Privacy Policy - Elephantandcastle Removals

This Privacy Policy explains how Elephantandcastle Removals collects, uses, stores, shares, and protects personal data when providing removal, storage, packing, delivery, and related services. It applies to all Elephantandcastle Removals customers in the area and to anyone who contacts us, requests a quotation, books a service, or otherwise interacts with us in connection with our services.

We are committed to handling personal data lawfully, fairly, and transparently in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy is intended to help you understand what information we collect, why we collect it, how long we keep it, who we share it with, and what rights you have.

1. Information We Collect

We collect only the personal data necessary to provide and manage our services effectively. The types of information we may collect include:

Identity details such as your name, title, and, where relevant, company name.
Contact details such as your phone number, email address, and service address.
Service information including details about your move, property access, inventory, preferred dates, special handling requirements, and delivery instructions.
Payment and billing information such as invoicing details, payment status, and transaction references.
Communication records including emails, calls, messages, and notes from customer service interactions.
Technical information if you use any online enquiry tools, such as IP address, device type, browser information, and usage data.
Identification and verification data where required for security, fraud prevention, or service confirmation.

We do not intentionally collect special category data unless you choose to provide it to us or it is strictly necessary for a specific service requirement. If such information is provided, we will only process it where a lawful basis applies and where appropriate safeguards are in place.

2. How We Use Your Data

Elephantandcastle Removals uses personal data for the following purposes:

To provide quotations, schedule removals, and deliver the services you request.
To manage bookings, changes, cancellations, and customer support.
To prepare invoices, process payments, and maintain financial records.
To communicate with you about your service, including updates, instructions, and confirmations.
To protect against fraud, misuse, property damage, and other security risks.
To meet legal, regulatory, accounting, and insurance obligations.
To improve service quality, train staff, and analyse operational performance.
To respond to complaints, claims, or legal disputes.

We will only use your data for the purposes stated in this policy or for compatible purposes that you would reasonably expect. We do not sell your personal data.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Elephantandcastle Removals relies on the following lawful bases, depending on the context:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes managing quotations, bookings, removals, storage arrangements, payments, and customer support.

Legal Obligation

We may process data where required to comply with legal obligations, such as tax, accounting, insurance, employment, health and safety, or record-keeping requirements.

Legitimate Interests

We may process data for our legitimate interests where those interests are not overridden by your rights and freedoms. This includes service improvement, fraud prevention, operational management, customer communication, and business security. Where we rely on legitimate interests, we consider the potential impact on your privacy and apply appropriate safeguards.

Consent

In limited circumstances, we may rely on your consent, for example where you have asked us to send certain marketing communications or where consent is required for optional processing. If we rely on consent, you may withdraw it at any time.

4. Sharing Your Information

We may share personal data with trusted third parties where necessary to deliver our services, operate our business, or comply with legal obligations. These third parties may include:

Subcontractors and service partners who assist with removals, storage, packing, delivery, or specialist handling.
Payment providers who process transactions securely.
IT and software providers who support our customer systems, scheduling tools, and data storage.
Professional advisers such as accountants, insurers, legal advisers, and auditors.
Public authorities where disclosure is required by law or necessary to protect rights, property, or safety.

Where we use processors, they are only permitted to process personal data on our instructions and must implement appropriate security measures. All processors are required to protect your information and use it only for authorised purposes.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, insurance, and reporting obligations.

Retention periods may vary depending on the type of data and the service involved, but typically include:

Quotation and enquiry data: kept for a limited period to manage follow-up, service records, and business administration.
Booking and service data: retained for the duration of the service and for a reasonable period afterwards to address disputes or claims.
Financial records: retained for the period required under tax and accounting laws.
Complaint and correspondence records: retained as long as necessary to resolve issues and maintain evidence of service handling.

When personal data is no longer required, it is securely deleted, anonymised, or archived in line with our retention procedures. We review retention regularly to avoid keeping data longer than needed.

6. Data Security

We take appropriate technical and organisational measures to protect personal data from unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures may include access controls, secure storage, staff training, and controlled data-sharing procedures.

Although we take strong steps to protect information, no system can be guaranteed completely secure. If a personal data breach occurs that is likely to pose a risk to your rights and freedoms, we will respond in accordance with applicable law.

7. Your Rights

Under data protection law, you have several rights regarding your personal data. Subject to legal limits and verification of identity, you may have the right to:

Access a copy of the personal data we hold about you.
Rectification of inaccurate or incomplete data.
Erasure of your data in certain circumstances.
Restriction of processing in certain situations.
Object to processing based on legitimate interests or direct marketing.
Data portability for information you provided to us where processing is based on consent or contract and carried out by automated means.
Withdraw consent at any time where processing is based on consent.

You also have the right to complain to the relevant data protection authority if you believe your rights have been infringed. We encourage you to raise concerns with us first so we can try to resolve them promptly and fairly.

8. Marketing Communications

We may send service-related messages that are necessary for bookings, quotations, or customer support. Where we send optional marketing communications, we will do so only where permitted by law and, if required, with your consent.

You can object to marketing communications at any time. If you opt out, we will stop sending such messages, though we may still contact you for essential service or legal matters.

9. International Transfers

Where personal data is transferred outside the United Kingdom, we will ensure appropriate safeguards are in place so that your information remains protected to the standard required by data protection law. These safeguards may include adequacy regulations, standard contractual clauses, or equivalent legal mechanisms.

10. Children’s Data

Our services are intended for adults and business customers. We do not knowingly collect personal data from children except where it is incidental to a household move or where necessary for service provision and handled appropriately. If we become aware that we have collected data unlawfully, we will take reasonable steps to delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practices, or service operations. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically to remain informed about how we handle personal data.

12. Summary of Our Commitments

We collect only the data needed to provide and manage Elephantandcastle Removals services.
We process data on lawful bases including contract, legal obligation, legitimate interests, and consent where appropriate.
We share data only with trusted processors and partners under strict instructions and safeguards.
We keep data only as long as necessary and dispose of it securely when no longer needed.
We respect your rights to access, correct, delete, restrict, object, and withdraw consent where applicable.

By using Elephantandcastle Removals services, you acknowledge that your personal data may be processed in accordance with this Privacy Policy.