Privacy Policy - Removals Crystalpalace

This Privacy Policy explains how Removals Crystalpalace collects, uses, stores, shares, and protects personal data in connection with our removal, packing, storage, and related services. It applies to all Removals Crystalpalace customers in the area, including individuals, households, landlords, tenants, and business clients who use our services. We are committed to handling personal data in a lawful, fair, transparent, and secure manner in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By engaging our services, requesting a quote, making an enquiry, or otherwise providing us with personal data, you acknowledge that we may process your information as described in this policy. We only collect and use the data necessary to provide our services, manage our business, and meet our legal obligations.

1. Information We Collect

We collect and process personal data that is relevant to the services we provide. Depending on the nature of your enquiry or booking, this may include:

Identity details, such as your name and title.
Contact details, such as address, email address, and telephone number.
Service information, including moving dates, property access details, inventory information, and service preferences.
Billing and payment information, such as invoice details and transaction records.
Correspondence, including messages, complaints, feedback, and booking communications.
Operational information, such as delivery instructions, survey notes, and any special handling requirements.

We may also collect limited technical information when you interact with our digital systems, such as device details or usage data, where necessary for security, fraud prevention, and service administration. We do not intentionally collect more data than is required for legitimate business purposes.

2. How We Use Your Data

We use personal data for the following purposes:

To provide quotations and respond to enquiries.
To plan, arrange, and carry out removals and associated services.
To manage contracts, invoices, payments, and service records.
To communicate with you about your booking, schedule, or service changes.
To handle complaints, claims, and customer support requests.
To maintain business records, security, and internal administration.
To comply with legal and regulatory obligations.
To prevent fraud, misuse, and unauthorised access to our systems or services.

We may also use personal data in a limited and proportionate way for business analysis, service improvement, and quality control. Where possible, we will use anonymised or aggregated information for these purposes.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process your personal data. The lawful bases we rely on include:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes preparing quotes, confirming bookings, arranging the move, issuing invoices, and delivering agreed services.

Legal Obligation

We may process your data where necessary to comply with legal obligations, including tax, accounting, insurance, and record-keeping requirements.

Legitimate Interests

We may process data for our legitimate interests where those interests are not overridden by your rights and freedoms. These interests include managing our business efficiently, preventing fraud, improving our services, maintaining security, and keeping accurate records. When we rely on legitimate interests, we ensure the processing is necessary and proportionate.

Consent

In some situations, we may rely on your consent, for example where we need to use optional information not essential to the service. If we rely on consent, you can withdraw it at any time. Withdrawal of consent will not affect processing that has already taken place lawfully.

4. Sharing Your Data and Processors

We may share personal data with trusted third parties who act as processors on our behalf or as independent controllers where appropriate. These parties are only permitted to use your data for the purposes we specify or where they have their own lawful basis.

Examples of processors or service providers may include:

Payment service providers for processing transactions and refunds.
Accounting and bookkeeping providers for financial administration and tax compliance.
IT and cloud storage providers for secure data hosting, backup, and system support.
Communication providers for sending emails, messages, or booking updates.
Insurance or claims support providers where required to assess or manage a claim.

We may also disclose personal data to law enforcement, regulators, courts, or other public authorities where required by law or where disclosure is necessary to protect our rights, customers, employees, or property.

Where processors are used, we take steps to ensure that appropriate data processing terms are in place, requiring them to protect personal data and process it only in accordance with our instructions and legal obligations.

5. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including satisfying legal, accounting, and reporting obligations. The retention period depends on the type of data and the reason for processing.

In general:

Customer and booking records are retained for the period needed to manage services and resolve disputes.
Financial and tax records are retained for the period required by law.
Communication records may be retained for service, support, and evidential purposes.
Where data is no longer required, it is securely deleted, anonymised, or archived in a controlled manner.

We regularly review retention needs and take reasonable steps to ensure data is not kept longer than necessary.

6. Security of Personal Data

We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and data minimisation practices. While we take data security seriously, no system can be guaranteed to be entirely secure, and we therefore encourage customers to share only the information needed for their service.

7. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These include:

Right of access ??? to request a copy of the personal data we hold about you.
Right to rectification ??? to ask us to correct inaccurate or incomplete data.
Right to erasure ??? to request deletion of your data in certain circumstances.
Right to restriction ??? to ask us to limit how we use your data in certain situations.
Right to object ??? to object to processing based on legitimate interests, including direct marketing where applicable.
Right to data portability ??? to receive certain data in a structured, commonly used format where applicable.
Right to withdraw consent ??? where processing is based on consent.

These rights are not absolute and may be subject to legal exceptions. We will assess each request carefully and respond in accordance with applicable law.

8. Exercising Your Rights

If you wish to exercise any of your rights, you should make a clear request to us with sufficient information to identify you and the data involved. We may need to verify your identity before acting on your request. We aim to respond within the statutory time limits and will keep you informed if additional information is needed.

Important: Some requests may not be fulfilled where we have a lawful reason to retain or continue processing the data, such as legal obligations or the establishment, exercise, or defence of legal claims.

9. Data Transfers and International Use

Where personal data is processed by third-party service providers outside the UK, we take steps to ensure that appropriate safeguards are in place to protect the data in accordance with applicable law. This may include approved contractual protections or other lawful transfer mechanisms. We remain responsible for ensuring that such transfers are handled securely and appropriately.

10. Children???s Data

Our services are generally intended for adults and business customers. We do not knowingly collect personal data from children unless it is necessary in connection with a service arrangement and is provided by an adult with authority to do so. If we become aware that we have collected data from a child without proper justification, we will take reasonable steps to delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or our internal practices. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their data is used.

12. Summary of Our Commitment

Removals Crystalpalace respects the privacy of every customer in the area and is committed to handling personal data responsibly. We will only collect data that is relevant and necessary, use it on a lawful basis, retain it for no longer than needed, and share it only with trusted processors or where required by law. We also recognise and support your rights under data protection law and will work to address your requests fairly and promptly.

This policy applies to all Removals Crystalpalace customers in area. If you use our services, your data will be processed in accordance with this Privacy Policy and applicable data protection legislation.