Privacy Policy - Stjohnswood Removals

This Privacy Policy explains how Stjohnswood Removals collects, uses, stores, shares, and protects personal data. It applies to all Stjohnswood Removals customers in area, including prospective customers, current customers, and anyone who uses our services or makes enquiries about them. We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK GDPR and the Data Protection Act 2018.

We respect your privacy and only process personal data that is necessary to provide our removals services, manage our business operations, and meet legal obligations. This policy is written to help you understand what information we collect, why we collect it, and what rights you have over your personal data.

1. Personal Data We Collect

We may collect and process different types of personal data depending on how you interact with us and the services you request. The information we collect may include:

Identity details such as your name and title.
Contact details such as your address, email address, and telephone number.
Service details such as pickup and delivery addresses, inventory details, property access information, and preferred moving dates.
Payment information such as billing details and payment records, where needed for invoicing and accounting.
Communication records such as messages, notes from phone calls, complaints, and service updates.
Special instructions related to the move, including access arrangements or items requiring extra care.
Website or device information if you submit an enquiry through digital forms, including basic technical data such as IP address or browser type, where applicable.

We only collect special category data in very limited circumstances and only when it is necessary and lawful to do so. We do not seek sensitive personal information unless it is required for a specific service, legal reason, or with your explicit consent where appropriate.

2. How We Use Your Data

We use personal data for the following purposes:

To provide quotations and respond to enquiries.
To plan, arrange, and deliver removals services.
To communicate with you about booking details, service changes, and operational updates.
To issue invoices, process payments, and manage accounting records.
To handle complaints, claims, or customer support requests.
To maintain internal records and improve our services.
To comply with tax, insurance, and other legal obligations.
To protect our business, staff, and customers from fraud, misuse, or security risks.

We will only use your personal data for the purposes for which it was collected, unless we reasonably believe we need to use it for another compatible purpose. If we need to use your data for an unrelated purpose, we will explain the lawful basis for doing so.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Depending on the situation, Stjohnswood Removals relies on one or more of the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes preparing quotes, arranging services, completing removals, and managing payments.

Legal Obligation

We may process data where we are required to do so by law, such as for tax records, accounting, insurance, or compliance with regulatory obligations.

Legitimate Interests

We may process personal data where it is necessary for our legitimate interests and where those interests are not overridden by your rights and freedoms. This may include managing our business, improving our services, protecting against fraud, and responding to enquiries or complaints.

Consent

In limited circumstances, we may rely on your consent, for example where it is required for a specific optional activity. If we rely on consent, you have the right to withdraw it at any time.

4. Data Sharing and Processors

We may share personal data with trusted third parties where necessary to provide our services or comply with legal duties. These third parties act as data processors or independent controllers depending on the circumstances.

Examples of processors and service providers may include:

Payment processors used to handle card or bank-related transactions.
Accountancy or bookkeeping providers used for financial administration and tax compliance.
IT and cloud storage providers used to host records, emails, and business systems.
Communication service providers used for sending messages, booking confirmations, or service updates.
Insurance providers where a claim or incident must be assessed.
Legal or professional advisers where advice is needed or legal obligations apply.

We require all processors to act only on our instructions, to protect your personal data, and to keep it secure. They are not allowed to use your information for their own purposes unless they are acting as an independent controller under their own legal obligations.

We may also disclose personal data if required by law, court order, or regulatory authority, or if necessary to protect our rights, property, staff, or customers.

5. International Transfers

Where personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place. These safeguards may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms. We take steps to ensure your information remains protected to UK GDPR standards.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, insurance, or reporting requirements. Retention periods may vary depending on the type of data and the reason for processing.

Quotation and enquiry records may be kept for a reasonable period to manage follow-up communications and business administration.
Customer service and contract records may be retained for the duration of the service relationship and afterwards where needed for dispute handling or warranty purposes.
Financial and tax records are usually retained for the period required by law.
Insurance or claim-related records may be retained until the matter is fully resolved and for any further required limitation period.

When personal data is no longer needed, it is securely deleted, anonymised, or destroyed. We do not keep personal data indefinitely.

7. Data Security

We take appropriate technical and organisational measures to protect personal data from unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and data minimisation practices.

Although we take security seriously, no system can be guaranteed completely secure. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will respond in line with our legal obligations.

8. Your Rights

As a data subject under UK GDPR, you have several rights in relation to your personal data. These rights are not absolute and may be subject to legal exceptions or limitations. Your rights include:

The right to be informed about how your data is collected and used.
The right of access to request a copy of the personal data we hold about you.
The right to rectification if any personal data is inaccurate or incomplete.
The right to erasure in certain circumstances, also known as the right to be forgotten.
The right to restrict processing in certain situations.
The right to data portability where processing is based on consent or contract and carried out by automated means.
The right to object to processing based on legitimate interests or direct marketing.
The right to withdraw consent where consent is the basis for processing.

If you exercise any of these rights, we may need to verify your identity before responding. We aim to respond within the timescales required by law.

9. Automated Decision-Making

We do not rely on fully automated decision-making that produces legal or similarly significant effects on individuals. If this changes, we will provide clear information about the logic involved and your available rights.

10. Children’s Data

Our services are intended for adults and business or household customers arranging removals. We do not knowingly collect personal data from children unless it is necessary and lawful in a specific circumstance related to the service request.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our practices, or our services. Any updated version will apply from the date it is made available. We encourage you to review this policy periodically so you remain informed about how we handle personal data.

12. Summary of Our Commitment

Stjohnswood Removals is committed to protecting personal data and using it responsibly. We collect only what we need, process it on a lawful basis, retain it for no longer than necessary, and share it only with trusted processors or where the law requires it. We also recognise and respect your rights under data protection law.

By using our services, making an enquiry, or otherwise providing us with personal data, you acknowledge that this Privacy Policy applies to you as a customer of Stjohnswood Removals in area.

This policy is intended to be clear, fair, and compliant with applicable UK data protection requirements.