Privacy Policy - Removal Companies Crystalpalace

This Privacy Policy explains how Removal Companies Crystalpalace collects, uses, stores, shares, and protects personal data. It applies to all Removal Companies Crystalpalace customers in the area, including prospective customers, existing customers, and individuals who make enquiries on behalf of a household, business, or organisation. We are committed to handling personal information in a lawful, fair, and transparent manner in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our services, submitting an enquiry, or otherwise providing personal data to us, you acknowledge that your information will be processed in accordance with this Privacy Policy.

1. Who we are

Removal Companies Crystalpalace provides removal, packing, storage coordination, and related moving services. In the course of operating our business, we act as a data controller for the personal data we collect and use to manage enquiries, deliver services, handle payments, and meet legal and administrative obligations.

We take data protection seriously and aim to collect only the information we need, use it only for legitimate purposes, and retain it only for as long as necessary.

2. Personal data we collect

We may collect and process the following categories of personal data:

Identity details such as your name, title, and the name of the person or organisation you represent.
Contact details such as address, email address, telephone number, and moving location details.
Service information including property access details, inventory notes, preferred dates, special handling instructions, and service requirements.
Transaction data such as payment records, invoices, billing information, and service history.
Communications including emails, phone call notes, messages, complaints, and feedback.
Technical data when you interact with our online systems, such as IP address, browser type, and basic usage information.
Verification and security information where needed to confirm identity, manage access, or prevent fraud.

We do not intentionally collect special category data unless you choose to provide it and it is necessary for a specific service request. If such information is shared with us, we will only process it where we have a lawful basis and appropriate safeguards.

3. How we collect personal data

We collect personal data in several ways:

directly from you when you make an enquiry, book a service, or communicate with us;
through forms, emails, telephone calls, and messages;
from third parties acting on your behalf, such as family members, letting agents, solicitors, or business representatives;
from service providers supporting our business operations;
from payment processors and accounting systems where relevant.

Where we receive personal data about you from a third party, we will use it only for the purposes for which it was provided and in accordance with applicable law.

4. How we use your personal data

We use personal data to:

respond to enquiries and provide quotes;
plan and deliver removal services;
schedule jobs and manage logistics;
issue invoices, process payments, and manage refunds if applicable;
communicate service updates, changes, or service-related notices;
manage complaints, claims, and customer support;
maintain business records and internal administration;
comply with legal, regulatory, and tax obligations;
prevent fraud, protect our operations, and ensure security;
improve the quality, efficiency, and reliability of our services.

We will not use your personal data for purposes that are incompatible with those described above unless we have a lawful basis to do so and, where required, your consent.

5. Lawful basis for processing

Under UK GDPR, we must have a lawful basis to process personal data. We rely on the following bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes handling enquiries, providing quotes, carrying out removals, and managing related service arrangements.

Legal obligation

We may process personal data to comply with legal obligations, such as tax records, accounting requirements, insurance obligations, and responses to lawful requests from public authorities.

Legitimate interests

We may process personal data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This can include improving services, maintaining records, preventing fraud, and managing customer communications.

Consent

Where required, we will rely on your consent, for example for certain optional communications or uses of information. You may withdraw consent at any time, although this will not affect processing already carried out before withdrawal.

We carefully assess each processing activity to ensure the correct lawful basis is used and documented.

6. Sharing your data and processors

We may share personal data with trusted third parties who help us operate our business. These parties act as processors or, in some cases, independent controllers.

Processors may include:

payment service providers;
accounting and bookkeeping providers;
IT, cloud storage, and software providers;
communication and customer management platforms;
professional advisers such as insurers, lawyers, or auditors;
subcontracted service providers assisting with fulfilment where necessary.

We require our processors to handle personal data only on our instructions, to keep it secure, and to comply with data protection law. We do not sell personal data.

We may also disclose data where required by law, to defend legal claims, to protect our rights, or to protect the safety of customers, staff, or the public.

7. International transfers

Where personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms. We aim to ensure that any international transfer provides a level of protection consistent with UK GDPR requirements.

8. Data retention

We keep personal data only for as long as necessary for the purpose for which it was collected, including to satisfy legal, accounting, tax, insurance, and record-keeping obligations. Retention periods vary depending on the type of data and the nature of the service provided.

As a general approach:

enquiry records may be retained for a limited period if no service is booked;
customer and service records may be retained for the duration of the relationship and for a reasonable period afterward;
financial and transaction records are typically retained for the period required by law;
complaints, claims, and dispute-related records may be retained until the matter is fully resolved and any legal time limits have expired.

When personal data is no longer required, it will be securely deleted, anonymised, or otherwise disposed of in a safe and appropriate manner.

9. Your rights

Under data protection law, you have rights in relation to your personal data. These rights may include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to request correction of inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to request that processing be restricted in certain situations.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to request transfer of certain data in a structured, commonly used format.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

We may need to verify your identity before responding to a request. Some rights are subject to legal conditions and exemptions, and we may not always be able to comply fully where the law permits us to retain or process data.

10. Security of your information

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure systems, staff training, and restricted handling of sensitive records. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children’s data

Our services are not directed to children, and we do not knowingly collect personal data from children except where it is necessary in connection with a household move and provided by an adult with authority to do so. If we become aware that we have collected data from a child without appropriate basis, we will take steps to delete it where required.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any updates will take effect when published or otherwise communicated. We encourage customers to review this policy periodically to stay informed about how we protect personal data.

13. Summary of our commitment

Removal Companies Crystalpalace is committed to processing personal data responsibly, securely, and in compliance with applicable privacy laws. We collect only what we need, use it for clear and lawful purposes, retain it for appropriate periods, and respect the rights of our customers in the area. If you choose our services, you can expect your information to be handled with care, transparency, and accountability.