Privacy Policy - Man With A Van Wembley

This Privacy Policy explains how Man With A Van Wembley collects, uses, stores, shares, and protects personal data in connection with the services we provide. It applies to all Man With A Van Wembley customers in the area, including anyone who requests a quotation, books a service, communicates with us, or otherwise engages with our moving and transport services.

We are committed to handling personal data in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy should be read carefully so you understand how we process your information and the rights available to you.

1. Information We Collect

We may collect and process different types of personal data depending on how you interact with us and the services you request. The information we collect may include:

Identity data such as your name and title.
Contact data such as your address, email address, and telephone number.
Service details such as pickup and delivery locations, moving instructions, property access information, and preferred dates.
Billing and payment data such as payment status, invoice details, and transaction references.
Communication data including correspondence, enquiries, complaints, and feedback.
Technical data such as basic information about how you use our digital services, where applicable.
Special instructions that may be necessary to complete a move safely and efficiently, such as fragile item notes or access restrictions.

We generally collect personal data directly from you when you request a quote, make a booking, confirm job details, or contact us about our services. In some cases, we may receive information from a third party where you have authorised them to act on your behalf, such as a family member, landlord, estate agent, or business representative.

2. How We Use Your Personal Data

We use personal data only where we have a lawful basis to do so. The main purposes for which we process data include:

Providing moving and transport services.
Managing quotations, bookings, scheduling, and service delivery.
Communicating with you about your job or enquiry.
Preparing invoices, processing payments, and maintaining financial records.
Handling customer support, complaints, and service-related disputes.
Meeting legal, accounting, and insurance obligations.
Protecting our business, staff, customers, and property.

We may also use aggregated or anonymised information for internal reporting, service improvement, and operational planning. This data does not identify you personally.

3. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for each type of personal data we process. Depending on the circumstances, we rely on the following bases:

Contract

We process your personal data where it is necessary to perform a contract with you or to take steps at your request before entering into a contract. This includes providing quotes, arranging your move, confirming service details, and delivering the requested service.

Legal Obligation

We may process data where necessary to comply with legal obligations, such as maintaining accounting records, tax records, or information required for insurance or dispute resolution.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include improving our services, managing internal operations, preventing fraud, and ensuring security. Where we rely on legitimate interests, we consider the potential impact on your privacy and take appropriate safeguards.

Consent

In limited cases, we may rely on your consent, for example where you voluntarily provide information that is not required for the service. If consent is used as a lawful basis, you may withdraw it at any time.

4. Data Sharing and Processors

We may share personal data with trusted third parties who help us operate our business. These parties act as data processors or independent controllers depending on the circumstances. We only share the minimum information necessary and require appropriate safeguards to protect your data.

Examples of processors and service providers may include:

Payment processors for handling card or electronic payments.
Accounting or bookkeeping providers for invoicing and financial administration.
IT and hosting providers for secure storage, email, and system maintenance.
Administrative support services that help us manage bookings and customer records.
Insurance or legal advisers where needed to address claims, disputes, or compliance matters.

We may also disclose data where required by law, court order, regulatory request, or to protect the rights, safety, and security of our customers, staff, or business. We do not sell your personal data.

5. International Transfers

Where a service provider stores or accesses data outside the United Kingdom, we take reasonable steps to ensure appropriate safeguards are in place. These may include standard contractual protections or equivalent measures permitted under data protection law. We only allow such transfers where the level of protection remains adequate.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, tax, and insurance requirements. Retention periods may vary depending on the type of information and the nature of the service.

In general:

Booking and service records are retained for a period necessary to manage the job, resolve issues, and maintain business records.
Financial and invoice records are retained for the periods required by law.
Correspondence and complaints are retained for as long as needed to address the matter and any follow-up obligations.

When personal data is no longer required, we will securely delete, anonymise, or archive it in accordance with our retention practices.

7. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These measures may include access controls, secure storage, staff confidentiality obligations, and limited access on a need-to-know basis. While we take data security seriously, no system can be guaranteed completely secure, and you should also take care when sharing personal information.

8. Your Rights

As a data subject under UK GDPR, you have a number of rights in relation to your personal data. These include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to request correction of inaccurate or incomplete information.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to ask us to limit processing in specific situations.
Right to object – to object to processing based on legitimate interests or direct marketing, where applicable.
Right to data portability – to receive certain information in a structured, commonly used format, where applicable.
Right to withdraw consent – where we rely on consent, you may withdraw it at any time.

To exercise your rights, you may make a request using the usual channels you have used to communicate with us. We may need to verify your identity before responding. We will respond within the time limits required by law, usually within one month, unless the request is complex or numerous.

9. Cookies and Similar Technologies

If we use cookies or similar technologies on any digital service, these tools may help us understand basic usage patterns, improve performance, and support essential functions. Where required, we will seek the appropriate consent for non-essential cookies. You can also control cookies through your browser settings.

10. Children’s Data

Our services are intended for adults or persons acting on behalf of adult customers. We do not knowingly collect personal data from children unless it is necessary in the context of a service requested by an adult customer and handled lawfully.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection practices. The latest version will apply to your use of our services. We encourage you to review this policy periodically so you remain informed about how your personal data is handled.

12. Complaints

If you are concerned about how we handle your personal data, you have the right to raise a concern under data protection law. You may also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you believe your data protection rights have not been respected.

This Privacy Policy is designed to provide clear and transparent information about how Man With A Van Wembley processes personal data for customers in the area.