rights under data protection law.

This policy applies to all Man With Van Crystalpalace customers in area and is intended to ensure that personal data is handled responsibly and lawfully.