Privacy Policy - Man And Van Colindale

This Privacy Policy explains how Man And Van Colindale collects, uses, shares, stores, and protects personal data. It applies to all Man And Van Colindale customers in the area, including anyone who requests a quote, books a service, communicates with us, or otherwise engages with our moving and transport services. We are committed to handling personal information in a lawful, fair, transparent, and secure way in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Man And Van Colindale provides removals, delivery, and transport-related services. In providing these services, we act as a data controller for the personal information that we collect and use for our own business purposes. This means we decide why and how your personal data is processed, while respecting your rights and maintaining appropriate safeguards.

2. Personal Data We Collect

We collect only the information that is necessary to provide our services, manage our business, and meet legal obligations. The types of personal data we may collect include:

Identity details such as your name and title.
Contact details such as phone number and email address.
Service details including pick-up and drop-off locations, move dates, item descriptions, and access information.
Payment information where needed to process transactions, issue invoices, or confirm payment status.
Communication records such as enquiries, complaints, booking notes, and correspondence.
Technical information if you interact with our digital systems, such as basic device or usage data.
Special category data only where necessary and lawful, and typically only if you choose to disclose it, for example if it is relevant to access arrangements or service adjustments.

We do not intentionally collect more personal data than is needed for the purposes set out in this policy. You should avoid sharing unnecessary sensitive information unless it is relevant to your service request.

3. How We Use Your Data

We use personal data for the following purposes:

To provide quotes, arrange bookings, and deliver moving and transport services.
To communicate with you before, during, and after a service.
To verify identity where needed and prevent fraud or misuse.
To handle payments, refunds, invoicing, and recordkeeping.
To respond to complaints, queries, and customer service requests.
To maintain internal administration, operational planning, and service quality.
To comply with tax, accounting, insurance, and other legal obligations.
To protect our business, staff, customers, and property.

We will only use your personal data for the purposes for which it was collected unless we reasonably determine that another compatible purpose applies.

4. Lawful Basis for Processing

We process personal data only where a lawful basis under UK GDPR applies. Depending on the circumstances, our lawful bases may include:

Contract

We process your data when it is necessary to perform a contract with you or to take steps at your request before entering into a contract. This includes preparing quotes, confirming bookings, and completing your move or delivery.

Legal Obligation

We may process certain data to comply with legal obligations, such as tax, accounting, record retention, fraud prevention, and regulatory requirements.

Legitimate Interests

We may process personal data where it is necessary for our legitimate interests, provided your interests and fundamental rights do not override those interests. This may include business administration, improving services, maintaining security, and managing customer relationships. When relying on this basis, we assess the impact on your privacy and ensure that any processing is proportionate.

Consent

Where required, we may rely on your consent, particularly for optional communications or where special category information is involved and no other lawful basis applies. If we rely on consent, you may withdraw it at any time.

5. Retention of Personal Data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, tax, insurance, and dispute-resolution requirements. Retention periods depend on the type of data and the reason for processing.

As a general approach:

Booking and service records are kept for a period necessary to manage the contract and related queries.
Invoices, payment records, and accounting information are retained in line with legal and financial obligations.
Customer correspondence may be kept for a reasonable period to support service history and complaint handling.
Data that is no longer required is securely deleted, anonymised, or archived in accordance with our retention practices.

We review the need to retain personal data periodically to ensure that we do not keep it longer than necessary.

6. Data Sharing and Processors

We may share personal data with trusted third parties where necessary to deliver our services, operate our business, or meet legal obligations. When we use another organisation to process personal data on our behalf, that organisation acts as a processor. We require processors to follow written instructions, maintain confidentiality, and implement appropriate security measures.

Examples of processors or service providers may include:

Accounting and bookkeeping providers.
Payment processing providers.
IT, cloud storage, and software service providers.
Customer communication and administrative support systems.
Professional advisers such as insurers, legal advisers, or auditors where necessary.

We may also disclose data to public authorities, courts, or regulators where required by law or where disclosure is needed to establish, exercise, or defend legal rights.

We do not sell your personal data. If data is transferred outside the UK, we will ensure appropriate safeguards are in place so that your information remains protected.

7. Data Security

We use suitable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and restricted processing on a need-to-know basis.

However, no system is completely secure, and while we take appropriate steps to safeguard your information, we cannot guarantee absolute security. If a personal data breach occurs, we will respond in accordance with our legal obligations.

8. Your Rights Under UK GDPR

You have a number of rights regarding your personal data. Subject to legal conditions and exemptions, these include the right to:

Access the personal data we hold about you.
Rectify inaccurate or incomplete information.
Erase your data in certain circumstances.
Restrict processing in certain situations.
Object to processing based on legitimate interests or direct marketing.
Data portability where processing is based on consent or contract and carried out by automated means.
Withdraw consent at any time where consent is the lawful basis.

You also have the right to raise concerns about how your data is handled and to contact the Information Commissioner’s Office (ICO) if you believe your rights have been infringed. Exercising one right does not affect any other rights you may have.

9. Marketing Communications

We will only send marketing communications where permitted by law. If you have given consent, or where soft opt-in rules apply, you may receive updates that relate to our services. You can opt out of marketing communications at any time. Operational or service-related messages, such as booking confirmations or important service updates, are not marketing and may still be necessary to provide our services.

10. Children’s Data

Our services are intended for adults and business customers. We do not knowingly collect personal data directly from children except where it is incidentally provided in connection with a booking or service and is necessary for service delivery. If we become aware that we have collected data from a child without an appropriate lawful basis, we will take steps to delete or otherwise handle it securely.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or our processing practices. Any updates will take effect when published in the revised policy. We encourage customers to review this policy periodically so they remain informed about how we handle personal information.

12. Summary of Our Commitment

Man And Van Colindale is committed to treating personal data with care, transparency, and respect. We collect only what we need, use it for clear and lawful purposes, keep it only as long as necessary, and share it only with trusted processors or where legally required. We also support your rights under data protection law and aim to maintain a privacy-first approach across all our services in the Colindale area.