Privacy Policy - Removal Van Sutton

This Privacy Policy applies to all Removal Van Sutton customers in the Sutton area and sets out how personal data is collected, used, stored, shared, and protected in accordance with the UK GDPR and the Data Protection Act 2018. We are committed to handling personal information fairly, lawfully, and transparently. This policy explains what data we collect, why we collect it, how long we keep it, who may process it on our behalf, and the rights available to individuals whose data we hold.

1. Who this policy applies to

This policy applies to all customers, prospective customers, and service users in the Sutton area who enquire about, book, receive, or otherwise use our removal and related services. It also applies to individuals whose details are supplied to us by a customer, such as household members, building managers, or third parties involved in arranging a move.

2. Personal data we collect

We collect only the personal data needed to provide and manage our services effectively. Depending on your interaction with us, this may include:

Identity data: name, title, and any relevant business or household contact details.
Contact data: address, email address, telephone number, and moving location details.
Service data: information about your move, property access, inventory items, special handling needs, and preferred dates.
Payment and billing data: payment status, transaction records, and invoicing details. We do not keep unnecessary card details where payment providers process these securely.
Communication data: records of emails, calls, messages, quotes, complaints, and feedback.
Technical data: limited device or usage information where you interact with our systems, including basic logs for security and troubleshooting purposes.
Special category data: generally not required. If you voluntarily disclose health-related or other sensitive information so that we can make suitable arrangements, we will only process it where lawful and necessary.

We do not intentionally collect more information than is necessary. If you choose not to provide certain details, we may be unable to deliver part or all of the requested service.

3. How we use your personal data

We use personal data for the following purposes:

to provide quotations, schedule surveys, and arrange removals;
to manage bookings, logistics, access arrangements, and delivery coordination;
to communicate with you before, during, and after a service;
to process invoices, payments, refunds, and account records;
to respond to queries, complaints, and service issues;
to maintain safety, security, fraud prevention, and quality control;
to comply with legal, tax, insurance, and regulatory obligations;
to improve our operations, customer service, and service planning.

We do not sell your personal data. We also do not use your information for unrelated purposes without a lawful basis or without informing you where required.

4. Lawful basis for processing

Under the UK GDPR, we must have a lawful basis to process your personal data. Depending on the context, we rely on the following bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes providing quotes, making bookings, delivering removal services, and handling payment or service administration.

Legal obligation

We may process and retain certain records to comply with legal and regulatory duties, including taxation, accounting, insurance, and record-keeping requirements.

Legitimate interests

We may process data where it is necessary for our legitimate interests, provided your interests and rights do not override those interests. Examples include service improvement, internal administration, fraud prevention, security monitoring, and dispute management.

Consent

Where consent is required, such as for certain optional communications or the handling of particularly sensitive information in limited circumstances, we will ask for it clearly and you may withdraw it at any time.

Vital interests

In rare cases, we may process data where necessary to protect someone’s vital interests, for example if emergency circumstances arise during a move.

5. Data retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, insurance, and reporting requirements. Retention periods vary depending on the type of data and the nature of the service provided.

Enquiry and quotation records: kept for a limited period to manage follow-up, service administration, and dispute resolution.
Booking and service records: kept for the duration of the contract and for a reasonable period afterwards to address aftercare, claims, or complaints.
Financial and tax records: retained for the period required by law.
Correspondence and complaint records: kept as long as needed to resolve the matter and document outcomes.
Security and audit logs: retained only for a proportionate period necessary for monitoring and investigation.

When data is no longer needed, it is securely deleted, anonymised, or otherwise disposed of in line with our retention procedures. Retention is based on necessity and legal obligation, not convenience.

6. Processors and third-party sharing

We may share personal data with trusted processors and service providers who act on our instructions and are contractually bound to protect your data. These may include:

Payment providers who securely process transactions;
Accounting and bookkeeping providers who assist with financial records and compliance;
IT and cloud service providers who support data storage, security, and system maintenance;
Communication service providers used for email, telephone, or message handling;
Insurance or claims handlers where needed to manage incidents, damage, or liability;
Professional advisers such as legal or regulatory advisers where necessary;
Subcontractors or operational partners involved in delivering the removal service.

We may also disclose data where required by law, court order, or lawful request from public authorities. Where processors are used, we ensure appropriate safeguards are in place, including data processing agreements and security standards. Processors are only permitted to use personal data for the purposes we specify.

7. International transfers

Where any processor or system stores or accesses data outside the UK, we ensure appropriate protection measures are in place. This may include adequacy regulations, standard contractual clauses, or equivalent safeguards approved under applicable law.

8. Data security

We use reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, confidentiality obligations, and regular review of systems and processes. While no system is completely secure, we aim to maintain a level of protection appropriate to the risks involved.

9. Your rights

Individuals whose data we process have a number of rights under data protection law. These rights may be subject to conditions or exemptions depending on the circumstances. They include:

Right of access: to request a copy of the personal data we hold about you;
Right to rectification: to request correction of inaccurate or incomplete data;
Right to erasure: to request deletion of your data in certain situations;
Right to restriction: to ask us to limit how we use your data in certain cases;
Right to object: to object to processing based on legitimate interests or direct marketing;
Right to data portability: to receive certain information in a structured, commonly used format;
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time;
Right to complain: to raise concerns with the supervisory authority if you believe your data has been handled unlawfully.

We will respond to valid requests within the time limits required by law and may need to verify your identity before taking action. Exercising your rights will not normally affect the lawfulness of processing carried out before your request.

10. Children’s data

Our services are primarily intended for adults arranging removals. We do not knowingly collect children’s personal data unless it is incidentally provided as part of a household move and is necessary for the service. Where this occurs, we handle it carefully and only to the extent required.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in law, technology, or our business operations. The latest version will apply from the date it is published or otherwise communicated. We encourage customers in the Sutton area to review this policy periodically to stay informed about how we protect personal data.

12. Summary of our commitments

We collect only what we need, use it only for legitimate and lawful purposes, keep it for no longer than necessary, and share it only with processors and parties who help us deliver our services or meet legal obligations. Our approach is designed to respect privacy, maintain trust, and support the secure and lawful operation of Removal Van Sutton services.