Privacy Policy - Man With Van Upper Walthamstow

This Privacy Policy explains how Man With Van Upper Walthamstow collects, uses, stores, shares, and protects personal data. It applies to all Man With Van Upper Walthamstow customers in the area, including anyone who enquires about, books, receives, or pays for our moving and van services. We are committed to handling personal information in a lawful, fair, and transparent manner in accordance with the UK GDPR and the Data Protection Act 2018.

We only process personal data where there is a clear and valid reason to do so. We also aim to keep the information we hold accurate, relevant, and secure, and to keep it only for as long as necessary.

1. Personal Data We Collect

We may collect the following types of personal data when you contact us, request a quote, make a booking, or use our services:

Identity details: name, title, and any business name you provide.
Contact details: address, email address, and telephone number.
Service details: moving date, collection and delivery addresses, property access information, inventory details, parking notes, and special handling instructions.
Payment information: billing details, payment status, and transaction references. We do not store card details unless this is necessary through a secure payment provider.
Communication records: emails, messages, call notes, complaint details, and any feedback you give.
Website and technical data: if you interact with online forms or digital communications, we may collect basic technical information such as IP address, device type, browser type, and usage logs for security and performance purposes.
Service protection data: records that help us prevent fraud, misuse, or legal claims, such as proof of identity where required and job documentation.

We do not seek to collect sensitive personal data unless it is necessary for a particular service or legal obligation. If such data is needed, we will only process it where the law allows and where it is appropriate to do so.

2. How We Use Your Data

We use personal data for the following purposes:

to provide quotes and manage bookings;
to plan and deliver moving, loading, unloading, transport, and related services;
to communicate about schedules, access arrangements, delays, or service changes;
to issue invoices, process payments, and maintain financial records;
to respond to questions, complaints, and claims;
to improve our services, operations, and customer experience;
to maintain business records and comply with legal, tax, and insurance obligations;
to protect our business, staff, and customers from misuse, fraud, or unlawful activity;
to defend or establish legal rights where required.

We only use your data for purposes that are compatible with the reason it was originally collected, unless we obtain your consent or have another lawful reason to do so.

3. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis to process personal data. Depending on the activity, our lawful bases may include the following:

Contract

We process personal data when it is necessary to perform a contract with you or to take steps at your request before entering into a contract. This includes providing quotes, arranging services, managing bookings, and completing the move.

Legal Obligation

We may process and retain certain information to comply with tax laws, accounting rules, transport-related requirements, insurance duties, and other legal obligations.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided these interests are not overridden by your rights and freedoms. This may include service improvement, record keeping, fraud prevention, customer support, and protecting our legal interests.

Consent

In limited situations, we may rely on your consent, for example where consent is needed for certain optional communications or processing activities. Where consent is used, you may withdraw it at any time.

4. Sharing and Processors

We may share personal data with trusted third parties where necessary to operate our business and deliver our services. These third parties act as processors or independent controllers depending on the circumstances. We only share the minimum data required and take steps to ensure appropriate safeguards are in place.

Examples of processors and service providers may include:

IT and cloud hosting providers who support data storage, email systems, and internal business operations;
payment service providers who handle secure payment processing;
accountants and bookkeeping services who assist with financial records and tax compliance;
customer communication tools used to manage enquiries and service updates;
insurance providers, legal advisers, and claim handlers where needed to manage risk or legal matters;
subcontracted movers or logistics partners where required to complete a booked service.

Where processors act on our behalf, they are required to follow our instructions, keep data confidential, and use appropriate security measures. They must not use your personal data for their own purposes unless they are acting as an independent controller and have a lawful basis to do so.

We may also disclose data if required by law, court order, regulatory request, or where necessary to protect the rights, property, or safety of our business, our staff, our customers, or others.

5. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, including to meet legal, accounting, tax, and insurance obligations. Retention periods depend on the type of record and the reason it is held.

Quotes and booking enquiries: retained for a reasonable period to manage follow-up, disputes, and business records.
Customer and service records: retained for as long as needed to provide services and handle post-service issues.
Invoices and financial records: retained in line with legal and accounting requirements.
Complaints and claims: retained for the period necessary to resolve the issue and defend legal claims.
Technical and security logs: retained for limited periods unless needed longer for an investigation or legal purpose.

When data is no longer required, we will securely delete, anonymise, or archive it where appropriate. We do not keep personal data indefinitely.

6. Data Security

We use appropriate technical and organisational measures to protect personal data against accidental loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures may include access controls, secure storage, staff confidentiality duties, and careful selection of processors. While no system is completely secure, we work to reduce risk and respond promptly to any suspected security incident.

7. Your Rights

As a data subject under UK GDPR, you have certain rights regarding your personal data. These rights are not absolute and may be subject to legal limits, but we will always assess each request carefully and respond in accordance with the law.

Right of access: you may request a copy of the personal data we hold about you.
Right to rectification: you may ask us to correct inaccurate or incomplete data.
Right to erasure: you may request deletion of your data in certain circumstances.
Right to restriction: you may ask us to limit how we use your data in specific situations.
Right to object: you may object to processing based on legitimate interests or direct marketing.
Right to data portability: where applicable, you may request transfer of certain data in a structured format.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond within the time limits required by law and may need to verify your identity before taking action. We may retain certain data where we have a legal obligation or another lawful reason to keep it.

8. International Transfers

If any of our processors store or access data outside the UK, we will ensure that suitable safeguards are in place to protect your information. This may include the use of approved transfer mechanisms and contractual protections where required by law.

9. Marketing Communications

We will only send marketing communications where permitted by law. If you choose to receive them, you can opt out at any time. Even if you stop marketing messages, we may still contact you about active bookings, invoices, service issues, or legal matters.

10. Children’s Data

Our services are intended for adults and business customers arranging moving services. We do not knowingly collect personal data from children unless it is necessary in connection with a service arrangement and handled appropriately. If you believe we have collected such data incorrectly, please let us know so we can review and address the matter.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or how we handle personal data. Any revised version will apply from the date it is published or otherwise communicated. We encourage customers in the area to review this policy periodically so they remain informed about how their data is used.

12. Fair and Transparent Processing

We are committed to processing personal data fairly and transparently. This means we will only collect data that is relevant to the services we provide, use it for clear and lawful purposes, and respect the rights of every individual whose data we hold. Man With Van Upper Walthamstow aims to maintain trust by keeping personal information secure, accurate, and appropriately limited.

By using our services, making an enquiry, or providing your information to us, you acknowledge that your personal data will be handled in accordance with this Privacy Policy and applicable data protection laws.