Privacy Policy - Removal Companies Notting Hill

This Privacy Policy explains how Removal Companies Notting Hill collects, uses, stores, shares, and protects personal data. It applies to all Removal Companies Notting Hill customers in the area, including prospective customers, active customers, and anyone who contacts us about our services. We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We want you to understand what information we collect, why we collect it, how long we keep it, and what rights you have over it. We also describe the types of third parties that may process your information on our behalf. This policy should be read carefully so that you can make informed decisions about your personal data.

1. Personal Data We Collect

We may collect different categories of personal data depending on how you interact with us. The information we receive may include data you provide directly, data generated during service delivery, and limited technical data collected through communications.

Information you provide

Identity details such as your name, title, and any company name if you are booking on behalf of a business.
Contact details such as telephone number and email address.
Service details including property address, moving date, inventory information, access details, and special handling requirements.
Billing and payment information needed to arrange invoices, payments, refunds, or deposit processing.
Communication records including messages, notes from calls, complaint details, and service preferences.
Identification or verification details where needed for fraud prevention, insurance, or contractual purposes.

Information collected during service delivery

Records of items moved, storage instructions, and collection or delivery logs.
Incident reports, damage reports, or claims relating to the service.
Vehicle and operational records connected to the completion of your move.

Technical and usage information

Basic device or browser information when you communicate electronically.
Metadata from emails or digital forms.
Security logs that help us protect against abuse, errors, or unauthorised access.

We do not seek to collect unnecessary information, and we only collect data that is relevant to providing and managing our removal services, meeting legal requirements, and improving our operations.

2. How We Use Your Data

We use personal data for a range of operational and legal purposes. Each use is connected to a specific lawful basis under data protection law.

To provide quotes, assess service requirements, and plan removal activities.
To perform our contract with you and deliver moving, packing, loading, unloading, and related services.
To process payments, issue invoices, and manage account records.
To communicate about bookings, service updates, rescheduling, and complaints.
To handle insurance claims, disputes, damage reports, or customer queries.
To maintain business records and meet legal, tax, and regulatory obligations.
To improve our services, train staff, and monitor service quality.
To protect against fraud, misuse, and security incidents.

We may also use limited data to defend legal claims or establish, exercise, or defend our rights. Where appropriate, we rely on legitimate interests to operate efficiently and to maintain high service standards while ensuring your rights and freedoms are protected.

3. Lawful Basis for Processing

Under GDPR, every use of personal data must have a lawful basis. We rely on the following grounds:

Contract

Most processing is necessary to enter into or perform a contract with you. This includes preparing quotes, managing bookings, carrying out the move, and handling payment arrangements.

Legal obligation

We process certain data to comply with legal requirements such as accounting rules, tax laws, insurance obligations, and record-keeping duties.

Legitimate interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights. This may include service improvement, administration, internal record-keeping, security, and fraud prevention.

Consent

In limited situations, we may rely on your consent, for example where you choose to receive certain types of optional marketing communications or where consent is otherwise required by law. You may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

Vital interests

In rare cases, we may process data to protect someone’s vital interests, such as in an emergency involving health or safety.

4. Sharing Your Data and Processors

We do not sell your personal data. However, we may share information with trusted third parties who help us operate our services. Where these providers process personal data on our behalf, they act as processors under GDPR and are required to follow our instructions and maintain appropriate safeguards.

Payment processors that handle card or electronic payment transactions.
IT and hosting providers that support our business systems, data storage, and communications.
Accounting and bookkeeping processors that assist with financial administration and compliance.
Insurance providers or claims handlers where a claim or incident must be assessed.
Professional advisers such as lawyers, auditors, or consultants where necessary for legal or business purposes.
Subcontracted service providers who may support parts of the removal process under our control.

We may also disclose personal data where required by law, court order, or lawful request from public authorities. If a business transfer, merger, or restructuring occurs, relevant data may be disclosed to the extent necessary and subject to appropriate protection.

All processors are selected carefully and are expected to implement suitable technical and organisational security measures. Where data is transferred outside the UK or EEA, we will ensure appropriate safeguards are in place, such as standard contractual clauses or equivalent protections.

5. Data Retention

We only keep personal data for as long as necessary for the purposes for which it was collected. Retention periods vary depending on the type of data, the nature of the service, and legal requirements.

Quotation and enquiry data may be kept for a limited period after the enquiry is completed or not converted into a booking.
Contract and service records are retained for the duration needed to manage the service and any related queries or claims.
Financial and tax records are retained for the period required by law.
Claims, disputes, and complaint records may be kept longer where necessary to resolve issues or defend legal claims.
Security and system logs are kept only as long as needed for monitoring, protection, and troubleshooting.

When personal data is no longer required, it is securely deleted, anonymised, or archived in line with our retention practices. We regularly review retention needs to ensure data is not kept longer than necessary.

6. Your Rights Under GDPR

You have important rights in relation to your personal data. These rights are subject to certain legal conditions and exceptions, but we will always consider your request carefully.

Right of access – you can request confirmation of whether we hold your personal data and obtain a copy of it.
Right to rectification – you can ask us to correct inaccurate or incomplete information.
Right to erasure – in some cases, you can ask us to delete your data.
Right to restrict processing – you can request limited use of your data in certain circumstances.
Right to object – you may object to processing based on legitimate interests or direct marketing.
Right to data portability – where applicable, you may request a copy of certain data in a structured, commonly used format.
Right to withdraw consent – where we rely on consent, you may withdraw it at any time.
Right to lodge a complaint – you may complain to the relevant data protection authority if you believe your rights have been infringed.

We may need to verify your identity before responding to a request. This is to protect your data and prevent unauthorised access. We will aim to respond within the timeframe required by law.

7. Security of Your Information

We take appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, alteration, disclosure, or destruction. These measures may include access controls, secure storage, staff training, and internal policies governing data handling.

While no system can be guaranteed completely secure, we continuously review our security practices and work to reduce risks. If a serious data breach occurs, we will act in accordance with legal obligations, which may include notifying affected individuals and the appropriate authority.

8. Children’s Data

Our services are intended for adults arranging removal services. We do not knowingly collect personal data from children unless it is necessary in connection with a household move and is provided by an adult customer. If we become aware that we have collected information in error, we will take appropriate steps to delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or service changes. Any revised version will apply from the date it is made available. We encourage customers to review this policy periodically to stay informed about how personal data is handled.

In summary, this policy applies to all Removal Companies Notting Hill customers in the area and explains how we lawfully collect and use personal data, how long we keep it, who may process it, and what rights you have. We are committed to respecting your privacy and maintaining the trust placed in us.