Privacy Policy - Removal Company Elephant And Castle

This Privacy Policy explains how Removal Company Elephant And Castle collects, uses, stores, shares, and protects personal data when providing removal and relocation services. It applies to all Removal Company Elephant And Castle customers in the area, including prospective customers, current customers, and anyone who communicates with us in connection with a booking, quotation, survey, or service enquiry.

We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This Privacy Policy is designed to help you understand what data we collect, why we collect it, how long we keep it, who may process it on our behalf, and what rights you have over your information.

1. Who we are

Removal Company Elephant And Castle provides moving, packing, transportation, storage coordination, and related relocation services for residential and business customers. In connection with these services, we may act as a data controller for the personal data we collect and use to manage our customer relationships, bookings, contracts, and operational activities.

Where we use third-party service providers to support our work, those providers may act as processors or, in some cases, independent controllers depending on the service they provide.

2. The personal data we collect

We collect only the personal data necessary to provide our services, manage our business, and comply with our legal obligations. The categories of information we may collect include:

Identity details such as your name, title, and any business name you provide.
Contact information such as your phone number, email address, and service address.
Booking and service details such as move dates, inventory information, access instructions, property type, and special handling requirements.
Payment information such as billing details and transaction records. We do not usually store full card details if payment processing is handled by a secure payment provider.
Communication records such as emails, call notes, messages, complaints, and service-related correspondence.
Technical and usage data if you interact with our digital systems, such as device information, basic log data, and cookie-related information where applicable.
Support and claims information such as photographs, item descriptions, damage reports, or insurance-related material you choose to provide.

We generally do not seek to collect sensitive personal data unless it is necessary for a specific purpose, such as a support request, accessibility need, or claim. If we do collect special category data, we will do so only where a lawful basis and, if required, an additional condition under data protection law applies.

3. How we use your personal data

We use personal data for the following purposes:

To provide quotations and assess service requirements.
To arrange, confirm, and deliver moving services.
To communicate about bookings, changes, delays, access issues, and service updates.
To process payments and maintain financial records.
To manage complaints, queries, claims, and customer support.
To improve our services, training, and operational planning.
To comply with legal, tax, insurance, and regulatory obligations.
To protect our business, staff, and customers against fraud, misuse, or unlawful activity.

We only use personal data for compatible purposes and will not use it in a way that is unfair or unexpected.

4. Lawful basis for processing

We process personal data only where we have a lawful basis under UK GDPR. Depending on the situation, our lawful bases may include:

Contract

We process personal data where it is necessary to enter into or perform a contract with you, such as providing a quotation, confirming a move, carrying out the removal service, or handling billing.

Legal obligation

We may process data to comply with legal duties, including tax, accounting, health and safety, insurance, and record-keeping obligations.

Legitimate interests

We may process data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. Examples include managing customer relationships, preventing fraud, improving services, handling internal administration, and protecting our operations.

Consent

In some cases, we may rely on your consent, such as for certain optional communications or where required for specific processing activities. Where we rely on consent, you may withdraw it at any time.

Vital interests and public task

These bases are unlikely to apply in most removal service situations, but we may rely on them if a genuine emergency or public interest obligation makes it necessary.

5. Sharing your data and processors

We do not sell your personal data. We may share it only when necessary and proportionate for the purposes described in this policy. We may disclose personal data to:

Service processors who help us operate our business, such as payment providers, IT and cloud hosting providers, customer management platforms, document storage providers, communication tools, and administrative support services.
Insurance providers or claims handlers when needed to manage damage, loss, or liability issues.
Professional advisers such as accountants, auditors, or legal advisers, where necessary.
Regulators, law enforcement, or public authorities where disclosure is required by law or necessary to protect rights, safety, or property.

Where a processor handles personal data on our behalf, it is bound by a contract requiring it to process data only according to our instructions, use appropriate security measures, and comply with applicable data protection law. Processors do not have permission to use your data for their own independent purposes unless they are separately acting as a controller.

6. International transfers

Some of our processors may store or access data outside the United Kingdom. If this happens, we will take appropriate safeguards to protect your personal data, such as using approved contractual protections or transferring data only to countries recognised as providing adequate protection.

7. Data retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting, insurance, or reporting requirements. Retention periods may vary depending on the type of information and the reason it was collected.

As a general approach:

Quotation and enquiry records may be kept for a limited period to manage follow-up questions and business administration.
Customer service and contract records may be retained for the duration of the service relationship and for a further period afterward to handle disputes, claims, or legal requirements.
Financial and tax records are typically retained for the period required by law.
Communication records may be kept for as long as needed to evidence instructions, agreements, or complaint handling.

When data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you.

8. Your rights

Under data protection law, you have several rights in relation to your personal data. These rights may be subject to certain conditions or exceptions. They include:

Right of access – you can ask for a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete data.
Right to erasure – you can request deletion of your data in certain circumstances.
Right to restriction – you can ask us to limit how we use your data in certain cases.
Right to object – you can object to processing based on legitimate interests or direct marketing.
Right to data portability – you can request a copy of certain data in a structured, commonly used format, where applicable.
Right to withdraw consent – where processing relies on consent, you can withdraw it at any time.

If you wish to exercise any of these rights, we will respond in line with legal requirements and within the required timeframes. We may ask for information to verify your identity before fulfilling your request.

9. Security of your information

We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff training, and contractual safeguards for processors. While no system can be guaranteed completely secure, we take reasonable steps to protect your information.

10. Children

Our services are intended for adults and businesses. We do not knowingly collect personal data from children except where it is incidentally provided in the context of a household move or related service arrangement. If we become aware that we have collected data improperly, we will take reasonable steps to delete it.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any updated version will apply from the time it is made available. We encourage you to review this policy periodically so that you remain informed about how we use your personal data.

12. Summary of our commitment

Removal Company Elephant And Castle is committed to processing customer data responsibly, securely, and transparently. We collect only what is needed, use it for clear and lawful purposes, keep it only as long as necessary, and respect your rights under data protection law. If you are a customer in the area, this policy applies to your personal data whenever we collect or process it in connection with our removal services.