Crystal Palace Removals Privacy Policy
This Privacy Policy explains how Crystal Palace Removals collects, uses, stores, shares, and protects your personal data. It applies to all Crystal Palace Removals customers and prospective customers within our service area, including individuals, households, and business clients who request or use our removal and related services.
Scope and Data Controller
Crystal Palace Removals is the data controller responsible for determining how and why your personal data is processed. This Privacy Policy covers personal data collected through our quotations, bookings, service delivery, customer communications, and any other interaction you have with us as a customer or potential customer in our service area.
Types of Personal Data We Collect
We collect and process different categories of personal data depending on how you interact with us and which services you request. These categories may include:
Identification and contact details, such as your name, address, previous and new property addresses, and other basic contact details you choose to provide so that we can communicate with you and perform our services.
Service and contract information, such as details of your booking, requested dates and times, inventory or list of items to be moved, access information for properties, and any instructions you give us that are necessary for providing the service safely and efficiently.
Payment and billing information, such as billing address and payment details required to process your payments. We do not store full card details where payments are processed through secure third-party payment providers, although we may retain limited transaction information for accounting and legal purposes.
Communication records, including records of emails, messages, or phone notes related to quotations, bookings, feedback, or complaints, so that we can respond to you and manage our relationship with you.
Technical and usage data where applicable, such as basic device or browser information and general usage information when you visit our online pages, to help us understand and improve our services. Any such data is processed in accordance with applicable law and, where required, with your consent.
How We Collect Your Data
We collect personal data directly from you when you request a quote, make an enquiry, confirm a booking, communicate with us about your move, or provide feedback. We may also receive personal data from third parties that you authorise to share information with us, for example letting agents, estate agents, or comparison platforms you have used to request removal services, where they are permitted to pass your details to us.
Lawful Basis for Processing
We process your personal data only when we have a lawful basis under the UK General Data Protection Regulation and related data protection laws. Depending on the context, our lawful bases are:
Performance of a contract: We process your data to provide you with quotations, confirm bookings, deliver removal and related services, manage payments, and handle any customer service matters arising from our contract with you or steps taken at your request before entering into a contract.
Legal obligation: We process certain data to comply with legal and regulatory requirements, such as tax, accounting, insurance obligations, or responding to lawful requests from competent authorities.
Legitimate interests: We process personal data where it is necessary for our legitimate business interests and these interests are not overridden by your rights and freedoms. This may include managing and improving our services, safeguarding our staff and property, handling customer enquiries, and establishing or defending legal claims.
Consent: in limited situations, we may rely on your consent, for example for certain types of marketing communications where consent is required by law. Where we rely on consent, you can withdraw it at any time.
How We Use Your Personal Data
We use your personal data to provide and manage our services, respond to your requests, and operate our business. This includes:
Preparing and sending quotations, estimates, and proposals for removals or related services.
Organising and carrying out removal services, including planning routes, arranging staff and vehicles, and accessing your properties as instructed.
Processing payments, issuing invoices, and maintaining accurate accounting records.
Communicating with you about your booking, service updates, or any issues that may arise before, during, or after your move.
Improving our services, training staff, and managing our business operations, including handling complaints and disputes.
Where legally permitted, sending you relevant service information or marketing communications, taking into account your communication preferences and rights.
Data Sharing and Processors
We do not sell your personal data. However, we may share your data with carefully selected third parties when necessary for the purposes described in this Privacy Policy, always in accordance with data protection law.
Service providers and processors: We may use third-party companies to help deliver our services and operate our business. These may include IT and cloud service providers, secure payment processors, vehicle tracking or logistics providers, document storage providers, and administrative support services. These organisations act as data processors on our behalf and are contractually required to process your data only according to our instructions, to keep it secure, and to comply with applicable data protection laws.
Professional advisors and insurers: We may share data with legal advisors, accountants, or insurance providers when necessary to obtain professional advice, manage claims, or meet our legal obligations.
Authorities and law enforcement: We may disclose data where required to comply with laws, regulations, court orders, or lawful requests from public authorities, or to establish, exercise, or defend legal claims.
Other third parties: In the event of a business reorganisation, merger, or transfer, customer data may form part of the assets transferred, subject to appropriate safeguards and continued protection of your rights.
International Transfers
Where we use service providers located outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place so that your personal data receives an equivalent level of protection to that required under UK data protection law. These safeguards may include approved standard contractual clauses or other legally recognised mechanisms.
Data Retention
We keep your personal data only for as long as is necessary for the purposes for which it was collected, including to provide services to you, to meet legal, accounting, or reporting requirements, and to resolve disputes.
The precise retention period depends on the type of data and the context in which it is processed. For example, records of your contracts, invoices, and key communications may be kept for a period required by tax and accounting laws or limitation periods for legal claims. When personal data is no longer needed, we will securely delete it or anonymise it so that it can no longer be associated with you.
Your Data Protection Rights
As a data subject under the UK General Data Protection Regulation, you have a number of rights in relation to your personal data, subject to certain conditions and legal limitations. These rights include:
Right of access: You can request confirmation of whether we process your personal data and obtain a copy of that data, together with certain information about how we use it.
Right to rectification: You can request that we correct or complete any inaccurate or incomplete personal data about you.
Right to erasure: In some circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected and there is no overriding legal reason for us to retain it.
Right to restriction of processing: You may request that we restrict processing of your data in certain situations, such as while we are verifying its accuracy or assessing an objection you have raised.
Right to data portability: Where processing is based on your consent or on a contract and carried out by automated means, you may request to receive your personal data in a structured, commonly used, machine-readable format and have it transmitted to another controller where technically feasible.
Right to object: You can object at any time to processing that is based on our legitimate interests, including certain forms of profiling, and we will stop processing unless we have compelling legitimate grounds or need to continue for legal reasons. You always have the right to object to direct marketing.
Rights in relation to consent: Where we rely on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing before consent was withdrawn.
Security of Your Personal Data
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These measures are designed to provide a level of security appropriate to the risk, taking into account the nature of the data and the purposes for which it is processed. Access to personal data is limited to staff and service providers who need it to perform their duties and who are subject to confidentiality obligations.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or how we process personal data. The revised version will apply from the date it is made available. We encourage you to review this Privacy Policy periodically so that you remain informed about how we protect your personal data.
