Privacy Policy - Westhampstead Removals

This Privacy Policy explains how Westhampstead Removals collects, uses, stores, shares, and protects personal data. It applies to all Westhampstead Removals customers in the area, including anyone who requests a quote, books a service, receives a service, or communicates with us in connection with a removal, storage, packing, or related moving service.

We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We only process personal data where we have a valid lawful basis and only for purposes that are necessary for operating our services, meeting legal obligations, and improving service quality.

1. Personal Data We Collect

We may collect and process different categories of personal data depending on how you interact with us. This may include:

Identity data such as your name and title.
Contact data such as your address, email address, and telephone number.
Service details such as moving dates, property access notes, inventory information, packing requirements, and delivery instructions.
Billing and payment data such as invoice details, payment status, and transaction references.
Communication data such as enquiries, complaints, feedback, and records of correspondence.
Technical data such as basic device or usage information if you communicate with us electronically.
Special category data only where you voluntarily provide it and where it is relevant to the service, for example if you tell us about mobility needs or access arrangements that may affect the move.

We do not seek to collect unnecessary personal data. If we ever need to process sensitive information, we do so only where required and subject to appropriate safeguards.

2. How We Use Personal Data

We use personal data for the following purposes:

to provide quotations and assess service requirements;
to arrange, manage, and complete removal services;
to plan logistics, allocate staff, and coordinate vehicles or equipment;
to communicate with you about bookings, timing, access, and service changes;
to issue invoices, process payments, and manage accounting records;
to respond to questions, complaints, or claims;
to maintain service and operational records;
to comply with legal and regulatory obligations;
to prevent fraud, misuse, or unlawful activity;
to improve our services, internal processes, and customer experience.

We only use personal data for a purpose that is compatible with the reason it was collected. Where required, we will tell you if we intend to use your data for a new purpose.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each processing activity. Depending on the circumstances, Westhampstead Removals relies on one or more of the following lawful bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes preparing quotations at your request, managing a booking, carrying out the move, handling payments, and providing related services.

Legal obligation

We may process data where necessary to comply with legal requirements, such as accounting, tax, insurance, health and safety, or dispute resolution obligations.

Legitimate interests

We may process data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This can include managing enquiries, improving operations, maintaining records, preventing abuse, and ensuring effective service delivery.

Consent

In limited situations, we may rely on your consent. For example, if you provide optional information that is not necessary for the service, or if a specific form of communication requires consent under applicable law. Where we rely on consent, you may withdraw it at any time.

Vital interests and public task

These lawful bases are unlikely to apply in most removal-service situations, but they may apply in exceptional circumstances where necessary to protect someone???s life or where required by public authorities.

4. Sharing Personal Data and Processors

We may share personal data with trusted third parties when this is necessary to deliver our services, manage our business, or comply with the law. These third parties may act as processors or independent controllers depending on the circumstances.

Examples of processors or service providers may include:

IT and cloud service providers that host systems, email, storage, or backups;
accounting and invoicing providers that support billing and financial records;
payment processing services used to complete transactions;
communication platforms used to manage messages or scheduling;
professional advisers such as accountants, insurers, or legal advisers;
subcontractors or operational partners involved in fulfilling a booked service where necessary.

Where a third party acts as a processor, it only processes personal data on our instructions and is required to keep it secure, confidential, and used only for the agreed purpose.

We may also disclose personal data where required by law, court order, regulatory authority, or to establish, exercise, or defend legal claims.

5. Data Retention

We keep personal data only for as long as it is needed for the purpose for which it was collected, and to meet legal, accounting, tax, and insurance requirements. Retention periods vary depending on the type of information and the reason it is held.

In general:

quotation and booking records may be retained for a reasonable period to manage enquiries, service history, and dispute handling;
financial and transaction records are typically retained for the period required by tax and accounting rules;
complaints, claims, and incident records may be retained longer where necessary to resolve disputes or comply with insurance obligations;
data no longer needed is securely deleted, anonymised, or archived with appropriate access controls.

When we decide how long to keep data, we consider the amount, nature, sensitivity, potential risk of harm, the purpose of processing, and whether legal obligations require us to retain it for a longer period.

6. Data Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access restrictions, secure storage, password protection, and staff confidentiality obligations.

While we take reasonable steps to protect data, no system can be guaranteed to be completely secure. If a personal data breach occurs and we are required to do so under law, we will take appropriate steps to investigate, mitigate harm, and notify affected individuals and regulators where applicable.

7. International Transfers

Where personal data is transferred outside the UK, we will only do so where appropriate safeguards are in place and the transfer is permitted by data protection law. Such safeguards may include an adequacy decision or approved contractual protections.

8. Your Rights

You have rights under data protection law in relation to your personal data. Subject to legal conditions and exceptions, these may include:

the right of access to request a copy of the personal data we hold about you;
the right to rectification to correct inaccurate or incomplete information;
the right to erasure to request deletion of your data in certain circumstances;
the right to restrict processing to limit how we use your data in certain situations;
the right to object to processing based on legitimate interests or direct marketing;
the right to data portability for data you have provided to us, where applicable;
the right to withdraw consent where processing is based on consent;
the right to complain to the Information Commissioner???s Office if you believe your data rights have been infringed.

We will respond to valid requests in accordance with applicable law. In some cases, we may need to verify your identity before responding to protect your privacy and prevent unauthorised disclosure.

9. Children???s Data

Our services are intended for adults and businesses arranging removals. We do not knowingly collect personal data from children unless it is incidentally included in records necessary for service delivery and handled lawfully.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, operational practice, or service arrangements. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain aware of how their data is handled.

11. Summary of Our Commitment

Westhampstead Removals respects your privacy and is committed to protecting your personal data. We collect only what is needed, use it for clear and lawful purposes, keep it only as long as necessary, and share it only with trusted processors or where the law requires it. We aim to process all personal data fairly, securely, and transparently for every customer in the area.

By using our services, making an enquiry, or booking a move, you acknowledge that personal data may be processed in accordance with this Privacy Policy.