Privacy Policy - Man With Van Enfieldtown

Man With Van Enfieldtown is committed to protecting the privacy and personal data of all customers in the Enfieldtown area. This Privacy Policy explains how we collect, use, store, share, and protect personal information, and it applies to all Man With Van Enfieldtown customers in area. We process personal data in accordance with the UK GDPR and the Data Protection Act 2018.

1. Who This Policy Applies To

This Privacy Policy applies to all customers in the Enfieldtown area, including individuals who request quotations, make bookings, receive moving services, or communicate with us about a service. It also applies to anyone acting on behalf of a customer, such as a family member, property manager, landlord, or business representative.

By using our services, you acknowledge that we may process personal data as described in this policy. We only process information that is necessary, relevant, and proportionate to provide and manage our services.

2. Personal Data We Collect

We collect personal data directly from you, from third parties you authorise, and in some cases from publicly available or operational sources needed to provide the service. The categories of data we may process include:

Identity details, such as name and title;
Contact details, such as address, email address, and telephone number;
Service information, such as moving dates, inventory lists, property access details, and delivery instructions;
Payment and billing information, such as transaction records and invoice details;
Communications, including enquiries, complaints, notes from calls, emails, and written messages;
Booking and account records, such as quotes requested, services booked, and service history;
Technical information, such as device or browser data if you contact us electronically;
Special category data only where strictly necessary and where a lawful condition applies, for example if you voluntarily disclose information relevant to accessibility or vulnerable-person support needs.

We do not intentionally collect more data than is needed for service delivery, legal compliance, and customer administration.

3. How We Use Personal Data

We use personal data for the following purposes:

to provide quotes and manage bookings;
to plan and carry out removals and related services;
to communicate with customers about schedules, access, and service arrangements;
to issue invoices, process payments, and keep financial records;
to handle complaints, claims, and service issues;
to maintain internal records and service quality;
to meet legal, tax, accounting, and regulatory requirements;
to prevent fraud, misuse, and security incidents;
to defend or establish legal claims where necessary.

We will not use your personal data for purposes that are incompatible with the reasons it was collected.

4. Lawful Basis for Processing

Under GDPR, we must have a lawful basis for every processing activity. Depending on the context, we rely on the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes preparing quotations at your request, confirming bookings, coordinating the move, and completing payment and service administration.

Legal Obligation

We process certain information to comply with legal obligations, including tax laws, accounting rules, record-keeping requirements, and responses to lawful requests from authorities.

Legitimate Interests

We may process data where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. This may include maintaining business records, improving operational efficiency, managing service quality, handling disputes, and protecting against fraud or misuse. When we rely on legitimate interests, we consider whether the processing is reasonable and proportionate.

Consent

In limited cases, we may rely on your consent, particularly for optional processing that is not necessary for the service or for any special category information that you choose to provide. You may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

5. Sharing Data and Processors

We may share personal data with trusted third parties only where necessary and only for legitimate business or legal reasons. These third parties may act as processors or independent controllers, depending on the relationship and purpose. Processors may include:

Payment service providers used to process card or bank transactions;
Accounting and bookkeeping providers who assist with invoicing and financial records;
IT and system support providers who host, maintain, or secure our business systems;
Communication service providers who enable email, messaging, or telephone handling;
Storage and document management providers who retain business files securely;
Professional advisers, such as accountants, insurers, or legal advisers;
Public authorities where disclosure is required by law or to protect rights, safety, or property.

We require processors to handle personal data securely, to process it only on our instructions, and to implement appropriate technical and organisational safeguards. We do not sell personal data.

6. Retention of Personal Data

We keep personal data only for as long as necessary for the purposes for which it was collected, including the need to satisfy legal, accounting, and reporting obligations. The exact retention period depends on the type of data and the purpose of processing.

Quotation and enquiry records are kept for a period appropriate to business administration and follow-up;
Booking and service records are retained for the duration of the service relationship and afterward as needed for dispute resolution and business records;
Financial and tax records are retained for the period required by law;
Complaint, claim, or legal correspondence may be retained for as long as necessary to establish, exercise, or defend legal rights.

When personal data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you. Retention is always limited to what is necessary and lawful.

7. Data Security

We take appropriate steps to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, password protection, and careful selection of processors.

Although we use reasonable safeguards, no system can be guaranteed to be completely secure. If a data incident occurs, we will respond in accordance with applicable law and, where required, notify the appropriate supervisory authority and affected individuals.

8. International Transfers

If any processor or service provider stores or accesses personal data outside the UK, we will ensure appropriate safeguards are in place. These safeguards may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms recognised under UK data protection law.

9. Your Rights

As a data subject, you have rights in relation to your personal data. These rights may apply depending on the circumstances and lawful basis relied upon. They include:

Right of access – to request a copy of the personal data we hold about you;
Right to rectification – to ask us to correct inaccurate or incomplete information;
Right to erasure – to request deletion of your data in certain situations;
Right to restrict processing – to ask us to limit how we use your data in certain cases;
Right to object – to object to processing based on legitimate interests or direct marketing;
Right to data portability – to receive certain data in a structured, commonly used format where applicable;
Right to withdraw consent – where we rely on consent, you may withdraw it at any time;
Right to complain – to raise concerns with the relevant data protection supervisory authority.

We may need to verify your identity before responding to a rights request. We will respond within the legal timeframes set out by applicable data protection law.

10. Children’s Data

Our services are generally intended for adults arranging removals and related services. We do not knowingly collect personal data from children except where it is incidental to a service arrangement and necessary for lawful business purposes. If we become aware that we have collected data unlawfully, we will take appropriate steps to delete or protect it.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. Any updated version will apply from the date it is issued. We encourage customers to review this policy periodically so they remain informed about how personal data is handled.

12. Summary of Our Privacy Commitment

Man With Van Enfieldtown respects your privacy and handles personal data responsibly, securely, and lawfully. We collect only the information needed to provide our services, we rely on appropriate lawful bases, we use trusted processors under strict controls, and we retain data only as long as necessary. All Man With Van Enfieldtown customers in area are covered by this policy, and their rights under GDPR are fully recognised and supported.