Privacy Policy - Removals Crystal Palace

This Privacy Policy explains how Removals Crystal Palace collects, uses, stores, shares, and protects personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to all Removals Crystal Palace customers in the area, including individuals and businesses who request, book, manage, or receive removal services from us.

We are committed to handling personal information fairly, lawfully, and transparently. This policy sets out what data we collect, why we collect it, the lawful bases we rely on, how long we keep it, the third parties who may process it on our behalf, and the rights available to you under data protection law.

1. Who We Are

Removals Crystal Palace provides removal and related moving services to customers in Crystal Palace and surrounding areas. In the context of data protection law, we are the data controller for the personal data we collect and use in connection with our services. This means we determine the purposes and means of processing your personal information.

We take our responsibilities seriously and aim to keep your information secure, limited to what is necessary, and used only for legitimate business and legal purposes.

2. Personal Data We Collect

We may collect and process the following categories of personal data depending on the service requested and how you interact with us:

Identity data such as your name, title, and business name where relevant.
Contact data such as address, email address, and telephone number.
Service information including moving addresses, access details, inventory lists, delivery instructions, and service preferences.
Payment data such as payment confirmations, billing details, and transaction records. We do not store full card details where payment is processed securely by a payment provider.
Communication data including enquiries, complaints, feedback, and correspondence.
Technical data such as IP address, browser type, device information, and usage data if you interact with our digital systems.
Contract and booking data such as quotes, booking history, service dates, and records of services provided.
Special category data only where you voluntarily provide it and where it is necessary for a specific service need, for example accessibility information. We will only process this where permitted by law and with appropriate safeguards.

We only collect data that is relevant and necessary for the work we do. We do not knowingly collect more information than is needed.

3. How We Use Your Data

We use your personal data for the following purposes:

To provide quotations, manage bookings, and perform removal services.
To communicate with you about your enquiry, booking, or service updates.
To arrange logistics, allocate staff, and coordinate delivery or collection.
To process payments, issue invoices, and manage accounts.
To record complaints, resolve disputes, and maintain service quality.
To comply with legal, tax, accounting, and regulatory obligations.
To protect our business, staff, and customers from fraud, misuse, or security incidents.
To improve our services, internal processes, and customer experience.

Where required, we may also use your data to defend or establish legal claims. We will always ensure that any use of personal data remains proportionate and consistent with the purpose for which it was collected.

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for processing your personal data. Depending on the situation, we rely on one or more of the following:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes providing quotes, managing bookings, delivering removal services, and handling payment and service administration.

Legal Obligation

We may process personal data where it is necessary to comply with legal requirements, including accounting, tax, insurance, and record-keeping obligations.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This may include service improvement, fraud prevention, staff training, and internal administration.

Consent

Where we rely on consent, for example for certain optional communications or the processing of any special category data you choose to provide, you may withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

Vital Interests

In rare cases, we may process data to protect someone’s vital interests, such as in an emergency situation.

5. Data Sharing and Processors

We may share your personal data with trusted third parties where necessary for the operation of our business and the delivery of our services. These third parties act as processors when they process data on our behalf and under our instructions.

Examples of processors and service providers may include:

IT and cloud storage providers.
Booking, invoicing, and administrative software providers.
Payment processing services.
Professional advisers such as accountants, auditors, or legal advisers.
Subcontracted removal teams or logistics partners where required to complete a service.
Customer communication tools, subject to appropriate controls.

We only engage processors who provide sufficient guarantees that they will implement appropriate technical and organisational measures to protect your data. We require them to process personal information only in accordance with our instructions and applicable data protection law.

In some circumstances, we may also disclose data to independent controllers, such as insurers, regulators, law enforcement, or government bodies where required by law or necessary to establish, exercise, or defend legal rights.

6. International Transfers

Where any processor or service provider stores or accesses data outside the UK, we will ensure appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or other approved transfer mechanisms. We take reasonable steps to ensure your information receives an equivalent level of protection.

7. Retention of Personal Data

We keep personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, and reporting requirements. Retention periods vary depending on the type of information and the reasons for holding it.

Typical retention periods may include:

Customer and booking records: retained for the duration of the service relationship and for a reasonable period afterwards for business administration and dispute handling.
Financial and tax records: kept for the period required by law, which is often up to six years.
Complaints and correspondence: retained as long as needed to resolve issues and maintain business records.
Technical logs: retained for a limited period for security and operational purposes.

When data is no longer required, we will securely delete, destroy, or anonymise it.

8. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These measures may include access controls, secure systems, staff confidentiality obligations, and data minimisation practices. While no system can be guaranteed completely secure, we work to maintain a high standard of protection and review our safeguards regularly.

9. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These may include:

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete data.
Right to erasure – you can request deletion of your data in certain circumstances.
Right to restriction – you can ask us to limit processing in certain situations.
Right to object – you can object to processing based on legitimate interests.
Right to data portability – you may request transfer of certain data where processing is based on consent or contract and carried out by automated means.
Right to withdraw consent – where we rely on consent, you can withdraw it at any time.

You also have the right to raise concerns with the UK Information Commissioner’s Office (ICO) if you believe your data rights have been violated. We encourage you to contact us first so that we can try to resolve the matter.

10. Automated Decision-Making

We do not use fully automated decision-making that produces legal or similarly significant effects on individuals. If this changes in the future, we will update this policy and explain your rights where relevant.

11. Children’s Data

Our services are not directed to children, and we do not intentionally collect personal data from minors unless it is incidental to providing a service requested by an adult customer. Where such data is collected, it will be processed only where lawful and necessary.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data processing practices. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically to stay informed about how we handle personal data.

13. Summary of Our Commitment

Removals Crystal Palace is committed to protecting the privacy of every customer in the area. We collect only the data we need, use it for clear and lawful purposes, share it only with trusted processors or where required by law, and keep it only for as long as necessary. We respect your rights and aim to provide a transparent, secure, and compliant service at every stage.

By using our services, you acknowledge that your personal data may be processed as described in this Privacy Policy.