Privacy Policy - Man And A Van Ruislip

This Privacy Policy explains how Man And A Van Ruislip collects, uses, stores, shares, and protects personal data. It applies to all Man And A Van Ruislip customers in the area, including individuals who request quotes, book services, communicate with us, or otherwise use our moving and transport services. We are committed to handling personal data in a lawful, fair, transparent, and secure manner in line with the UK GDPR and the Data Protection Act 2018.

By using our services, you acknowledge that your personal information may be processed as described in this policy. We only collect data that is relevant and necessary for the provision and management of our services, and we take steps to ensure that your information is kept accurate, confidential, and protected from misuse.

1. Information We Collect

We may collect and process various types of personal data depending on how you interact with us. This may include:

Identity information such as your name and title.
Contact details such as address, email address, and telephone number.
Booking information including service date, property access details, inventory information, and move requirements.
Payment and billing information where needed to process invoices and manage transactions.
Communication records such as enquiries, complaints, service updates, and correspondence.
Service preferences and information you provide about special handling, packing, storage, or access needs.
Technical information if you interact with our digital systems, such as IP address, device type, browser type, and usage logs, where applicable.

We may also collect information from third parties where this is necessary to perform our services, for example from estate agents, landlords, property managers, or payment providers. Where we receive information from another source, we will handle it in accordance with this Privacy Policy.

2. How We Use Personal Data

We use personal data for the following purposes:

To provide quotes, schedule jobs, and deliver moving services.
To verify instructions, confirm bookings, and manage service delivery.
To communicate with customers about arrangements, changes, or service issues.
To process payments, issue invoices, and manage accounts.
To maintain records of services provided and manage customer relationships.
To improve our operations, service quality, and customer experience.
To handle complaints, disputes, and claims.
To meet legal, tax, accounting, and regulatory obligations.
To protect against fraud, misuse, and security incidents.

We only use personal data in ways that are compatible with the reason it was collected, unless we reasonably determine that a new lawful basis applies. We do not sell personal data.

3. Lawful Basis for Processing

We process personal data under one or more of the following lawful bases:

Contract: when processing is necessary to enter into or perform a contract with you, such as arranging and completing a move.
Legitimate interests: when processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include managing bookings, improving services, preventing fraud, and maintaining secure operations.
Legal obligation: when processing is required to comply with applicable laws, including tax, accounting, insurance, or regulatory requirements.
Consent: where we rely on your consent for specific optional processing, we will ask for it clearly and you may withdraw it at any time.

If we process special category data or any highly sensitive information, we will do so only where lawful grounds permit and where the information is necessary for a legitimate purpose connected with our services or legal obligations. In most cases, we do not intentionally collect special category data.

4. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, insurance, and record-keeping requirements. Retention periods may vary depending on the type of information and the context in which it was collected.

In general:

Booking and service records may be kept for a reasonable period to manage aftercare, disputes, and business records.
Financial records may be retained for the period required by law.
Correspondence and complaint records may be kept for as long as needed to resolve issues and demonstrate compliance.
Information collected with consent will be kept until consent is withdrawn, unless another lawful basis applies.

When personal data is no longer required, we will securely delete, anonymise, or archive it in line with our retention procedures.

5. Sharing and Processors

We may share personal data with trusted third parties where necessary for service delivery, business operations, or legal compliance. These third parties may act as processors on our behalf and are only permitted to process data according to our instructions and under appropriate confidentiality and security obligations.

Examples of processors and service providers may include:

Payment processors to handle card or electronic payments.
Accounting and bookkeeping providers to support financial administration.
IT and system providers to host, maintain, or secure operational systems.
Communication tools and messaging services used to manage customer contact and service updates.
Insurance, legal, or claims support providers where necessary to deal with disputes or obligations.

We may also disclose data to authorities, regulators, courts, or law enforcement where required by law or where disclosure is necessary to protect our rights, customers, or the public.

We do not permit processors to use personal data for their own independent purposes. Any third party handling data on our behalf must implement appropriate technical and organisational measures to protect it.

6. International Transfers

Where personal data is transferred outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect the data in accordance with applicable law. Such safeguards may include adequacy regulations, standard contractual clauses, or other approved transfer mechanisms.

7. Data Security

We take reasonable and proportionate steps to protect personal data from unauthorised access, loss, disclosure, alteration, or destruction. These measures may include access controls, secure storage, staff confidentiality obligations, and operational procedures designed to reduce risk.

While no system can be guaranteed to be completely secure, we continually review our security practices and aim to maintain a level of protection appropriate to the nature of the data we process.

8. Your Rights

Under data protection law, you have rights in relation to your personal data. Depending on the circumstances, these may include:

The right of access to obtain a copy of your personal data.
The right to rectification to correct inaccurate or incomplete data.
The right to erasure in certain circumstances, also known as the right to be forgotten.
The right to restriction of processing in certain situations.
The right to object to processing based on legitimate interests or direct marketing.
The right to data portability for data processed by automated means and based on consent or contract, where applicable.
The right to withdraw consent where processing relies on consent.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office if you believe your data protection rights have been infringed. We encourage you to raise any concerns with us first so that we can address them promptly.

9. Exercising Your Rights

When you make a rights request, we may need to verify your identity before responding. This helps us protect your information and ensure that we only disclose data to the correct person. We aim to respond within the time limits set by law, unless the request is complex or numerous.

There is no fee for making a rights request in most cases. However, if a request is manifestly unfounded or excessive, we may decline it or charge a reasonable fee where permitted by law.

10. Marketing and Communications

We may send service-related communications where necessary to fulfil a booking or manage a customer relationship. These are not marketing communications. If we ever send optional promotional messages, we will only do so where permitted by law and, if required, with your consent.

You can object to direct marketing at any time. Where you do so, we will stop using your personal data for that purpose.

11. Children’s Data

Our services are not directed at children, and we do not knowingly collect personal data from children except where necessary as part of a household move or related service and only when provided by an adult with authority to do so. If we become aware that we have collected data improperly, we will take appropriate steps to delete it.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or operational needs. Any updated version will apply from the date it is made available. We encourage customers to review this policy periodically to stay informed about how we handle personal data.

13. Scope of This Policy

This policy applies to all Man And A Van Ruislip customers in area and covers data processing connected with enquiries, bookings, service delivery, administration, and support. By using our services, you confirm that you have read and understood the manner in which we process personal data as described above.

Summary of our approach: we collect only necessary information, use it for clear and lawful purposes, keep it only for as long as needed, share it carefully with appropriate processors, and respect your rights under data protection law.