Privacy Policy - Man With Van Elmstead

This Privacy Policy explains how Man With Van Elmstead collects, uses, stores, shares, and protects personal data when providing moving, transport, and related services. It applies to all Man With Van Elmstead customers in the area, including anyone who requests a quote, books a service, communicates with us, or otherwise interacts with our team. We are committed to handling personal information in a lawful, fair, and transparent manner in line with the UK GDPR and the Data Protection Act 2018.

1. Who We Are

Man With Van Elmstead acts as the data controller for the personal data we collect in connection with our services. This means we decide why and how your personal data is processed. We take privacy seriously and only collect information that is necessary for operating our services safely, efficiently, and legally.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity information such as your name and title.
Contact information such as your email address, phone number, and service address.
Booking information including service date, moving requirements, item descriptions, and access details.
Payment information including transaction records and billing details. We do not knowingly store full card details unless needed for secure processing by a payment provider.
Communication records including emails, messages, calls, and notes relating to your booking or enquiry.
Service and operational data such as quotes, invoices, route details, and work completion records.
Technical information if you visit any digital service we use, such as IP address, browser type, and device information.

We generally do not seek to collect special category data. If such information is shared with us incidentally, we will only process it where there is a lawful basis and where it is necessary for a specific purpose.

3. How We Collect Data

We collect personal data in the following ways:

Directly from you when you request a quote, make a booking, or communicate with us.
From third parties involved in delivering the service, such as payment processors or subcontracted service providers.
Automatically through systems that record transactions, messages, or website-related technical data where applicable.

4. Why We Use Your Data

We use personal data for the following purposes:

To provide quotations and manage bookings.
To perform moving and transport services safely and efficiently.
To communicate with you about your service, including scheduling and updates.
To process payments, issue invoices, and maintain financial records.
To handle customer support, complaints, and queries.
To maintain internal records and improve our services.
To comply with legal, tax, accounting, and insurance obligations.
To prevent fraud, misuse, and other unlawful activity.

We only use your data where there is a valid legal reason to do so.

5. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis for every use of personal data. We rely on the following bases:

Contract

We process data where it is necessary to enter into or perform a contract with you. This includes preparing quotes, confirming bookings, delivering services, and managing payment arrangements.

Legal Obligation

We may process data when required to meet legal obligations, such as tax reporting, accounting, recordkeeping, or responding to lawful requests from authorities.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests and where your rights do not override those interests. This includes service management, customer communication, fraud prevention, and operational improvement. When relying on legitimate interests, we assess the impact on privacy and use only what is necessary.

Consent

In limited cases, we may rely on your consent, for example where it is required for optional marketing activity or a specific processing purpose. Where consent is used, you may withdraw it at any time.

6. How We Share Data and Processors

We may share personal data with trusted third parties who help us operate our business. These third parties act as processors when they process data on our behalf and under our instructions. Typical processors may include:

Payment service providers who handle secure payment processing.
Accounting and bookkeeping providers who support financial administration.
IT and cloud service providers who store or manage business data.
Communication tools used to send messages, reminders, or service updates.
Insurance, legal, or dispute-resolution providers where necessary.

We require processors to protect data appropriately, keep it confidential, and use it only for the purposes we specify. We do not sell personal data.

In some situations, we may also need to share data with independent third parties such as banks, regulators, law enforcement, or professional advisers. We will only do so where permitted or required by law.

7. International Transfers

If any service provider processes data outside the United Kingdom, we will take appropriate safeguards to protect your information. These safeguards may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms. We aim to ensure a consistent and high standard of data protection wherever your data is processed.

8. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including to meet legal, accounting, insurance, and reporting requirements. Retention periods vary depending on the type of data and the reason for processing.

Booking and customer records are usually retained for a period needed to manage the service relationship and any follow-up matters.
Financial and tax records are retained for the duration required by law.
Communication records may be retained while they remain relevant to service administration, complaints, or dispute resolution.
Technical and operational logs are kept only as long as needed for security, troubleshooting, or system administration.

When data is no longer needed, we will delete it securely or anonymise it so it can no longer identify you.

9. Data Security

We use reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and restricted use of data on a need-to-know basis. While no system can be guaranteed completely secure, we take appropriate steps to reduce risk and protect your information.

10. Your Rights

You have a number of rights under data protection law. Subject to legal limits and applicable exemptions, these include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to ask us to limit how we use your data in certain situations.
Right to data portability – to receive certain data in a structured, commonly used format.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent – where we rely on consent, you may withdraw it at any time.

These rights are not absolute, and there may be situations where we must retain or continue processing data for legal reasons.

11. How to Exercise Your Rights

If you wish to exercise any of your rights, we will respond within the time limits set by law. We may need to verify your identity before completing your request. This helps us protect your privacy and ensures that we only disclose information to the correct person.

12. Complaints

If you are unhappy with how we handle your personal data, you can raise a concern so that we can review it. You also have the right to lodge a complaint with the relevant data protection authority if you believe your rights have been infringed. We encourage you to contact us first so we can try to resolve the matter promptly and fairly.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection practices. Any updated version will apply from the date it takes effect. We recommend reviewing this policy periodically to stay informed about how we process your personal data.

14. Summary of Our Commitments

Man With Van Elmstead is committed to processing personal data responsibly, securely, and lawfully. We collect only what we need, use it for clear and legitimate purposes, retain it for appropriate periods, and share it only with trusted processors or where required by law. We respect your privacy rights and aim to ensure that every customer in the area receives a service that is both practical and privacy-conscious.