Privacy Policy - Man With Van Westhampstead
This Privacy Policy explains how Man With Van Westhampstead collects, uses, stores, shares, and protects personal data in connection with our moving, transport, and van services. It applies to all Man With Van Westhampstead customers in the area, including anyone who requests a quote, books a service, communicates with us, or otherwise uses our services. We are committed to handling personal data lawfully, fairly, and transparently in accordance with the UK GDPR and the Data Protection Act 2018.
1. Who we are
Man With Van Westhampstead provides removal and transport services for households and businesses. In the course of delivering these services, we process personal data about customers, prospective customers, and other individuals connected to a booking. We act as a data controller for the personal data we collect and determine the purposes and means of processing.
2. Personal data we collect
We only collect personal data that is necessary for operating our services, managing bookings, communicating with customers, and meeting legal obligations. The information we may collect includes:
- Identity details such as your name and, where relevant, the names of other people involved in the booking.
- Contact details such as your telephone number, email address, and service address.
- Booking information including move date, property details, access details, inventory information, and service preferences.
- Payment information such as billing details and payment status. We do not intentionally store card security codes.
- Communications including emails, messages, call notes, and any feedback or complaints.
- Service records such as job history, quotes, invoices, and proof of service.
- Technical data if you interact with our digital systems, such as IP address, device information, and basic usage data.
In some cases, we may receive personal data from third parties, such as estate agents, landlords, tenants, business partners, or someone making a booking on your behalf. If someone gives us your details, they must have a lawful basis to share that information.
3. How we use personal data
We use personal data to provide and manage our services efficiently and safely. This includes:
- Preparing quotations and confirming bookings.
- Planning routes, staffing, and vehicle allocation.
- Communicating about the move, access requirements, delays, or changes.
- Processing payments, refunds, and invoicing.
- Handling complaints, disputes, and insurance matters.
- Keeping internal records and maintaining service quality.
- Meeting legal, accounting, and regulatory obligations.
- Preventing fraud, misuse, or unlawful activity.
We may also use limited data to improve our customer service, manage business operations, and analyse service performance in an aggregated or anonymised form wherever possible.
4. Lawful basis for processing
We process personal data only where we have a lawful basis under data protection law. Depending on the circumstances, we may rely on one or more of the following:
Contract
We process personal data when it is necessary to enter into or perform a contract with you. This includes providing quotes at your request, taking bookings, carrying out the move, issuing invoices, and managing post-service matters.
Legal obligation
We may process data where required to comply with legal obligations, including tax, accounting, record-keeping, and responding to lawful requests from public authorities.
Legitimate interests
We may process personal data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This may include improving our services, maintaining security, managing customer relationships, and handling operational administration.
Consent
In limited cases, we may rely on your consent, for example where you agree to receive optional marketing communications. Where consent is used, you may withdraw it at any time.
5. Sharing and processors
We may share personal data with trusted third parties where necessary for service delivery, operational support, or compliance. These parties act either as processors or independent controllers depending on their role.
Processors are organisations that handle personal data on our instructions. They may include:
- IT and cloud service providers that host our systems, email, file storage, and booking records.
- Payment providers that process card or bank payments securely.
- Accounting and bookkeeping services that support invoicing and financial record management.
- Customer communication tools that help us manage correspondence and service updates.
- Insurance or claims support providers where a claim or incident must be assessed.
We may also share data with independent controllers where appropriate, such as legal advisers, regulators, law enforcement agencies, or business partners involved in a booking. Where required, we ensure appropriate contracts and safeguards are in place to protect personal data.
We do not sell personal data. We only share the minimum information necessary for the relevant purpose.
6. Data retention
We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including meeting legal, accounting, and reporting obligations. Retention periods vary depending on the type of data and the reason it is held.
- Quotes and booking enquiries are generally kept for a reasonable period to manage follow-up queries and service history.
- Contract and service records are retained for the duration of the customer relationship and for a further period where needed for tax, legal, or insurance purposes.
- Financial records are retained in line with statutory accounting requirements.
- Complaints or claims information may be kept longer if required to resolve issues or defend legal claims.
When data is no longer required, we will securely delete, anonymise, or destroy it in accordance with our retention procedures.
7. Data security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and limiting access to personnel who need the information to perform their duties.
While no system can be guaranteed to be completely secure, we work to reduce risks and respond promptly to any suspected data breach. Where required by law, we will notify the relevant supervisory authority and affected individuals.
8. International transfers
If any of our processors or service providers store or access data outside the United Kingdom, we will ensure that appropriate safeguards are in place, such as adequacy regulations or approved contractual protections. Our aim is to keep your data protected to a standard consistent with UK GDPR requirements.
9. Your rights
You have rights under data protection law in relation to the personal data we hold about you. Subject to legal limits, these rights include:
- Right of access – to request a copy of the personal data we hold about you.
- Right to rectification – to ask us to correct inaccurate or incomplete data.
- Right to erasure – to ask us to delete your data in certain circumstances.
- Right to restrict processing – to ask us to limit how we use your data in certain cases.
- Right to data portability – to receive certain data in a structured, commonly used format.
- Right to object – to object to processing based on legitimate interests or direct marketing.
- Right to withdraw consent – where we rely on consent, you can withdraw it at any time.
You may also have the right not to be subject to decisions based solely on automated processing if such processing is ever used in a way that produces legal or similarly significant effects. At present, we do not use profiling or automated decision-making in a manner that has such effects.
10. Marketing preferences
If we send optional marketing messages, we will only do so where permitted by law. You can opt out of marketing at any time. Even if you opt out, we may still send essential service communications such as booking confirmations, invoices, or updates about your job.
11. Children’s data
Our services are intended for adults arranging moving and transport services. We do not knowingly collect personal data from children unless it is necessary for the performance of a service, such as where family details are included in a booking. Where children’s data is involved, we process it only to the extent necessary and with suitable safeguards.
12. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data processing practices. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically to stay informed about how their data is handled.
13. Summary of our approach
Man With Van Westhampstead only collects data needed to provide reliable moving services, uses it for clear and lawful purposes, keeps it for no longer than necessary, and shares it only with trusted processors or where required by law. We respect your rights and aim to handle all personal information fairly, securely, and transparently.