Privacy Policy - Man And A Van Westhampstead

This Privacy Policy explains how Man And A Van Westhampstead collects, uses, stores, shares, and protects personal data. It applies to all Man And A Van Westhampstead customers in the area, including individuals, households, landlords, tenants, and businesses that request or receive our moving, delivery, collection, disposal, or related services.

We are committed to handling personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and other applicable privacy laws. This policy is written to be clear and transparent about what happens to personal information when you interact with us.

1. Who We Are

Man And A Van Westhampstead provides removal and transport services, including single-item moves, furniture transport, same-day collections, and related logistics support. In the course of providing these services, we may act as a data controller for personal data we determine how and why to process. This means we decide the purposes and methods of processing your information for business administration, customer communication, booking, invoicing, and service delivery.

2. Personal Data We Collect

We only collect personal data that is relevant and necessary for operating our services, managing customer relationships, and meeting legal obligations. The types of data we may collect include:

Identity information: name, title, and any business or household name you provide.
Contact details: phone number, email address, and service address.
Booking details: requested date and time, pickup and delivery locations, service type, item list, access notes, and special handling instructions.
Payment and billing information: invoicing details, payment confirmation, and records needed for accounting.
Correspondence records: messages, complaints, service updates, and notes from communications.
Technical information: basic website or device usage data if you submit an online enquiry form or otherwise interact digitally.
Operational data: photographs or inventory notes where needed to document items, condition, or service completion.

We do not intentionally collect special category data unless it is strictly necessary and you choose to provide it. Special category data includes information about health, religion, political views, ethnicity, or similar sensitive matters. If such data is inadvertently shared, we will only process it where a lawful basis applies and additional safeguards are in place.

3. How We Use Your Data

We use personal data to deliver our services effectively and lawfully. Typical uses include:

responding to enquiries and providing quotations;
arranging and confirming bookings;
planning routes and completing moving or delivery services;
issuing invoices, processing payments, and maintaining accounting records;
communicating service updates and scheduling changes;
handling complaints, claims, and customer support requests;
maintaining business records and improving service quality;
meeting legal, tax, insurance, and regulatory requirements;
protecting against fraud, misuse, or unauthorised access.

We process data only to the extent necessary for these purposes and apply the principle of data minimisation, meaning we do not collect more information than we need.

4. Lawful Basis for Processing

Under UK GDPR, we must identify a lawful basis for each processing activity. Depending on the circumstances, Man And A Van Westhampstead relies on one or more of the following lawful bases:

Contract

We process data when it is necessary to prepare for or perform a contract with you. This includes handling booking details, service addresses, payment arrangements, and communications required to complete your move or delivery.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. Examples include managing customer relationships, improving operations, preventing fraud, and maintaining service records.

Legal Obligation

We may process and retain data where required to comply with legal duties, including tax, accounting, insurance, employment, and regulatory obligations.

Consent

In limited circumstances, we may rely on your consent, for example where you voluntarily provide additional information not required for service delivery. Where consent is used, you may withdraw it at any time, without affecting processing already carried out before withdrawal.

Where special category data is involved, additional conditions under UK GDPR will apply, and we will only process such information where permitted by law.

5. Sharing and Processors

We may share personal data with trusted third parties who act as processors or independent controllers depending on the service they provide. These third parties are used only when necessary and under appropriate contractual or legal safeguards.

IT and hosting providers: for secure storage, system maintenance, email, and form handling.
Payment service providers: for taking and processing payments securely.
Accounting and bookkeeping providers: for invoicing, tax reporting, and financial administration.
Scheduling or communications providers: for booking management and customer messaging.
Insurance, legal, or professional advisers: where needed for claims handling, compliance, or advice.
Authorities or regulators: where disclosure is required by law or necessary to protect rights, property, or safety.

All processors are required to protect personal data, use it only on our instructions, and maintain confidentiality and security. We do not sell personal data.

6. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including any legal, accounting, or reporting requirements. Retention periods vary depending on the type of data and the context in which it is used.

Booking and service records: retained for a period reasonably required for business administration, customer care, and dispute resolution.
Invoices and financial records: retained for the period required by tax and accounting laws.
Correspondence and complaint records: retained for as long as needed to resolve issues and defend legal claims.
Technical or security logs: retained for a limited period needed for system protection and monitoring.

When data is no longer needed, we securely delete, anonymise, or archive it in accordance with our retention practices. We aim to avoid holding data indefinitely and review stored information regularly.

7. International Transfers

If any processor or service provider stores or accesses data outside the UK, we will take appropriate steps to ensure that your information remains protected. This may include using approved safeguards, contractual protections, or ensuring the destination country provides an adequate level of protection under applicable law.

8. Data Security

We take reasonable technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration, disclosure, or destruction. These measures may include access controls, secure systems, staff confidentiality obligations, and data minimisation practices.

However, no system is completely secure. While we work to protect your information, you should also take care when sharing personal data by email or other digital channels.

9. Your Rights

Depending on the circumstances and legal basis used, you may have the following rights under data protection law:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to ask us to correct inaccurate or incomplete data.
Right to erasure: to request deletion of your data in certain circumstances.
Right to restriction: to ask us to limit how we use your data in certain cases.
Right to object: to object to processing based on legitimate interests or direct marketing.
Right to data portability: to request transfer of data you provided to us, where applicable.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

These rights are not absolute and may be subject to legal exceptions. We will assess each request carefully and respond in accordance with applicable law.

10. Exercising Your Rights

If you wish to exercise any of your rights, we may need to verify your identity before responding. This is to protect your personal information and prevent unauthorised disclosure. We will respond within the time limits required by law unless your request is complex or numerous.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been breached. We encourage you to raise concerns with us first so that we can try to resolve them promptly.

11. Children’s Data

Our services are generally intended for adults arranging moving or transport services. We do not knowingly collect personal data from children except where it is incidental to a household service request and only where necessary for that service. If we become aware that we have collected child-related data without a lawful basis, we will take appropriate steps to delete or restrict it.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, business operations, or data protection practices. Any updates will apply from the date of publication or other stated effective date. We encourage customers to review this policy periodically to stay informed about how we protect personal data.

In summary: Man And A Van Westhampstead processes personal data fairly, transparently, and lawfully for service delivery, administration, and compliance purposes, while respecting your rights and keeping data only as long as needed.