Man With a Van Finchley Privacy Policy

This Privacy Policy explains how Man With a Van Finchley collects, uses, shares and protects personal data relating to customers and prospective customers in the Finchley area and surrounding locations. It is intended to be transparent and compliant with the UK General Data Protection Regulation and the Data Protection Act 2018. By using our services, requesting a quote or otherwise interacting with us, you acknowledge that you have read and understood this Privacy Policy.

Scope of this Privacy Policy

This Privacy Policy applies to all Man With a Van Finchley customers and prospective customers in the Finchley area and nearby areas where we provide services. It applies to personal data collected through any communication channel we use, including telephone, text-based messaging, online forms and in-person contact in relation to enquiries, bookings and service delivery.

Personal Data We Collect

We collect and process different categories of personal data depending on how you use our services.

Identification and contact details: This may include your full name, address, service address, billing address, and general location information relevant to the service. It also includes contact details such as your preferred method of contact.

Service and booking information: This may include details of the items to be moved, access details for collection and delivery locations, preferred dates and times, special instructions, and any notes you provide that are relevant to carrying out the service.

Transactional and payment information: This may include information about the services you purchase, amounts charged, dates of transactions and payment status. We do not store full payment card details; payment processing is handled by third party payment processors.

Communication records: This may include records of messages, call notes and other communications relating to enquiries, quotes, bookings, complaints or feedback. These records help us manage your requests and any ongoing services.

Technical data: When you interact with us online, limited technical information such as your device type, approximate location and basic usage information may be collected to help us operate and improve our services. We do not use this information to identify you directly without another lawful basis.

Lawful Bases for Processing

We only process personal data when we have a lawful basis to do so. Depending on the context, we rely on one or more of the following lawful bases under the UK GDPR.

Contractual necessity: We process personal data where it is necessary to enter into or perform a contract with you. This includes processing needed to provide quotes, confirm bookings, deliver moving and transport services, communicate about your booking, and handle billing and payment.

Legitimate interests: We may process personal data for our legitimate business interests, provided that your interests and fundamental rights do not override those interests. This includes activities such as managing our relationship with you, improving and developing our services, maintaining accurate records of services provided, and protecting our business, vehicles and staff.

Legal obligations: We may process personal data where this is necessary to comply with legal and regulatory obligations, such as record-keeping, tax, accounting and responding to lawful requests from public authorities.

Consent: In limited situations, we may rely on your consent, for example if we wish to send you certain types of marketing communications that are not covered by our legitimate interests. Where we rely on consent, you can withdraw it at any time by contacting us using the details provided in this Privacy Policy.

How We Use Your Personal Data

We use personal data for the following purposes:

To provide quotations and respond to enquiries. We use your contact details and service requirements to prepare and send quotes, respond to questions and follow up on your requests.

To manage bookings and deliver services. We use your personal data to schedule and carry out moves, plan routes, allocate staff and vehicles, and ensure that collections and deliveries take place at the right time and location.

To process payments and manage accounts. We use transaction data to issue invoices, record payments and maintain accurate financial records.

To communicate with you. We use your contact details to send booking confirmations, updates, reminders, service notices and responses to your queries or complaints.

To improve and protect our business. We may use data for internal analysis, quality control, staff training, dispute resolution, security and to help prevent fraud or misuse of our services.

Data Sharing and Processors

We may share your personal data with third parties where this is necessary for the purposes described in this Privacy Policy and where we have a lawful basis.

Service providers and processors: We use third party service providers to assist with the operation of our business, such as payment processors, accounting and bookkeeping support, messaging and communication platforms, route planning or scheduling tools, and secure data storage or backup services. These third parties act as data processors and are only allowed to process personal data on our documented instructions and subject to appropriate confidentiality and security obligations.

Professional advisers: We may share limited personal data with professional advisers such as accountants, auditors, insurers and legal advisers where this is necessary to obtain professional advice or manage legal claims.

Authorities and legal obligations: We may disclose personal data where required to do so by law, regulation or court order, or where necessary to protect our rights, property, safety, or the rights, property and safety of our customers, staff or others.

We do not sell your personal data to third parties.

International Transfers

Where we use service providers located outside the United Kingdom, or where data is stored or accessed from another country, we take steps to ensure that an adequate level of protection is in place in accordance with data protection laws. This may include using countries that have been deemed to provide an adequate level of protection or implementing standard contractual clauses or other safeguards approved under the UK GDPR.

Data Retention

We keep personal data only for as long as is necessary to fulfil the purposes for which it was collected, including to meet any legal, accounting or reporting requirements.

In general, the following retention periods apply:

Enquiries and quotes without booking: We may retain basic enquiry and quote information for a limited period to respond to follow-up questions, manage our records and analyse demand, after which it will be deleted or anonymised.

Bookings and service records: We normally retain data relating to services provided, including invoices and records of payments, for the duration required by legal and tax obligations. After this period, information is securely deleted or anonymised.

Communication records: Messages and correspondence may be kept for a reasonable period to manage our relationship with you, handle any disputes or complaints and improve our services, and will then be deleted or anonymised when no longer needed.

Where we rely on your consent for a particular use of your data, we retain that data until you withdraw your consent or until it is no longer needed for the purpose for which it was collected.

Data Security

We take appropriate technical and organisational measures to protect personal data against loss, theft, misuse, unauthorised access, disclosure, alteration and destruction. These measures include restricting access to personal data to staff and service providers who need it for legitimate business purposes and requiring them to keep the data confidential.

Your Data Protection Rights

Under the UK GDPR you have certain rights in relation to your personal data, subject to conditions and exemptions set out in law.

Right of access: You have the right to request confirmation as to whether we process your personal data and, where we do, to request a copy of that data and certain related information.

Right to rectification: You have the right to request that inaccurate or incomplete personal data is corrected or updated.

Right to erasure: In some circumstances, you have the right to request the deletion of your personal data, for example where the data is no longer needed for the purpose for which it was collected, or where you withdraw consent and there is no other lawful basis for processing.

Right to restriction of processing: You may request that we restrict the processing of your personal data in certain situations, such as while we are assessing a request for rectification or objection.

Right to object: You have the right to object to the processing of your personal data where we rely on legitimate interests as our lawful basis. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or where processing is required for legal claims.

Right to data portability: Where processing is based on consent or on a contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine-readable format and to request that it is transferred to another controller where technically feasible.

Right to withdraw consent: Where we rely on your consent, you can withdraw it at any time. This will not affect the lawfulness of processing carried out prior to withdrawal.

You also have the right to lodge a complaint with the Information Commissioner's Office if you believe that your data protection rights have been infringed.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or regulatory guidance. Any significant changes will be made clear by updating the date and, where appropriate, providing you with additional notice. We encourage you to review this Privacy Policy periodically to stay informed about how we handle personal data.