Privacy Policy - Man With Van Chingford

This Privacy Policy explains how Man With Van Chingford collects, uses, stores, shares, and protects personal data when providing moving, delivery, loading, unloading, and related transport services. It applies to all Man With Van Chingford customers in the area, including individuals and business customers who request quotes, book services, communicate with us, or otherwise use our services.

We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We only collect personal information that is necessary for legitimate business purposes and we do not sell personal data.

1. Data We Collect

We may collect and process the following categories of personal data depending on the nature of the service requested:

Identity information such as your name, title, and, where relevant, company name.
Contact details such as telephone number, email address, and service address.
Booking and service details such as moving date, collection and delivery locations, property access information, item lists, special handling requests, and preferred service arrangements.
Payment and billing information such as payment method, transaction records, invoice details, and payment status.
Communication records including emails, messages, call notes, complaint details, and customer feedback.
Operational information such as photographs or notes relating to items, property access, or damage, where necessary to deliver the service or resolve a dispute.
Technical data where you interact with our digital systems, such as device information, IP address, and basic usage logs, if applicable.

We do not intentionally collect special category data unless it is strictly necessary, lawful, and limited to the specific service context. If such information is ever provided incidentally, we will handle it with additional care and only where permitted by law.

2. How We Use Personal Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To manage bookings and deliver moving or transport services.
To plan routes, loading arrangements, and service logistics.
To communicate with customers about appointments, changes, delays, or service updates.
To issue invoices, receive payments, and maintain accounting records.
To handle complaints, claims, or disputes.
To maintain service quality, training, and internal record-keeping.
To comply with legal, tax, insurance, and regulatory obligations.

We may also use limited data to improve our operations, understand customer needs, and prevent fraud or misuse of our services. Any such use will be proportionate and consistent with data protection law.

3. Lawful Basis for Processing

We only process personal data when we have a lawful basis to do so. Depending on the situation, we rely on one or more of the following legal grounds:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes taking bookings, arranging collections and deliveries, communicating service details, and processing payments.

Legal Obligation

We may process personal data where we must comply with a legal requirement, such as maintaining accounting records, meeting tax obligations, or responding to lawful requests from authorities.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests and where your interests and rights do not override those interests. This includes managing operations, improving services, preventing fraud, securing our systems, and handling customer enquiries. We always assess whether the processing is necessary and proportionate.

Consent

In limited circumstances, we may rely on your consent, for example where optional marketing communication is involved or where consent is required by law. Where consent is used, you can withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Sharing and Processors

We may share personal data only when necessary and only with trusted third parties acting on our behalf or where required by law. These third parties may include:

Payment service providers for taking and processing payments.
Accountants and bookkeeping providers for financial administration and tax compliance.
IT, cloud storage, and software providers that support our booking, communication, and record systems.
Insurance providers and claims handlers where a claim or incident must be assessed.
Subcontractors or operational partners who assist in delivering services, where required.
Regulators, law enforcement, or legal advisers where disclosure is necessary to comply with law or defend legal rights.

These third parties act as processors or independent controllers depending on the service provided. Where they act as processors, they are only permitted to use personal data according to our instructions and must implement appropriate security measures. We choose processors carefully and expect them to meet data protection standards.

We do not authorise processors to use personal data for their own unrelated purposes.

5. International Transfers

Where any service provider stores or accesses personal data outside the UK, we will ensure appropriate safeguards are in place before any transfer takes place. These safeguards may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms recognised under data protection law.

6. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including for legal, accounting, insurance, and dispute resolution requirements. Retention periods may vary depending on the type of data and the nature of the service.

Booking and service records are generally retained for the period needed to manage the customer relationship and address any follow-up issues.
Financial and tax records are retained for the period required by law.
Claims, complaints, and dispute records may be kept for a longer period where necessary to establish or defend legal claims.
Communication records are retained for as long as needed to provide customer support and maintain accurate business records.

When personal data is no longer required, we will delete, anonymise, or securely archive it in line with our retention practices. We do not keep data indefinitely.

7. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures may include access controls, secure storage, staff confidentiality obligations, and restricted access to sensitive records. While no system can be guaranteed completely secure, we work to protect your data to a standard appropriate to the risks involved.

8. Your Rights

Under data protection law, you have rights in relation to your personal data. Depending on the circumstances, these may include:

The right of access to request a copy of the personal data we hold about you.
The right to rectification to correct inaccurate or incomplete data.
The right to erasure in certain cases, such as where data is no longer needed or consent is withdrawn.
The right to restriction to limit how we use your data in some situations.
The right to object to processing based on legitimate interests, including direct marketing where applicable.
The right to data portability where processing is based on consent or contract and carried out by automated means.
The right to withdraw consent at any time where consent is the legal basis for processing.

If you believe your rights have been infringed, you also have the right to complain to the Information Commissioner's Office (ICO) or another relevant supervisory authority. We encourage you to raise concerns directly so we can try to resolve them promptly.

9. How We Respond to Requests

When you exercise your rights, we may need to verify your identity before responding. We will usually respond within one month, unless the request is complex or multiple requests are made, in which case the deadline may be extended in line with legal requirements. There is usually no fee for making a request, unless it is manifestly unfounded or excessive.

10. Children’s Data

Our services are intended for adults or authorised representatives arranging services on behalf of others. We do not knowingly collect personal data from children unless it is necessary in the context of a service and provided by an adult with authority to do so.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our operations, legal requirements, or data protection practices. Any updates will take effect when published in the revised version. We encourage customers to review this policy periodically to stay informed about how personal data is handled.

12. Scope of This Policy

This Privacy Policy applies to all Man With Van Chingford customers in the area and to anyone whose personal data we process in connection with our services. By using our services, making an enquiry, or entering into a booking with us, you acknowledge that your personal data will be handled in accordance with this policy and applicable data protection law.

We are committed to respecting your privacy and using personal data only where it is necessary, lawful, and proportionate.