Privacy Policy - Man With Van Crystal Palace

This Privacy Policy explains how Man With Van Crystal Palace collects, uses, stores, shares, and protects personal data in connection with our removal and man-and-van services. It applies to all Man With Van Crystal Palace customers in the area, including people who request quotes, make bookings, receive services, or otherwise interact with us in relation to our moving and transport services.

We are committed to handling personal data in a way that is fair, transparent, secure, and lawful under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains your rights and how we meet our obligations as a data controller.

1. Personal Data We Collect

We collect only the information necessary to provide our services, manage our business, and comply with legal obligations. The personal data we may collect includes:

Identity details such as your name and title;
Contact information such as telephone number, email address, and service address;
Booking details including move dates, property access information, inventory, and service preferences;
Payment and billing information where needed to process invoices or record transactions;
Communication records including emails, messages, notes from calls, and service-related correspondence;
Operational information such as parking restrictions, item descriptions, floor levels, and delivery instructions;
Complaint and claims information if you raise a concern about our service;
Technical data such as basic device or website usage information if you contact us through digital channels.

We do not intentionally collect special category personal data unless it is necessary and you choose to provide it, or it is required for a specific service request or legal reason. If such data is provided, it is treated with additional care and only processed where lawful.

2. How We Use Your Data

We use personal data for the following purposes:

To provide quotations and assess moving requirements;
To arrange and deliver removal services;
To communicate about bookings, changes, delays, or service issues;
To process payments, issue invoices, and maintain records;
To handle customer support requests and complaints;
To protect against fraud, misuse, or security incidents;
To improve our services and internal operations;
To comply with legal, tax, accounting, and insurance obligations.

We only use your personal data for the purpose for which it was collected, unless we reasonably consider that we need to use it for another compatible purpose and there is a lawful basis to do so.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each type of processing. The lawful bases we rely on include:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes taking booking details, arranging the move, confirming service requirements, and handling payment-related matters.

Legal Obligation

We may process and retain data to meet legal and regulatory obligations, including accounting, tax, insurance, and record-keeping requirements.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided your interests and fundamental rights do not override those interests. This may include managing customer relationships, preventing fraud, improving service quality, and maintaining internal administration. When we rely on legitimate interests, we consider the impact on your privacy and only process data that is relevant and proportionate.

Consent

In limited cases, we may rely on your consent, for example if you agree to a specific type of communication or optional processing. Where consent is used, you have the right to withdraw it at any time.

Vital Interests

In rare circumstances, we may process personal data to protect someone’s vital interests, such as in an emergency involving health or safety.

4. Sharing Your Data and Processors

We may share personal data with trusted third parties, but only where necessary and only for legitimate business purposes. These parties act as processors or independent controllers depending on their role.

Examples of processors and service providers may include:

Payment processors used to handle card or bank payments;
Accounting and bookkeeping providers used for invoicing and financial records;
IT and cloud storage providers used to securely store and manage records;
Communication service providers used to manage emails or message delivery;
Insurance, legal, or dispute-handling professionals where necessary for claims or compliance;
Subcontracted service partners assisting with fulfilment of a booked move, where relevant.

We require processors to handle personal data securely, confidentially, and only according to our instructions. We do not sell your personal data. We do not share more information than is needed for the task being performed.

Where data is shared with independent third parties, such as tax authorities, insurers, or legal advisers, those organisations will process your data under their own legal duties and privacy arrangements.

5. Data Retention

We keep personal data only for as long as necessary for the purposes described in this policy, including to satisfy legal, accounting, insurance, and operational requirements. Retention periods depend on the nature of the information and why it is held.

Quotation and enquiry data may be kept for a limited period to manage follow-up requests and business records;
Booking and service records may be retained for several years to meet contractual, accounting, and complaint-handling needs;
Financial and invoice records are usually kept for the period required by tax and accounting law;
Complaint or claims records may be retained longer if needed to resolve disputes or defend legal claims.

When personal data is no longer needed, we securely delete, destroy, or anonymise it. We do not keep data indefinitely unless there is a lawful reason to do so.

6. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures may include access controls, secure storage, restricted permissions, and careful management of records. While no system can be guaranteed completely secure, we work to reduce risks and respond promptly to any incident.

7. International Transfers

If personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place to protect it in accordance with data protection law. This may include using approved contractual clauses or relying on adequacy decisions where available.

8. Your Rights

As a data subject, you have rights in relation to your personal data. Depending on the circumstances, these rights may include:

Right of access — to request a copy of the personal data we hold about you;
Right to rectification — to ask us to correct inaccurate or incomplete information;
Right to erasure — to request deletion of your data in certain circumstances;
Right to restriction — to ask us to limit how we use your data in certain situations;
Right to data portability — to request transfer of certain data to you or another provider;
Right to object — to object to processing based on legitimate interests or direct marketing;
Right to withdraw consent — where processing is based on consent;
Right to complain — to raise concerns with the UK data protection authority if you believe your rights have been infringed.

Some rights are not absolute and may be limited where there is a legal obligation or a legitimate reason to continue processing. We will always review requests carefully and respond in line with the law.

9. How to Exercise Your Rights

If you wish to exercise any of your rights, you can make a request by contacting us through our usual customer service channels. We may need to verify your identity before responding. We aim to handle requests without undue delay and within the time limits set by law.

10. Children’s Data

Our services are not directed at children, and we do not knowingly collect personal data from children except where it is necessary for the provision of services and handled appropriately by an adult customer or authorised representative.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or our data handling practices. The latest version will apply to your relationship with Man With Van Crystal Palace customers in the area. We encourage you to review it periodically so you remain informed about how your data is used.

12. Summary of Our Commitment

Man With Van Crystal Palace is committed to using personal data responsibly and only when necessary. We collect limited information, use it for clear and lawful purposes, retain it for appropriate periods, and share it only with trusted processors or where required by law. We respect your rights and aim to handle all personal data with care, confidentiality, and GDPR-compliant practices.

Effective for all Man With Van Crystal Palace customers in the area.