Privacy Policy - Man With A Van Wapping

This Privacy Policy explains how Man With A Van Wapping collects, uses, stores, shares, and protects personal data. It applies to all Man With A Van Wapping customers in the area, including individuals who request quotes, book services, make enquiries, or otherwise engage our removal and transport services.

We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We aim to process only the information necessary to provide our services and to operate our business effectively.

1. Information We Collect

We may collect and process the following categories of personal data:

Identity data: name, title, and any relevant account or booking identifiers.
Contact data: address, email address, telephone number, and service location details.
Booking and service data: information about requested moving services, dates, access requirements, property details, item lists, delivery instructions, and customer preferences.
Payment data: billing details and transaction records. Where payment is handled by a third-party provider, we may not store full card details ourselves.
Communication data: emails, messages, call notes, complaints, feedback, and records of correspondence.
Technical data: limited information such as device type, browser details, and basic website or system usage data if collected through digital systems.
Special category data: we do not seek to collect sensitive personal data unless it is necessary for a specific lawful purpose and you have provided it voluntarily or it is required to provide a service safely and appropriately.

We generally collect data directly from you when you make an enquiry, request a quotation, confirm a booking, or communicate with us. We may also receive information from third parties where this is necessary for service delivery, such as building managers, letting agents, payment providers, or subcontracted service partners acting on our behalf.

2. How We Use Personal Data

We use personal data for the following purposes:

to provide quotations and respond to enquiries;
to plan, manage, and deliver moving and transport services;
to communicate with you about bookings, timings, access issues, and service updates;
to process payments, refunds, and invoicing;
to maintain business records and service logs;
to handle complaints, disputes, and insurance-related matters;
to improve our services, customer experience, and operational efficiency;
to comply with legal, accounting, tax, and regulatory obligations;
to protect our business, staff, and customers against fraud, misuse, or security incidents.

We will only use your data in ways that are compatible with the purposes explained in this policy.

3. Lawful Basis for Processing

We process personal data only where we have a lawful basis under UK GDPR. Depending on the circumstance, we rely on one or more of the following:

Contract: where processing is necessary to enter into or perform a contract with you, such as managing a booking, arranging transport, or invoicing for services.
Legal obligation: where processing is required to comply with tax, accounting, record-keeping, or other legal duties.
Legitimate interests: where processing is necessary for our legitimate business interests, provided your rights and interests do not override those interests. This may include managing operations, preventing fraud, improving service quality, and keeping internal records.
Consent: where we rely on your clear consent, for example for certain optional communications or uses. You may withdraw consent at any time where consent is the basis for processing.
Vital interests: in rare cases, where processing is necessary to protect someone’s life or physical safety.

We do not use personal data for decisions based solely on automated processing that produce legal or similarly significant effects.

4. Data Sharing and Processors

We may share personal data with trusted third parties where necessary to deliver our services or meet legal obligations. These third parties act as either independent controllers or processors, depending on the situation.

Examples of processors and service partners may include:

IT and cloud service providers: for secure data storage, email hosting, and operational systems.
Payment processors: to handle card and electronic payments securely.
Accounting and bookkeeping providers: to manage invoices, payments, and financial records.
Customer communication tools: for sending booking confirmations or service updates.
Subcontracted moving personnel or logistics partners: where required to complete a booking or provide an associated service.
Insurance providers, surveyors, or legal advisers: where needed to handle claims, disputes, or legal matters.
Regulatory, law enforcement, or public authorities: where disclosure is required by law.

We require processors to handle personal data securely, to act only on our instructions where applicable, and to maintain appropriate technical and organisational measures. We do not sell personal data.

5. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Retention periods may vary depending on the type of information and the reason it is held.

Booking and service records: retained for a period necessary to manage the service, resolve issues, and maintain business records.
Financial and tax records: retained for the period required by accounting and tax laws.
Complaints, claims, and dispute records: retained for the time needed to address the matter and any related legal limitation periods.
Marketing or consent-based records: retained until you withdraw consent or object, where applicable.

When data is no longer required, we will delete, anonymise, or securely destroy it in line with our retention practices.

6. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and restricted access to sensitive records.

Although we work to protect your information, no system can be guaranteed to be completely secure. If a personal data breach occurs and there is a risk to your rights and freedoms, we will take the steps required by applicable law, including notification where appropriate.

7. International Transfers

Where personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place in accordance with data protection law. This may include the use of approved contractual protections or transfers to countries recognised as providing adequate protection.

8. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These may include:

Right of access: to request a copy of the personal data we hold about you;
Right to rectification: to ask us to correct inaccurate or incomplete information;
Right to erasure: to request deletion of your data in certain circumstances;
Right to restriction: to ask us to limit the way we use your data in certain situations;
Right to object: to object to processing based on legitimate interests or direct marketing;
Right to data portability: to receive certain data in a structured, commonly used format where applicable;
Right to withdraw consent: where we rely on consent, you may withdraw it at any time;
Right to complain: to raise concerns with the UK Information Commissioner’s Office or another relevant supervisory authority.

Some rights may be subject to legal limits or exemptions. We will assess and respond to each request in line with applicable law.

9. Cookies and Similar Technologies

If we use digital tools that place cookies or similar technologies on a device, these may be used to support basic website functionality, performance measurement, or user preferences. Where consent is required, we will obtain it before setting non-essential cookies. You can manage cookie preferences through your browser settings or any consent tools provided.

10. Children’s Data

Our services are intended for adult customers and businesses arranging removals or transport. We do not knowingly collect personal data from children unless it is incidentally provided as part of a booking or service arrangement and only where lawful and necessary.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. Any updated version will apply from the date it is published or otherwise communicated. We encourage you to review this policy periodically.

12. Summary of Key Principles

Transparency

We aim to explain clearly what data we collect, why we collect it, and how it is used.

Purpose limitation

We use personal data only for legitimate and specified purposes related to our services and legal duties.

Data minimisation

We collect only the information reasonably needed to provide and improve our services.

Security and accountability

We take steps to protect personal data and maintain responsible data handling practices.

By using the services of Man With A Van Wapping, you acknowledge that your personal data may be processed in accordance with this Privacy Policy. This policy applies to all Man With A Van Wapping customers in the area.