Privacy Policy - Crystalpalace Man And Van

This Privacy Policy explains how Crystalpalace Man And Van collects, uses, stores, shares, and protects personal data in connection with the services we provide. It applies to all Crystalpalace Man And Van customers in our service area, including individuals who request quotations, book removals or transport services, communicate with us, or otherwise interact with us in relation to our work. We are committed to handling personal information in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Crystalpalace Man And Van provides man and van, removals, transport, loading, unloading, and related moving services. In the context of this Privacy Policy, we act as the data controller for the personal data we collect and use for our own business purposes. This means we determine the purposes and means of processing your personal data.

2. Personal Data We Collect

We only collect personal data that is necessary for arranging, delivering, managing, and improving our services. The information we may collect includes:

Identity information such as your name and title.
Contact information such as telephone number, email address, and service address.
Booking details including the date, time, locations, property access information, item lists, and service requirements.
Payment and billing information where needed to process payments, issue invoices, or maintain accounting records.
Communication records including emails, call notes, messages, and any instructions you provide.
Service-related information such as inventory of items, special handling needs, parking restrictions, or access limitations.
Technical information if you contact us through digital channels, such as device information, IP address, or basic usage data where relevant to security and service administration.

In some situations, we may also collect limited information about third parties where you provide it to us for the purposes of the move, for example, a building manager, landlord, recipient, or authorised representative. Please make sure that you have permission to share their details with us.

3. How We Use Personal Data

We use personal data for the following purposes:

To provide quotations and respond to enquiries.
To plan, schedule, and carry out removal and transport services.
To communicate with you about bookings, service changes, delays, or updates.
To process payments, manage invoices, and maintain financial records.
To manage customer service, complaints, and dispute resolution.
To meet legal, regulatory, tax, and insurance obligations.
To maintain business records and protect our legitimate business interests.
To detect, prevent, and address fraud, misuse, or security incidents.

We will not use your data for purposes that are incompatible with the reasons it was collected, unless we have a lawful basis to do so and have informed you where required.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process your personal data. Depending on the situation, we rely on one or more of the following:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes providing quotations at your request, managing bookings, delivering services, and completing billing arrangements.

Legal Obligation

We may process and retain certain data to comply with legal obligations, such as tax, accounting, insurance, health and safety, and record-keeping requirements.

Legitimate Interests

We may use your data where it is necessary for our legitimate business interests, provided your interests and fundamental rights do not override those interests. Examples include managing customer relationships, improving our services, protecting against fraud, and maintaining secure business operations.

Consent

In limited cases, we may rely on your consent, for example where you request marketing communications or agree to optional uses of your data. When consent is used, you may withdraw it at any time.

5. Data Sharing and Processors

We may share personal data with trusted third parties where necessary to deliver our services, operate our business, or comply with legal obligations. These third parties act as processors or, in some cases, independent controllers. We require appropriate safeguards and contract terms where processors handle personal data on our behalf.

Examples of processors and recipients may include:

Payment providers who handle card or electronic payments.
Accounting and bookkeeping providers who support invoicing, tax, and financial records.
IT and cloud service providers who host email, storage, communication, and business systems.
Customer management tools used for booking administration and service coordination.
Insurance providers or claims handlers where a claim or incident must be reviewed.
Professional advisers such as legal, tax, or compliance advisers.
Public authorities where disclosure is required by law or to protect rights, property, or safety.

We do not sell personal data. Any sharing is limited to what is necessary and proportionate for the relevant purpose.

6. International Transfers

If any processor or service provider stores or accesses data outside the UK, we will take appropriate steps to protect your information. These steps may include the use of standard contractual clauses, adequacy regulations, or other lawful transfer safeguards.

7. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting, tax, insurance, and operational requirements. Retention periods may vary depending on the type of record and the reason it is held.

As a general approach:

Quotation and booking records are kept for a period that supports customer service, dispute handling, and business administration.
Invoices, payment records, and accounting information are kept for the period required by law and standard business practice.
Communication records are kept for as long as needed to resolve queries, deliver services, and maintain service history.
Where data is no longer required, it will be securely deleted, anonymised, or otherwise disposed of.

We review retention needs regularly to ensure we do not keep data longer than necessary. Retention decisions are based on legal obligations, operational needs, and the principle of data minimisation.

8. Data Security

We use reasonable technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures may include access controls, secure storage, password protection, staff awareness, and limited access to data on a need-to-know basis.

While no system can be guaranteed completely secure, we take the protection of your data seriously and continue to review our practices to reduce risk.

9. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to legal limits and exemptions, but we will always assess your request carefully and respond appropriately.

Right of access - you can request a copy of the personal data we hold about you.
Right to rectification - you can ask us to correct inaccurate or incomplete data.
Right to erasure - you may ask us to delete your data in certain circumstances.
Right to restrict processing - you can ask us to limit how we use your data in certain situations.
Right to data portability - you may request your data in a structured, commonly used format where applicable.
Right to object - you can object to processing based on legitimate interests or direct marketing.
Right to withdraw consent - where we rely on consent, you can withdraw it at any time.

If you wish to exercise any of these rights, we will require sufficient information to verify your identity and process your request safely. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) if you are unhappy with how we handle your personal data.

10. Marketing Communications

We will only send marketing communications where permitted by law. If we send you occasional service updates or promotional messages, you may opt out at any time. We respect your choices and will act on your preferences without undue delay.

11. Children’s Data

Our services are intended for adults. We do not knowingly collect personal data from children except where it is incidentally provided in the context of a household move or related service arrangement and only where necessary for the service. If we become aware that we have collected data inappropriately, we will take steps to delete it promptly.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or the way we handle personal data. Any updates will apply from the date they are published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how we protect personal information.

13. Summary of Our Commitment

Crystalpalace Man And Van is committed to processing personal data responsibly, transparently, and in line with GDPR principles. We only collect what is necessary, use it for legitimate service-related purposes, share it carefully with trusted processors, and retain it only for as long as needed. By using our services, you acknowledge that this Privacy Policy applies to your customer relationship with us within our service area. Our approach is designed to protect your privacy while enabling us to provide reliable, professional moving services.