Privacy Policy - Removal Company Kingston

This Privacy Policy explains how Removal Company Kingston collects, uses, stores, shares, and protects personal data. It applies to all Removal Company Kingston customers in the area, including anyone who requests a quote, books a service, or communicates with us in connection with a removal, packing, storage, or related service. We are committed to handling personal data in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Removal Company Kingston is the data controller for the personal information described in this policy. This means we decide how and why your personal data is used. We only process data where we have a valid legal basis and only for purposes that are relevant to delivering our services, managing our business, and meeting legal obligations.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity details: name, title, and any relevant business name if you are booking on behalf of an organisation.
Contact details: address, email address, telephone number, and moving address details.
Service information: details about your move, such as property type, volume of items, preferred dates, access details, and any special handling requirements.
Payment information: billing details and transaction records. We do not usually store full card details where payment processors handle them securely.
Communication records: emails, messages, call notes, and booking correspondence.
Website and technical data: limited technical information such as device type, browser type, and basic usage data if collected through our systems.
Optional information: any extra details you provide to help us carry out the service safely or efficiently.

We aim to collect only the information that is necessary for the specific purpose for which it is used. We do not knowingly collect more data than is required to provide a removal service, manage bookings, or meet our obligations.

3. How We Use Personal Data

We use your personal data for the following purposes:

to provide quotes and manage bookings;
to plan and carry out removal services;
to communicate with you about your move;
to process payments, invoices, and refunds where applicable;
to maintain records of our services and customer interactions;
to handle complaints, queries, or disputes;
to improve our services, operations, and customer experience;
to comply with legal, regulatory, tax, or insurance requirements;
to protect our business, staff, customers, and property.

We only use personal data for legitimate business purposes and in a manner that respects your privacy.

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for each type of processing. Removal Company Kingston relies on the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes preparing a quote, confirming a booking, planning the move, and carrying out removal services.

Legitimate Interests

We may process data where it is necessary for our legitimate interests, provided your rights and freedoms do not override those interests. Examples include managing our business, keeping records, preventing fraud, improving operations, and handling customer service matters. We carry out assessments to ensure these interests are appropriate and proportionate.

Legal Obligation

We process data when required to comply with the law, such as tax, accounting, insurance, or record-keeping obligations.

Consent

In limited cases, we may rely on your consent, for example if we use certain optional marketing communications or specific categories of information where consent is the most appropriate basis. Where consent is used, you may withdraw it at any time.

5. Sharing Personal Data

We may share personal data with trusted third parties where necessary for our business operations or legal compliance. These parties act as processors or independent controllers depending on the service they provide.

Payment providers: to process secure transactions.
IT and software providers: to support scheduling, customer records, and secure data storage.
Accountants and professional advisers: for financial, audit, tax, or legal support.
Insurance providers: where necessary to handle claims or risk management.
Subcontracted service providers: where needed to deliver part of the removal service.
Regulators, authorities, or law enforcement: where disclosure is required by law.

We require processors to protect personal data and to process it only in accordance with our instructions and applicable data protection law. We do not sell your personal data.

6. Processors and Data Protection Controls

Where we use processors, we ensure that appropriate contracts are in place. These contracts require processors to:

process data only on our instructions;
use appropriate technical and organisational security measures;
keep data confidential;
assist us in meeting data subject rights requests where relevant;
delete or return data when processing is complete, unless retention is legally required.

We take reasonable steps to choose processors that provide sufficient guarantees regarding security and compliance. Access to personal data is limited to staff and service providers who need it for legitimate business purposes.

7. Data Retention

We keep personal data only for as long as necessary for the purpose it was collected, or as required by law. Retention periods may vary depending on the type of data and the reason for processing. As a general approach:

quotation and booking records may be kept for a reasonable period to manage customer service and accounting requirements;
financial and tax records are kept in line with legal obligations;
correspondence and complaint records are retained for as long as needed to resolve issues and maintain business records;
where consent has been given for marketing, data is kept until consent is withdrawn or the data is no longer needed.

When personal data is no longer required, we will securely delete, destroy, or anonymise it. We do not retain data indefinitely.

8. Data Security

We use appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and regular review of our data handling practices. While no system can be guaranteed completely secure, we work to protect your information to a standard appropriate to the risk.

9. International Transfers

If any of our processors or service providers store or access data outside the United Kingdom, we will ensure that appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms permitted under data protection law.

10. Your Rights

Under data protection law, you may have the following rights in relation to your personal data:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to ask us to correct inaccurate or incomplete data.
Right to erasure: to request deletion of your data in certain circumstances.
Right to restriction: to ask us to limit processing in certain situations.
Right to data portability: to request transfer of certain data to you or another organisation.
Right to object: to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent: where processing relies on consent, you may withdraw it at any time.

These rights are not absolute and may be subject to legal exemptions or limitations. If you make a request, we may need to verify your identity before responding. We will respond within the time limits required by law.

11. Cookies and Similar Technologies

If our systems use cookies or similar technologies, they may be used for basic functionality, security, and limited analytics. Where required, we will provide appropriate information and choices about such technologies. Any use of cookies will be limited to what is necessary and lawful.

12. Children’s Data

Our services are intended for adults. We do not knowingly collect personal data from children unless it is provided by an adult customer as part of a service arrangement. If we become aware that we have collected children’s data without appropriate authority, we will take steps to delete it promptly.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data processing practices. The latest version will apply from the date it is issued. We encourage customers in the area to review this policy periodically to stay informed about how their personal data is handled.

14. Summary of Our Commitment

Removal Company Kingston is committed to protecting the privacy of all customers in the area. We collect only the personal data needed to provide and manage our services, process it under a valid lawful basis, share it only with appropriate processors and trusted third parties where necessary, retain it for no longer than required, and respect your rights under data protection law. Your privacy matters to us, and we aim to handle your information responsibly, transparently, and securely.