Privacy Policy - Movers Crystalpalace

This Privacy Policy explains how Movers Crystalpalace collects, uses, stores, shares, and protects personal data when providing moving, packing, storage, and related services. It applies to all Movers Crystalpalace customers in the area, including prospective customers, booked customers, and individuals who communicate with us in connection with our services. We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK GDPR and the Data Protection Act 2018.

1. Who this policy applies to

This policy applies to anyone whose personal data we process in connection with our services in the local area, whether the information is provided directly by the individual or received from someone acting on their behalf. This includes private customers, business customers, household contacts, landlords, letting agents, building managers, and others involved in a move. Where we process data for corporate clients, the same principles of privacy, security, and data minimisation apply.

2. What personal data we collect

We collect only the personal data that is necessary to manage enquiries, prepare quotes, complete removals, handle logistics, and meet our legal and operational obligations. The categories of data we may collect include:

Identity details such as name, title, and, where needed, company name.
Contact details such as email address, telephone number, and moving address.
Service information such as property access details, inventory notes, item descriptions, special handling requirements, and dates and times of service.
Payment and billing information such as invoicing details and transaction records.
Communication records including emails, call notes, and messages relating to quotes, bookings, complaints, or service updates.
Technical data such as limited website or device information if you contact us through digital channels, used for security and service administration.

We do not intentionally collect special category personal data unless it is necessary and lawfully permitted, for example where a customer chooses to share information needed for access, health, or safety reasons related to a move. In such cases, we apply additional safeguards and process the data only when justified.

3. How we use personal data

We use personal data for the following purposes:

To provide quotes, confirm bookings, and plan moving services.
To carry out packing, transport, lifting, storage, and delivery services.
To communicate about schedules, access arrangements, delays, and service changes.
To issue invoices, process payments, and manage accounts.
To record service history and handle complaints or claims.
To maintain safety, prevent fraud, and protect our staff, customers, and property.
To comply with legal, tax, insurance, and regulatory obligations.

We also use limited data for internal record keeping, service improvement, staff training, and business administration. Where possible, we use aggregated or anonymised data for analysis so that individuals are not directly identifiable.

4. Lawful basis for processing

We process personal data only where we have a valid lawful basis under the GDPR. Depending on the activity, our lawful bases may include:

Contract - when processing is necessary to enter into or perform a contract with you, such as managing a removal booking, preparing a quote you requested, or completing payment arrangements.
Legal obligation - when we must process data to meet legal requirements, including tax, accounting, insurance, health and safety, and record retention duties.
Legitimate interests - when processing is necessary for our legitimate business interests and does not override your rights, such as service improvement, operational planning, fraud prevention, and customer communication.
Consent - in limited situations where we rely on your clear permission, such as for optional marketing communications or the handling of certain sensitive details you choose to provide.
Vital interests - in rare cases where processing is necessary to protect someone’s life or physical safety.

We will only use your data for the purpose for which it was collected unless we reasonably determine that another compatible purpose applies.

5. Data retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. Retention periods vary depending on the type of data and the reason for processing.

Booking and service records are retained for a period that allows us to manage follow-up queries, service issues, and contractual obligations.
Financial records are kept for the period required by tax and accounting laws.
Complaint and claims records may be retained longer where needed to resolve disputes or defend legal claims.
Enquiry data from individuals who do not proceed with a booking may be deleted after a reasonable period unless it is needed for a legitimate business purpose.

When personal data is no longer required, we will securely delete, anonymise, or archive it in line with our retention procedures. Data is not kept indefinitely, and retention is reviewed regularly to ensure continued relevance and necessity.

6. Processors and sharing of data

We may share personal data with trusted third parties who act as data processors on our behalf or as independent controllers where necessary. These parties are only given the information needed to perform their services and are required to protect it appropriately. Examples of processors and recipients may include:

Payment service providers for secure payment processing.
IT and cloud service providers for hosting, storage, email, and business systems.
Accounting and invoicing systems for bookkeeping and financial management.
Insurance providers where claims or coverage matters arise.
Professional advisers such as legal or tax advisers where needed for compliance or dispute resolution.
Subcontractors or operational partners involved in delivering the moving service, such as crews, storage handlers, or logistics support.

Where a processor acts on our instructions, we require appropriate contractual safeguards and confidentiality obligations. We do not sell personal data. If data must be transferred outside the UK, we will ensure suitable safeguards are in place to protect your rights and freedoms.

7. Data security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality duties, and careful limitation of who can view customer information. Although no system can be guaranteed completely secure, we take reasonable and proportionate steps to keep data safe.

8. Your rights

Under data protection law, you may have the following rights in relation to the personal data we hold about you:

Right of access - to request confirmation of whether we process your data and obtain a copy of it.
Right to rectification - to request correction of inaccurate or incomplete data.
Right to erasure - to request deletion of your data in certain circumstances.
Right to restriction - to ask us to limit processing in specific situations.
Right to object - to object to processing based on legitimate interests or direct marketing.
Right to data portability - to receive certain data in a structured, commonly used format where technically feasible.
Right to withdraw consent - where we rely on consent, you may withdraw it at any time.

You also have the right to be informed about how your data is used and to raise concerns if you believe your rights have not been respected. We will respond to valid requests in accordance with applicable data protection law.

9. Children’s data

Our services are not directed at children, but we may occasionally process limited information relating to minors where necessary for a household move. In such cases, we ensure the information is handled carefully and only to the extent required to provide the service or protect safety.

10. Updates to this policy

We may update this Privacy Policy from time to time to reflect changes in law, operations, or service arrangements. The most current version will apply to our processing of personal data. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

Our commitment

Movers Crystalpalace is committed to respecting your privacy and using personal data responsibly. We aim to keep our practices transparent, proportionate, and secure, while ensuring our services can be delivered efficiently and lawfully. If you provide us with personal data, it will be processed in line with this policy and the principles of fairness, minimisation, purpose limitation, storage limitation, accuracy, integrity, and confidentiality.