Privacy Policy - Movers Tufnell Park

This Privacy Policy explains how Movers Tufnell Park collects, uses, stores, shares, and protects personal data in connection with the services we provide. It applies to all Movers Tufnell Park customers in the area, including individuals who request quotations, book services, communicate with us, or otherwise engage with our moving and related support services.

We are committed to handling personal data in a lawful, fair, transparent, and secure manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy is intended to help you understand what information we process, why we process it, how long we keep it, who may receive it, and what rights you have.

1. Who We Are

For the purposes of data protection law, Movers Tufnell Park acts as a data controller when we decide how and why personal data is processed for our own business operations and service delivery. In some cases, we may act as a data processor where we handle personal data on behalf of a client or another controller under their instructions. In either case, we aim to ensure that data is processed with appropriate safeguards.

2. Personal Data We Collect

We may collect and process different categories of personal data depending on how you interact with us and the services you request. The information we collect may include:

Identity details such as your name and title.
Contact details such as telephone number and email address.
Service and booking information including moving dates, property details, access requirements, inventory notes, and service preferences.
Billing and payment information such as invoice details and records of transactions.
Correspondence records including emails, messages, and notes from phone conversations.
Technical data where relevant, such as basic device or usage information from website interactions, if applicable to service administration.
Special category data only where strictly necessary and permitted by law, for example if you voluntarily provide information related to health, access needs, or other requirements linked to a move.

We keep data collection limited to what is necessary for legitimate business purposes and service delivery. We do not intentionally collect more personal information than required.

3. How We Use Personal Data

We use personal data for the following purposes:

To provide moving, packing, transport, storage coordination, and related services.
To prepare quotations, manage bookings, and confirm service arrangements.
To communicate with you about your move, schedule changes, and service updates.
To process invoices, payments, refunds, and account administration.
To manage customer support requests and resolve complaints or disputes.
To maintain business records, improve our services, and ensure quality control.
To meet legal, regulatory, tax, accounting, and insurance obligations.
To protect our business, staff, customers, and property from fraud, misuse, or security incidents.

We only use personal data for compatible and lawful purposes, and we do not use it in a way that is unexpected or incompatible with the original reason it was collected.

4. Lawful Basis for Processing

Under GDPR, we must have a lawful basis to process personal data. Depending on the activity, we rely on one or more of the following lawful bases:

Performance of a contract

We process your personal data when it is necessary to provide a service you have requested, such as preparing a quote, confirming a booking, arranging a move, or managing payment and invoicing.

Legitimate interests

We may process personal data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. This may include service management, record-keeping, internal administration, fraud prevention, and improving operational efficiency.

Legal obligation

We may need to process and retain certain information to comply with legal duties, including accounting, tax, consumer law, insurance, and regulatory requirements.

Consent

Where required, we will rely on your consent, particularly for optional communications or any processing that is not covered by another lawful basis. You may withdraw consent at any time, although this will not affect processing already carried out lawfully before withdrawal.

Vital interests

In exceptional circumstances, we may process personal data to protect someone’s life or physical safety, for example in urgent situations linked to access or welfare concerns during a move.

5. Data Sharing and Processors

We may share personal data only when necessary and proportionate. We do not sell personal data. Where we use third-party service providers, they act as processors and process data only on our instructions, subject to appropriate contractual and security obligations.

Examples of processors or service providers may include:

IT and cloud hosting providers that store or support business systems.
Payment service providers that handle card or electronic payments.
Accounting or bookkeeping providers that support financial administration.
Communication tools used for email, messaging, and customer service management.
Operational partners engaged to help deliver parts of a service, where appropriate and lawful.

We may also disclose personal data to professional advisers, insurers, law enforcement, regulators, or courts where required or permitted by law. Any disclosure is limited to what is necessary for the relevant purpose.

6. International Transfers

Where personal data is transferred outside the UK, we take steps to ensure that it is protected by appropriate safeguards. This may include the use of approved contractual clauses or transfers to jurisdictions that offer an adequate level of protection. We assess the need for such transfers carefully and only use them where necessary.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting, tax, insurance, or contractual requirements. Retention periods vary depending on the nature of the data and the reason for processing.

In general:

Customer and booking records are retained for the duration of the service relationship and for a reasonable period afterward to handle follow-up questions or disputes.
Financial and invoice records are kept for the period required by tax and accounting laws.
Correspondence and support records are retained only as long as needed to resolve queries and maintain accurate business records.
Special category or sensitive information is retained for the shortest possible time and only where there is a clear lawful reason.

When data is no longer required, we delete it securely or anonymise it so that it can no longer identify you.

8. Your Rights Under GDPR

You have a number of rights over your personal data, subject to certain legal limits. These rights include:

Right of access - you can request a copy of the personal data we hold about you.
Right to rectification - you can ask us to correct inaccurate or incomplete data.
Right to erasure - you can request deletion of your data in certain circumstances.
Right to restrict processing - you can ask us to limit how we use your data in some situations.
Right to data portability - you may request certain data in a structured, commonly used format.
Right to object - you may object to processing based on legitimate interests or direct marketing.
Right to withdraw consent - where we rely on consent, you can withdraw it at any time.

We will respond to rights requests in line with GDPR requirements and may need to verify your identity before taking action. Some requests may be limited where we have a legal obligation to retain or process the data.

9. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures may include restricted access, secure storage, staff confidentiality obligations, and regular review of our internal practices. While no system can be guaranteed completely secure, we work to reduce risk to a level appropriate to the nature of the data processed.

10. Children’s Data

Our services are intended for adults. We do not knowingly collect personal data from children unless it is necessary in connection with a customer’s move and provided by an adult with authority to do so. Where children’s data is involved, it is handled with particular care and only for a legitimate and necessary purpose.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, business operations, or data processing practices. Any revised version will apply from the date it is made available. We encourage customers to review the policy periodically to stay informed about how personal data is handled.

12. Further Information

If you wish to exercise your rights or learn more about how your data is processed, you may make a request through the appropriate service channel used for your move. We will consider all valid requests carefully and respond in accordance with applicable data protection law.

Important notice: This Privacy Policy applies to all Movers Tufnell Park customers in the area and is intended to provide a clear explanation of our data handling practices in a manner consistent with GDPR principles of lawfulness, fairness, transparency, data minimisation, accuracy, storage limitation, integrity, and confidentiality.