Privacy Policy - Crystalpalace Removals

Effective date: This Privacy Policy applies to all Crystalpalace Removals customers in the area and explains how we collect, use, store, share, and protect personal data in connection with our removal and related services.

Crystalpalace Removals is committed to handling personal information in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy explains what personal data we process, why we process it, the legal bases we rely on, how long we keep it, who may process it on our behalf, and the rights available to individuals.

1. Personal Data We Collect

We collect only the information necessary to provide and manage our services, meet legal obligations, and operate our business efficiently. Depending on the nature of the service requested, we may collect the following categories of personal data:

Identity details: name, title, and any identifying information needed to confirm who you are.
Contact details: address, telephone number, email address, and any preferred communication method.
Service information: moving date, property details, inventory lists, access requirements, and instructions relevant to your removal.
Payment and billing information: transaction records, invoice details, and payment status.
Communication records: emails, messages, notes from calls, quotations, complaints, and feedback.
Operational information: details needed to plan and carry out the job, including loading requirements, parking restrictions, and delivery instructions.
Technical information: basic website or device information if you contact us electronically, such as IP-related logs where applicable.

We generally collect personal data directly from you when you request a quote, book a service, make an enquiry, or communicate with us during the course of a job. In some cases, we may receive information from third parties, such as estate agents, landlords, solicitors, insurers, or payment providers, where this is necessary for the service or where you have asked them to pass information to us.

2. How We Use Personal Data

We use personal data only for specific and legitimate purposes. These include:

providing quotations and assessing service requirements;
managing bookings, scheduling, and service delivery;
communicating with you about your move or related services;
processing payments, invoices, and refunds where applicable;
keeping business and financial records;
handling complaints, disputes, and insurance-related matters;
improving our services, internal administration, and customer support;
meeting legal, tax, accounting, and regulatory obligations;
protecting our business, staff, customers, and property from fraud or misuse.

We do not use personal data for purposes that are incompatible with the original reason it was collected unless we have a lawful basis to do so.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each processing activity. Crystalpalace Removals relies on the following lawful bases where appropriate:

Performance of a Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes preparing a quote you asked for, arranging a removal, managing delivery, handling payments, and dealing with after-service issues linked to the contract.

Legal Obligation

We may process personal data where required to comply with legal obligations, such as tax rules, accounting requirements, health and safety duties, recordkeeping obligations, and lawful requests from public authorities.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. Examples include improving service quality, managing customer relations, preventing fraud, maintaining internal records, and protecting our operations. When relying on legitimate interests, we assess the impact on individuals and ensure that processing is proportionate.

Consent

In limited situations, we may rely on your consent, for example where specific optional communications or marketing activity requires it. Where consent is used, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, including to satisfy legal, accounting, insurance, and business requirements. Retention periods vary depending on the type of record and the reason for holding it.

Quotation and enquiry records: kept for a reasonable period to manage follow-up, audit, and business administration.
Contract and service records: kept for the duration of the service relationship and for a further period where needed for claims, disputes, or legal compliance.
Financial records: retained in line with tax and accounting obligations.
Complaint and correspondence records: kept as long as necessary to resolve the matter and to evidence our handling of it.

When personal data is no longer required, it will be securely deleted, anonymised, or archived in accordance with our retention practices.

5. Data Sharing and Processors

We may share personal data only where necessary and in a controlled manner. This may include sharing with:

Service providers and processors: third parties who perform functions on our behalf, such as payment processing, accounting, storage, IT support, messaging, or administrative services.
Professional advisers: insurers, accountants, auditors, or legal advisers where required for legitimate business purposes or legal compliance.
Relevant counterparties: where needed to coordinate a move, such as property professionals, building managers, or relocation-related contacts acting under your instructions.
Authorities and regulators: where disclosure is required by law or to protect our rights, customers, staff, or property.

Any third party acting as a processor must process personal data only on our instructions, use appropriate security measures, and comply with data protection law. We do not sell personal data.

6. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure, or destruction. These measures may include access controls, secure storage, restricted permissions, staff awareness, and procedural safeguards. While no system can be guaranteed completely secure, we take reasonable steps to safeguard the information entrusted to us.

7. International Transfers

If any personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place, such as adequacy regulations or approved contractual protections, to ensure a level of protection consistent with UK data protection law.

8. Your Rights

Individuals whose personal data we process have important rights under data protection law. Subject to legal limits and exemptions, you may have the right to:

Access your personal data and obtain a copy of it;
Rectification of inaccurate or incomplete data;
Erasure of personal data in certain circumstances;
Restriction of processing in certain situations;
Object to processing based on legitimate interests or direct marketing;
Data portability for data provided by you and processed by automated means in certain circumstances;
Withdraw consent where processing is based on consent;
Complain to the Information Commissioner’s Office (ICO) if you believe your data rights have been infringed.

To help protect your information, we may need to verify your identity before responding to a rights request. We aim to respond within the time limits set by law.

9. Children’s Data

Our services are not directed at children as a primary audience, and we do not intentionally collect personal data from children unless necessary for a service and provided by a parent, guardian, or authorised adult acting on their behalf. Where children’s data is processed, we take care to do so lawfully and only to the extent required.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. Any revised version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically to stay informed about how personal data is handled.

11. Summary of Our Principles

Transparency: we explain what data we collect and why.
Purpose limitation: we use data only for legitimate and defined purposes.
Data minimisation: we collect only what we need.
Accuracy: we keep information as accurate as possible.
Storage limitation: we retain data only as long as necessary.
Security: we protect personal data using appropriate safeguards.

By using Crystalpalace Removals services, you acknowledge that you have read and understood this Privacy Policy. This policy applies to all Crystalpalace Removals customers in the area and is intended to ensure that personal data is handled responsibly, securely, and in compliance with applicable data protection laws.