Crystal Palace Man and Van Privacy Policy
This Privacy Policy explains how Crystal Palace Man and Van collects, uses, stores, and protects your personal data. It applies to all Crystal Palace Man and Van customers and prospective customers in our service area, as well as visitors who contact us about our services.
We are committed to safeguarding your privacy and handling your personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation and all applicable data protection laws.
Data Controller
Crystal Palace Man and Van is the data controller for the personal data described in this Privacy Policy. This means we determine the purposes and means of processing your personal data when you use our services or contact us.
Personal Data We Collect
We may collect and process the following categories of personal data, depending on how you interact with us:
Identification and contact details, such as your name, address, pick-up and drop-off addresses, and preferred contact methods.
Communication details, including the content of messages you send to us and our responses, for example when you request a quote, make a booking, ask a question, or provide feedback.
Service and booking information, such as the date and time of your move, type and size of the job, special instructions, and details necessary to provide man and van services.
Payment and transaction information, such as payment status, amounts, and dates. If payments are processed through third party payment providers, we may receive confirmation of payment but do not necessarily see full payment card details.
Technical and usage information, which may include basic information about how you access our website or online tools, such as device type, browser, and general usage information. This may be collected through standard server logs or similar technologies.
How We Collect Your Data
We collect personal data directly from you when you contact us, request a quote, make a booking, agree a contract, or communicate with us by phone, online, or in writing.
We may also collect data automatically when you visit our website or use any online forms or tools, for example through logs generated by our hosting environment or by using commonly used technologies that help operate and secure our website.
Lawful Bases for Processing
We process your personal data only where we have a lawful basis under data protection law. Depending on the context, we may rely on the following lawful bases:
Contract: We use your personal data to provide quotes, accept bookings, deliver man and van services, manage payments, and communicate with you about your booking or contract.
Legal obligation: We may process certain information to comply with legal, tax, accounting, or regulatory obligations, including record-keeping and responding to lawful requests from authorities.
Legitimate interests: We may process your data to manage and improve our services, respond to general enquiries, handle complaints or disputes, maintain security and prevent fraud, and keep basic business records, provided that your rights and interests do not override these purposes.
Consent: In limited situations where required by law, for example for certain types of marketing, we will ask for your consent before processing your data and will respect your choice if you later withdraw that consent.
How We Use Your Personal Data
We may use your personal data for the following purposes:
To provide quotes, manage enquiries, and confirm bookings for our man and van services.
To deliver our services, including planning routes, managing schedules, and carrying out moves or deliveries at the agreed time and place.
To communicate with you about your booking, including confirmations, updates, changes, and any issues that arise.
To manage payments, invoicing, receipts, and related financial records.
To respond to questions, feedback, and complaints, and to resolve disputes.
To maintain and improve our business operations, including internal administration, performance monitoring, staff training, and quality control.
To protect our rights, property, and safety, and the rights, property, and safety of our customers, staff, and third parties.
To comply with legal and regulatory requirements.
Data Sharing and Processors
We do not sell your personal data. However, we may share your personal data with trusted third parties where necessary for the purposes set out in this Privacy Policy, including:
Service providers and processors who support our operations, such as hosting providers, customer management systems, accounting or invoicing tools, and payment processing providers.
Professional advisers, such as accountants, legal advisers, or insurers, where necessary for legitimate business needs and to comply with legal obligations.
Public authorities, regulators, or law enforcement agencies, where we are required to do so by law, or where it is necessary to protect our rights or the rights of others.
Any third party involved in a business transfer, such as a merger, sale, or restructuring, in which case your data may be transferred as part of that transaction, subject to appropriate safeguards.
Where we use data processors, they act only on our instructions, are bound by contractual obligations to protect your data, and must not use it for their own purposes.
International Transfers
If we transfer personal data outside the United Kingdom or the European Economic Area, we will do so only where an adequate level of protection is in place, such as through adequacy regulations, standard contractual clauses, or other appropriate safeguards required by data protection law.
Data Retention
We keep your personal data only for as long as necessary for the purposes for which it was collected, and to meet legal, accounting, or reporting requirements.
In general, we retain booking and transaction records for a period required by tax and accounting rules. Communications related to enquiries, quotes, and complaints may be kept for a reasonable period to allow us to manage ongoing queries and to protect our legitimate interests in case of disputes.
When personal data is no longer required, we will securely delete it or anonymise it so that it can no longer be linked to you.
Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include limiting access to personal data to staff and service providers who need it for their role, using secure systems and processes where appropriate, and regularly reviewing our security practices.
While we take reasonable steps to protect your data, no system can be completely secure. You are responsible for taking sensible precautions when sharing personal information with us and when using any online tools.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exceptions. These rights may include:
Right of access: You can request a copy of the personal data we hold about you, together with information about how we process it.
Right to rectification: You can ask us to correct inaccurate or incomplete personal data.
Right to erasure: In certain circumstances, you can ask us to delete your personal data, for example where it is no longer needed for the purposes for which it was collected or where you withdraw consent and there is no other lawful basis for processing.
Right to restriction: You can ask us to restrict the processing of your data in certain situations, for example while we consider a correction request.
Right to data portability: Where processing is based on consent or contract and carried out by automated means, you may have the right to receive your data in a structured, commonly used, machine-readable format and to have it transmitted to another controller.
Right to object: You can object to processing based on our legitimate interests, including any direct marketing, where applicable. We will stop processing unless we have compelling legitimate grounds or need the data for legal claims.
Right to withdraw consent: Where we rely on your consent, you can withdraw it at any time. This will not affect the lawfulness of processing before consent was withdrawn.
Exercising Your Rights and Complaints
If you wish to exercise any of your data protection rights or have questions about how we handle your personal data, you can contact us using the details provided on our website or other communication channels.
You also have the right to lodge a complaint with the relevant data protection authority if you are unhappy with how we handle your data. We encourage you to contact us first so that we can try to resolve your concerns directly.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or how we process personal data. Any changes will be posted in the latest version of this Privacy Policy, and the updated policy will apply from the date it is published.
We recommend that you review this Privacy Policy periodically to stay informed about how we protect your personal data at Crystal Palace Man and Van.
