Privacy Policy - Man With A Van Hollandpark

This Privacy Policy explains how Man With A Van Hollandpark collects, uses, stores, shares, and protects personal data. It applies to all Man With A Van Hollandpark customers in the area, including individuals who request a quotation, make a booking, receive moving or delivery services, or otherwise interact with our services. We are committed to handling personal data in a lawful, fair, transparent, and secure manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Personal Data We Collect

We collect only the information that is necessary to provide our moving and transport services, manage customer relationships, and meet legal and operational obligations. The categories of data we may collect include:

Identity data: name, title, and any business or household name you provide.
Contact data: address, email address, telephone number, and other communication details.
Service data: details of your move, collection, or delivery, including dates, locations, access notes, inventory, and special handling requirements.
Billing and payment data: invoicing details, payment status, and transaction records.
Communication data: messages, enquiries, complaints, feedback, and records of correspondence.
Technical data: limited information such as device or browser details if you contact us through digital channels.
Legal and verification data: records needed for fraud prevention, dispute handling, insurance, or compliance checks.

We do not intentionally collect special category data unless it is strictly necessary and you choose to share it with us. If such information is provided, we will only process it where a valid legal basis exists and where appropriate safeguards are in place.

2. How We Use Personal Data

We use personal data for the following purposes:

to provide quotations and assess service requirements;
to schedule, perform, and manage moving or transport services;
to communicate with you about your booking, timing, and operational matters;
to issue invoices, process payments, and maintain financial records;
to respond to questions, complaints, or claims;
to improve service quality, training, and internal planning;
to comply with legal, tax, accounting, insurance, and safety obligations;
to protect our business, staff, and customers from fraud or misuse.

We only process data for specified, explicit, and legitimate purposes. If we need to use your data for a new purpose that is incompatible with the original purpose, we will inform you and, where required, seek your consent or identify another lawful basis.

3. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis to process personal data. Depending on the context, we rely on one or more of the following bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes preparing quotations, confirming bookings, arranging access, carrying out the move, and handling payment-related matters.

Legal obligation

We may process data to comply with legal duties, including tax, accounting, record-keeping, insurance, health and safety, and other regulatory requirements.

Legitimate interests

We may process data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. This may include service improvement, customer support, fraud prevention, business administration, and internal reporting. We always consider whether such processing is proportionate and relevant.

Consent

In limited situations, we may rely on your consent, for example where you choose to receive optional marketing communications. You may withdraw consent at any time, and this will not affect the lawfulness of processing carried out before withdrawal.

4. Data Sharing and Processors

We may share personal data with trusted third parties that help us operate efficiently and lawfully. These third parties act as processors or, in some cases, independent controllers. We only share the minimum information necessary and require appropriate safeguards.

Examples of processors may include:

IT and cloud service providers: for secure data storage, communication, and system support;
accounting and invoicing providers: for financial administration and bookkeeping;
payment service providers: for processing card or electronic payments;
customer management tools: for scheduling, contact handling, and service records;
professional advisers: such as legal, tax, or insurance advisers where necessary;
subcontracted service partners: where they assist in carrying out moving or delivery services under our instructions.

Where a third party processes data on our behalf, we require a written agreement that includes confidentiality, security, and data protection obligations. We do not sell personal data.

5. International Transfers

If personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place. This may include the use of standard contractual clauses, adequacy regulations, or other lawful transfer mechanisms. We take reasonable steps to ensure that any international transfer protects your personal data to an equivalent standard.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and operational requirements. Retention periods may vary depending on the type of information and the context in which it was collected.

Quotation and enquiry data: retained for a limited period to manage follow-up and customer service.
Contract and booking data: retained for the duration of the service relationship and for a reasonable period afterwards.
Financial records: retained as required by tax and accounting law.
Claims and dispute records: retained until the matter is resolved and for any additional period needed for legal defence.
Consent-based marketing data: retained until you withdraw consent or the data is no longer needed.

When data is no longer required, we will securely delete, anonymise, or archive it in accordance with our retention procedures.

7. Data Security

We implement appropriate technical and organisational measures to protect personal data against accidental loss, unauthorised access, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff training, and procedures for handling requests and incidents. While no system can be guaranteed completely secure, we work to maintain a high standard of protection.

8. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to legal conditions or exemptions, but we will always assess your request carefully. Your rights include:

Right of access: you may request a copy of the personal data we hold about you.
Right to rectification: you may ask us to correct inaccurate or incomplete data.
Right to erasure: you may request deletion of your data where legally permitted.
Right to restriction: you may ask us to limit processing in certain circumstances.
Right to data portability: you may request that data you provided to us be transferred in a structured, commonly used format where applicable.
Right to object: you may object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

If you exercise any of these rights, we may need to verify your identity before responding. We aim to respond within the timeframes required by law.

9. Marketing Communications

If we send optional marketing communications, we will do so only where permitted by law. You can opt out at any time. We will respect your choice and stop sending such communications where required. Operational messages relating to an active service booking may still be necessary and are not treated as marketing.

10. Complaints and Supervisory Authority

If you are concerned about how we handle your personal data, please let us know so we can address the issue. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection matters. We encourage you to contact us first so we can try to resolve any concern promptly and fairly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, operational practices, or service arrangements. Any updated version will apply from the date it is issued. We recommend reviewing this policy periodically so you remain informed about how we process your personal data.

By using the services of Man With A Van Hollandpark, you acknowledge that you have read and understood this Privacy Policy.