Privacy Policy - Nottinghill Man And Van

Effective date: This Privacy Policy explains how Nottinghill Man And Van collects, uses, stores, shares, and protects personal data. It applies to all Nottinghill Man And Van customers in the area, including individuals who request quotes, make bookings, receive services, or otherwise interact with us in connection with our removal and transport services.

1. Introduction

We are committed to protecting your privacy and handling your personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains what data we collect, why we collect it, the lawful bases we rely on, how long we keep it, who processes it on our behalf, and what rights you have over your information.

By using our services or contacting us about a move, you acknowledge that we may process your personal data as described in this policy. We only collect information that is relevant and necessary for delivering our services, managing our business, and meeting legal obligations.

2. Information We Collect

We may collect and process the following categories of personal data:

Identity details: name, title, and any preferred form of address.
Contact details: phone number, email address, and postal address.
Service information: move date, collection and delivery addresses, property access details, item inventory, special handling requirements, and parking or access instructions.
Payment information: payment records, billing details, transaction references, and invoice information. We do not retain unnecessary card details where payment processing is handled securely by third parties.
Communication records: enquiries, emails, messages, complaints, feedback, and notes from calls or bookings.
Technical data: if you interact with digital systems we use, we may collect limited device or usage information such as IP address, browser type, and log data for security and operational purposes.
Additional information: any other personal data you provide voluntarily, such as access needs, timing preferences, or instructions for fragile goods.

We do not intentionally collect special category data unless it is necessary and you choose to provide it, for example where access arrangements may require relevant information. If such information is shared, we treat it with enhanced care and only process it where a lawful basis exists.

3. How We Use Personal Data

We use your data for the following purposes:

to provide quotes and confirm bookings;
to organise, perform, and manage removal and transport services;
to communicate about schedules, service updates, and service-related issues;
to issue invoices, process payments, and maintain financial records;
to respond to enquiries, complaints, and customer support requests;
to manage our business operations, including record-keeping and service improvement;
to meet legal, tax, accounting, and regulatory obligations;
to protect our business, customers, and staff from fraud, misuse, or unlawful activity.

We only process personal data for specified and legitimate purposes. We will not use your information in a way that is incompatible with the reasons it was collected unless we have your permission or another valid lawful basis.

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis to process your personal data. Depending on the situation, we rely on the following bases:

Contract

We process personal data when it is necessary to take steps at your request before entering into a contract, or to perform a contract with you. This includes preparing quotes, arranging your move, contacting you about service details, and completing invoicing and payment-related actions.

Legal Obligation

We may process and retain certain data where required to comply with legal obligations, such as accounting, tax, insurance, dispute handling, or other statutory requirements.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include maintaining customer records, improving service quality, protecting against fraud, managing claims, and ensuring operational security.

Consent

In limited circumstances, we may rely on your consent, for example where you choose to receive certain optional communications or provide data that is not otherwise necessary for our service. Where consent is used, you can withdraw it at any time.

5. Sharing Your Information and Processors

We may share your data only when necessary and with appropriate safeguards. We do not sell personal data. Where third parties process personal data on our behalf, they act as processors and are required to handle it in line with our instructions and applicable data protection law.

Processors may include:

Payment processors: to handle secure payment transactions and related verification.
IT and cloud service providers: to store data, manage email, and support booking or record systems.
Accounting and bookkeeping providers: to manage invoicing, financial administration, and tax records.
Customer communication tools: to manage messages, scheduling, and service updates.
Professional advisers: such as accountants, insurers, legal advisers, or auditors where needed.
Regulatory, law enforcement, or public authorities: where disclosure is required by law or necessary to defend legal rights.

Where processors are used, they are expected to implement suitable technical and organisational measures to keep your data secure. We also take reasonable steps to ensure that only the minimum necessary data is shared.

6. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including any legal, accounting, insurance, or reporting requirements. Retention periods vary depending on the type of information and the purpose of processing.

Booking and service records: kept for a period necessary to manage the service, handle disputes, and maintain business records.
Financial and tax records: retained for the period required by law.
Communication records: kept for a reasonable period to respond to queries, evidence agreements, and resolve complaints.
Technical/security logs: retained for as long as needed to maintain system security and operational integrity.

When data is no longer required, we will securely delete, anonymise, or archive it in accordance with our retention practices.

7. Data Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures may include access controls, secure storage, staff confidentiality expectations, and careful selection of trusted processors.

While no system can be guaranteed to be completely secure, we take data protection seriously and regularly review our practices to reduce risk.

8. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. Subject to legal conditions and exemptions, you may have the right to:

Access the personal data we hold about you;
Rectify inaccurate or incomplete information;
Erase your data in certain circumstances;
Restrict the processing of your data in certain situations;
Object to processing based on legitimate interests;
Data portability for data you have provided to us, where applicable;
Withdraw consent where we rely on consent as the lawful basis;
Complain to the Information Commissioner’s Office (ICO) if you believe your rights have been infringed.

These rights are not absolute and may be limited by legal requirements or the rights of others. However, we will always aim to respond to requests in a clear and lawful manner.

9. Exercising Your Rights

If you wish to exercise any of your rights, you may contact us using the details provided through our usual service channels. We may need to verify your identity before responding to your request. We aim to respond within one month, although this may be extended where requests are complex or numerous.

Important: If you ask us to delete or restrict data, we may still need to retain certain information where required by law or for legitimate business reasons such as record-keeping, contract administration, or dispute resolution.

10. International Transfers

Where any processor stores or accesses data outside the UK, we will take steps to ensure appropriate safeguards are in place. These safeguards may include adequacy decisions, standard contractual clauses, or equivalent lawful transfer mechanisms designed to protect your information to a UK GDPR standard.

11. Children’s Data

Our services are intended for adults arranging removals or related transport services. We do not knowingly collect personal data from children except where it is incidental to the service and provided by an adult customer. If we become aware that we have collected such data inappropriately, we will take reasonable steps to delete it.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. The most current version will apply to your use of our services. We encourage you to review this policy periodically so that you remain informed about how we protect your information.

13. Summary of Key Points

Nottinghill Man And Van collects only the personal data needed to provide and manage our services, communicate with customers, handle payments, and comply with legal obligations. We rely on lawful bases including contract, legal obligation, legitimate interests, and, where appropriate, consent. We retain information only for as long as necessary, use trusted processors under strict controls, and recognise your rights to access, correct, delete, restrict, or object to processing of your data.

Privacy matters. We are committed to handling every customer’s information responsibly and in accordance with applicable data protection law.