Privacy Policy - Man And A Van Richmonduponthames

This Privacy Policy explains how Man And A Van Richmonduponthames collects, uses, stores, shares, and protects personal data when providing removal, delivery, packing, transport, and related services. This policy applies to all Man And A Van Richmonduponthames customers in the area, including individuals, households, landlords, tenants, and business clients who use our services. We are committed to handling personal data in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

For the purposes of data protection law, Man And A Van Richmonduponthames acts as the data controller for personal data collected in connection with our services. This means we decide why and how personal data is used. We take privacy seriously and aim to collect only the information that is necessary for service delivery, customer support, administration, legal compliance, and service improvement.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity details such as your name, title, and, where relevant, business name.
Contact details such as address, telephone number, and email address.
Service information including pickup and delivery locations, moving dates, inventory details, access notes, and special handling requirements.
Payment information such as billing details and transaction records.
Communication records including enquiries, complaints, booking notes, and correspondence.
Technical and usage data if you interact with digital systems we use for booking, invoicing, or customer management.
Verification information where needed for fraud prevention, insurance, or contractual purposes.

We do not intentionally collect special category data unless it is strictly necessary and lawful to do so. If you voluntarily provide such information, we will only use it where permitted by law and required for service delivery or safeguarding purposes.

3. How We Use Personal Data

We use personal data for the following purposes:

to provide quotes and confirm bookings;
to plan and carry out removals and van services;
to communicate with customers before, during, and after a service;
to process payments and maintain financial records;
to handle complaints, claims, and customer support requests;
to meet legal, tax, accounting, and insurance obligations;
to protect against fraud, misuse, and security incidents;
to improve our services, operations, and customer experience;
to maintain internal records and evidence of work completed.

We will only use your personal data for the purposes for which it was collected, unless we reasonably consider that we need to use it for a compatible purpose or another lawful reason applies.

4. Lawful Basis for Processing

We process personal data only where we have a valid legal basis under the UK GDPR. Depending on the circumstances, our lawful bases may include:

Contract – where processing is necessary to provide a quote, make a booking, deliver the agreed service, or take steps at your request before entering into a contract.
Legal obligation – where processing is required to comply with tax, accounting, regulatory, insurance, or record-keeping obligations.
Legitimate interests – where processing is necessary for our legitimate business interests, such as improving services, managing operations, preventing fraud, and maintaining customer records, provided your rights and freedoms do not override those interests.
Consent – where we rely on your permission for a specific purpose. You may withdraw consent at any time, although this will not affect the lawfulness of processing carried out before withdrawal.

Where we process special category data, if ever needed, we will also identify an appropriate condition under Article 9 UK GDPR.

5. Data Sharing and Processors

We do not sell personal data. However, we may share information with trusted third parties who act as data processors or independent controllers when necessary for our operations. These may include:

Payment service providers who process card or transfer payments;
Accounting and bookkeeping providers who help manage invoices and financial records;
IT and hosting providers who support secure storage, communication, or system maintenance;
Customer management or booking system providers used to organise appointments and records;
Insurance providers, legal advisers, and claims handlers where necessary to assess or manage a claim;
Subcontractors or operational partners assisting with service delivery on our behalf;
Public authorities where disclosure is required by law or necessary to protect our rights, customers, or property.

Where we use processors, we require appropriate data protection safeguards, confidentiality obligations, and security measures. Processors are only permitted to act on our instructions and may not use personal data for their own purposes.

6. International Transfers

If any processor or service provider stores or accesses data outside the United Kingdom, we will ensure that appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or equivalent legal protection designed to keep personal data secure and protected.

7. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, insurance, and reporting requirements. Retention periods vary depending on the type of data and the reason it is held.

As a general approach:

Booking and service records are usually retained for a reasonable period after service completion to handle queries, disputes, and operational review.
Financial and tax records are retained for the period required by law.
Correspondence and complaint records are retained for as long as needed to manage the matter and demonstrate compliance.
Technical records are kept only as long as necessary for security, troubleshooting, and system administration.

When personal data is no longer needed, it is securely deleted, anonymised, or otherwise disposed of in a safe and lawful manner.

8. Data Security

We use appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, disclosure, alteration, or destruction. These measures may include access controls, secure storage, staff confidentiality expectations, data minimisation, and periodic review of handling practices. While no system is completely risk-free, we work to ensure that your data is treated with care and protected to a high standard.

9. Your Rights

Under data protection law, you may have the following rights in relation to your personal data:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete data.
Right to erasure – to request deletion of personal data in certain circumstances.
Right to restriction – to ask us to limit how we use your data in certain situations.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to request transfer of data you provided to us in a structured, commonly used format, where applicable.
Right to withdraw consent – where consent is used as the lawful basis, you may withdraw it at any time.

These rights are not absolute. In some cases, we may retain or continue processing data where the law permits or requires us to do so. If you make a request, we may need to verify your identity before responding.

10. How We Respond to Requests

We aim to respond to valid data protection requests without undue delay and within the time limits required by law. If a request is complex or multiple requests are made, we may extend the response period where permitted. We may also refuse requests that are clearly unfounded or excessive, but we will always explain our decision where appropriate.

11. Marketing

If we send any marketing communications, we will do so only where allowed by law. You can opt out of marketing at any time. We will respect your preference and stop using your data for that purpose once your request is processed.

12. Children’s Data

Our services are generally intended for adults arranging transport, removals, or related services. We do not knowingly collect personal data from children except where it is necessary and provided by an adult customer in connection with a service. If we become aware that data has been collected improperly, we will take appropriate steps to delete or protect it.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, operational practice, or service arrangements. Any revised version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their information is handled.

14. Summary of Key Principles

In short, Man And A Van Richmonduponthames only collects personal data that is relevant to providing our services, uses it on a lawful basis, keeps it only as long as needed, shares it carefully with trusted processors, and respects the rights of every customer in the area. We aim to be transparent, secure, and accountable in all our data handling practices.

Privacy matters, and we are committed to treating your information with respect, care, and legal compliance at every stage of our service.