Privacy Policy - Crystalpalace Man And Van

This Privacy Policy explains how Crystalpalace Man And Van collects, uses, stores, and protects personal data when providing services to customers in our area. It applies to all Crystalpalace Man And Van customers in the area, including individuals, households, landlords, tenants, students, and business clients who request removals, deliveries, furniture transport, packing support, or related services.

We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy is intended to help you understand what information we collect, why we collect it, how long we keep it, who may process it on our behalf, and what rights you have over your personal data.

1. Personal Data We Collect

We only collect personal data that is necessary to provide our services, manage bookings, communicate effectively, and meet legal or contractual obligations. The information we may collect includes:

Identity information such as your name and, where relevant, the name of a business or organisation.
Contact details including telephone number, email address, and service address.
Booking and service details such as move date, collection and delivery locations, access information, item descriptions, and any special handling requirements.
Payment-related information such as billing records and transaction details. We do not need to keep more payment data than is necessary for accounting and record-keeping purposes.
Correspondence including emails, messages, call notes, and service-related communications.
Customer preferences such as requested times, service instructions, or notes about fragile items.
Technical information if you interact with our digital systems, such as device or usage information collected for security and service improvement purposes.

We may also receive data from third parties where necessary to carry out a booking or deliver services, for example from estate agents, landlords, storage providers, or another person arranging a move on your behalf. In those cases, we will only use the information that is relevant to the service.

2. How We Use Personal Data

Crystalpalace Man And Van uses personal data for the following purposes:

To provide quotations and confirm bookings.
To plan, deliver, and manage removals or transport services.
To communicate about arrival times, access arrangements, and service updates.
To issue invoices, process payments, and keep financial records.
To respond to enquiries, complaints, or claims.
To maintain internal records and improve service quality.
To comply with legal, tax, accounting, or insurance obligations.
To protect our business, staff, and customers from fraud, misuse, or security risks.

We do not use personal data for purposes that are incompatible with those described in this policy without first informing you and, where required, obtaining a valid lawful basis.

3. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis to process personal data. Depending on the circumstance, Crystalpalace Man And Van relies on one or more of the following lawful bases:

Contract

We process personal data where it is necessary to perform a contract with you or to take steps at your request before entering into a contract. This includes providing quotes, confirming bookings, moving items, and arranging delivery or collection.

Legal Obligation

We may process and retain certain data to meet legal obligations, including tax law, accounting rules, insurance requirements, and record-keeping duties.

Legitimate Interests

We may process data where it is necessary for our legitimate interests, provided your rights and interests do not override those interests. This may include managing customer relationships, improving operations, maintaining security, preventing fraud, handling disputes, and keeping business records.

Consent

In limited circumstances, we may rely on consent, for example where we use data for a purpose that requires your permission. If consent is used, you may withdraw it at any time. Withdrawal of consent will not affect the lawfulness of processing already carried out.

We do not rely on consent where another lawful basis is more appropriate.

4. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, including to satisfy legal, accounting, insurance, or reporting requirements. Retention periods may vary depending on the type of data and the nature of the service.

Booking and service records are generally kept for a reasonable period after completion of the job to manage queries, disputes, and customer support.
Invoices, payment records, and tax-related documents are retained for the period required by law.
Correspondence may be retained for as long as needed to document the service and resolve issues.
Information no longer needed is securely deleted, anonymised, or archived in a controlled manner.

Where data is stored electronically, we apply access controls and review records periodically to ensure they are not kept longer than necessary. We aim to retain data only for the minimum period required to meet our operational and legal needs.

5. Processors and Data Sharing

We may share personal data with trusted third-party service providers who process information on our behalf. These are known as processors. Processors are only permitted to use data according to our instructions and must protect it appropriately.

Examples of processors or third parties may include:

Booking and administrative service providers.
Accounting, invoicing, and bookkeeping systems.
Payment processing providers.
IT support, cloud storage, and data security services.
Insurance providers and claims handlers where necessary.
Professional advisers such as legal or tax advisers.

We may also disclose data where necessary to comply with the law, enforce agreements, protect our rights, or respond to lawful requests from public authorities. We do not sell personal data.

Any processor used by Crystalpalace Man And Van is required to maintain appropriate safeguards and process data only for the specific purpose instructed by us.

6. International Transfers

Where personal data is transferred outside the UK, we will ensure appropriate safeguards are in place to protect it in line with data protection law. Such safeguards may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms. Where possible, we prefer to keep data within the UK or the UK-aligned service environment.

7. Security of Your Data

We take reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These may include access restrictions, secure storage, staff awareness, password controls, and data minimisation practices. While no system can be guaranteed to be completely secure, we work to reduce risk and to respond promptly to any suspected incident.

Our staff and contractors are expected to handle personal information confidentially and to use it only for legitimate business purposes.

8. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions and exemptions. They include:

The right of access to request a copy of the personal data we hold about you.
The right to rectification to request correction of inaccurate or incomplete data.
The right to erasure in certain circumstances, such as where data is no longer needed.
The right to restriction to ask us to limit the way we use your data in specific situations.
The right to object to processing based on legitimate interests or direct marketing, where applicable.
The right to data portability to receive certain data in a structured, commonly used format where the legal conditions are met.
The right to withdraw consent where processing is based on consent.

If you wish to exercise any of these rights, we will respond in line with applicable legal requirements. We may need to verify your identity before dealing with your request. In some cases, we may need to retain certain information despite a request if we are legally entitled or required to do so.

9. Children’s Data

Our services are generally intended for adults arranging removals or transport. We do not knowingly collect personal data from children except where it is incidental to a household move and necessary for service delivery. If we become aware that we have collected data from a child without an appropriate basis, we will take steps to delete or safeguard it as required.

10. Automated Decision-Making

We do not use personal data for automated decision-making that produces legal or similarly significant effects. Any assessments relating to quotes, scheduling, or service capacity are based on operational judgment and not solely on automated processing.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. The latest version will apply to the processing of personal data from the date it is published or otherwise made available. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

12. Summary of Our Commitment

Crystalpalace Man And Van respects your privacy and is committed to protecting the personal data of every customer in our area. We collect only the information needed to provide our services, use it only where we have a lawful basis, keep it only for as long as necessary, and share it only with trusted processors or where required by law. We also recognise and support your data protection rights.

This Privacy Policy applies to all Crystalpalace Man And Van customers in area.