Man and a Van Crystal Palace Privacy Policy
This Privacy Policy explains how Man and a Van Crystal Palace collects, uses, stores and protects personal data for all customers and prospective customers within our service area. We are committed to handling personal information in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018. This policy is intended to provide clear and transparent information about our data practices and your rights.
Scope of this Privacy Policy
This Privacy Policy applies to all Man and a Van Crystal Palace customers and prospective customers in our local operating area. It covers personal data obtained in connection with enquiries, quotations, bookings, removals, transportation, and any related services we provide. By contacting us, requesting a quote, or using our services, you acknowledge that your personal data will be processed in line with this policy.
Data Controller Responsibility
Man and a Van Crystal Palace is the data controller for the personal data it collects and uses about its customers. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing complies with applicable data protection laws.
Personal Data We Collect
We collect only the personal data that is necessary for us to provide our services, manage our relationship with you, and comply with our legal obligations. The types of personal data we may collect include:
Your identity details, such as your name and title.
Your contact details, such as your address, service addresses, and other location information needed to carry out collections and deliveries.
Your communication preferences and any information you voluntarily provide when contacting us, such as details of your move, access information, and special instructions.
Booking and contract information, such as dates and times of services, service history, payment status and invoices.
Limited financial information related to payments, such as records of payments made and method of payment. We do not store full payment card details when payments are processed through secure third-party payment providers.
Technical and usage data where relevant, such as device or browser information if you interact with our website, and logs relating to enquiries or forms you submit online.
How We Collect Personal Data
We collect personal data from you directly when you contact us by telephone, through our website or other online forms, or in person. We may also receive information when you interact with our advertising or social media content. In some situations, we may receive personal data about you from third parties, for example if another person books a removal or delivery on your behalf and provides your contact details for access and coordination.
Lawful Bases for Processing Your Data
We will only process your personal data where we have a lawful basis to do so under the UK GDPR. Depending on the specific processing activity, we rely on the following lawful bases:
Performance of a contract: We process your personal data when it is necessary to provide you with a quotation, to enter into a contract with you, and to deliver our man and van services, including managing bookings, logistical arrangements and customer support.
Compliance with legal obligations: We may process and retain certain information to comply with our legal and regulatory obligations, such as tax and accounting requirements or responding to lawful requests from public authorities.
Legitimate interests: We may process your personal data where it is necessary for our legitimate interests as a business, provided your interests and fundamental rights do not override those interests. These legitimate interests include managing our operations, improving our services, preventing and detecting fraud or misuse, and keeping records of our interactions with customers.
Consent: In some limited circumstances, we may ask for your consent to use your personal data for a specific purpose, such as certain forms of marketing or feedback requests. When we rely on consent, you can withdraw it at any time.
How We Use Your Personal Data
We use your personal data for the purposes described below, always in accordance with the lawful bases identified above:
To respond to your enquiries and provide quotations for man and van services in the Crystal Palace area.
To plan, manage and deliver removals, collections, deliveries and any related services you request.
To communicate with you about your bookings, including confirmations, reminders, amendments and service updates.
To manage our relationship with you, including handling feedback, queries and complaints.
To maintain accurate business and financial records, including invoices, payment records and service history.
To improve our services, operations and customer experience through analysis of service usage and feedback, using aggregated or minimised data wherever possible.
To protect our business, staff, vehicles and customers, including measures to prevent fraud, misuse and other unlawful activity.
Data Retention and Storage
We retain personal data only for as long as is necessary for the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements. When determining the appropriate retention period for personal data, we consider the nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, and our legal obligations.
As a general guide, operational records relating to quotations, bookings and service delivery are typically kept for a period aligned with local limitation periods and tax requirements, after which they are securely deleted or anonymised. Where we no longer need to retain information in an identifiable form, we will either remove personal identifiers or securely destroy the data.
Data Processors and Third Parties
In some cases we use third-party service providers to help us deliver our services and manage our business. These third parties act as data processors and process personal data on our behalf and under our instructions. Examples include:
IT and cloud service providers who host our systems, store data or provide communication tools.
Payment service providers who process payments for our services.
Professional advisers such as accountants who assist with our business and legal obligations.
Where we engage data processors, we ensure that appropriate contractual and technical safeguards are in place to protect your personal data and to ensure that it is used only in accordance with our instructions and applicable law. We do not sell your personal data to third parties.
International Data Transfers
Where any of our service providers are located outside the United Kingdom or the European Economic Area, or where data is otherwise transferred internationally, we will ensure that such transfers are carried out in compliance with applicable data protection laws. This may involve using standard contractual clauses or other recognised safeguards to protect your personal data.
Security of Your Personal Data
We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These measures include access controls, secure storage, minimisation of data collected, and regular review of our information handling practices. While no system can be completely secure, we aim to ensure that any personal data we hold is protected to a level appropriate to the risk.
Your Data Protection Rights
Under the UK GDPR, you have a number of rights in relation to your personal data. These rights apply subject to certain conditions and legal exemptions. Your rights include:
Right of access: You have the right to request confirmation that we process your personal data and to request a copy of the personal data we hold about you.
Right to rectification: You have the right to request that we correct any inaccurate or incomplete personal data relating to you.
Right to erasure: In certain circumstances, you have the right to request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected or where you withdraw consent and there is no other legal ground for processing.
Right to restriction of processing: You have the right to request that we restrict the processing of your personal data in certain situations, such as while we verify the accuracy of the data or consider an objection you have raised.
Right to data portability: Where processing is based on consent or contract and is carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine-readable format and to transmit that data to another controller.
Right to object: You have the right to object to processing of your personal data where we are relying on legitimate interests as our lawful basis, including any profiling related to those interests. We will stop processing unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or where processing is required for legal claims.
Right to withdraw consent: Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
Exercising Your Rights and Complaints
If you wish to exercise any of your data protection rights or have queries about how we handle your personal data, you can contact us using the details provided on our website or through our usual communication channels. We will respond to your request in accordance with legal time limits and may request additional information to verify your identity before acting on your request.
If you are not satisfied with our response or believe that your data protection rights have been infringed, you have the right to lodge a complaint with the relevant supervisory authority. In the United Kingdom, this is the Information Commissioner's Office. Further information about your rights and how to make a complaint is available from the supervisory authority.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or data protection best practice. Any updated version will be made available through our usual communication channels. We encourage you to review this policy regularly so that you remain informed about how we process and protect your personal data as a customer of Man and a Van Crystal Palace in our service area.
