Privacy Policy - Crystal Palace Movers

This Privacy Policy explains how Crystal Palace Movers collects, uses, stores, shares, and protects personal data when providing moving and related services. It applies to all Crystal Palace Movers customers in the area, including individuals who request quotes, book services, communicate with us, or otherwise use our services. We are committed to handling personal information in line with the UK GDPR and the Data Protection Act 2018. This policy is written to be clear, fair, and transparent, and it describes the types of data we process, the lawful bases we rely on, how long we keep information, the third parties that may process data on our behalf, and the rights available to you.

1. Data We Collect

We collect personal data only where it is relevant and necessary for providing moving services, managing our business, and meeting legal obligations. The information we process may include the following:

Identity details such as your name, title, and any business or household identifier you provide.
Contact details such as your postal address, email address, and telephone number.
Service and booking details including the date of your move, property addresses, inventory information, access notes, and service preferences.
Payment and billing information such as transaction records, invoice details, and payment status.
Communication records including enquiries, complaints, feedback, and messages exchanged with our team.
Operational information such as vehicle allocation, route planning, staff scheduling, and delivery status.
Special category data only where strictly necessary and where you choose to disclose it, for example information relating to health or mobility issues that may affect a move. We will only process this data when a lawful basis applies and additional safeguards are in place.
Technical data such as device, browser, or usage information if you interact with digital systems used to manage bookings or enquiries.

We generally collect data directly from you, but in some cases we may receive information from third parties involved in your move, such as estate agents, landlords, or payment providers, where this is relevant and permitted by law.

2. How We Use Personal Data

Crystal Palace Movers uses personal data for the following purposes:

to provide quotations, confirm bookings, and deliver removal or related services;
to plan and manage logistics, including staffing, vehicle assignment, and route coordination;
to communicate with you about your move, service updates, and any issues that arise;
to process payments, issue invoices, and maintain financial records;
to handle complaints, claims, and customer support matters;
to improve our services, operations, and customer experience;
to comply with legal, regulatory, tax, accounting, and insurance obligations;
to protect our business, staff, and customers from fraud, misuse, or security incidents.

We only process personal data where there is a valid reason to do so. Our processing is carried out in a manner that is lawful, fair, and transparent.

3. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis before processing personal data. Depending on the situation, we rely on one or more of the following bases:

Contract

We process data when it is necessary to enter into or perform a contract with you. This includes providing quotes, arranging removals, managing bookings, and completing the service you requested.

Legal Obligation

We may process information to comply with legal duties, such as tax, accounting, insurance, employment, health and safety, or record-keeping requirements.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. Examples include managing customer relationships, improving service delivery, preventing fraud, and maintaining secure systems. We always consider whether the processing is proportionate and limited to what is necessary.

Consent

In limited cases, we may rely on your consent, particularly for optional communications or the processing of certain special category data where consent is the appropriate basis. Where consent is used, you may withdraw it at any time.

Vital Interests

In rare cases, we may process personal data to protect someone’s life or physical safety during an urgent situation.

4. Retention of Personal Data

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, and to satisfy any legal, accounting, tax, or insurance requirements. Retention periods vary depending on the nature of the data and the reason it was collected.

Customer and booking records are typically retained for the duration of the service relationship and for a reasonable period afterwards to handle follow-up, disputes, or claims.
Financial and invoice records are retained for the period required by applicable tax and accounting laws.
Complaint and claims information may be kept longer where necessary to defend legal claims or manage insurance matters.
Communication records are retained only as long as needed for service administration and quality assurance.

When data is no longer required, we will securely delete, anonymise, or archive it in accordance with our retention practices. We do not keep personal information indefinitely.

5. Processors and Third Parties

We may use trusted third-party processors to help us operate efficiently and deliver services. These processors only act on our instructions and are required to protect personal data through appropriate contractual and security measures. Depending on the service involved, processors may include:

payment processing providers;
accounting and bookkeeping services;
customer relationship and scheduling software providers;
IT support, cloud storage, and data security providers;
insurance partners and claims administrators;
professional advisers such as auditors, lawyers, and tax advisers;
subcontracted operational partners involved in the completion of a move, where necessary.

We may also disclose personal data where required by law, by a court order, or to public authorities when there is a lawful request. Any sharing is limited to what is necessary for the specific purpose.

6. Data Security

We use appropriate technical and organisational measures to protect personal information from unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff training, password protection, and confidentiality obligations. While no system can be guaranteed to be completely secure, we take data protection seriously and regularly review our safeguards.

7. Your Rights

Depending on the circumstances and the lawful basis used, you may have the following rights under data protection law:

Right of access — to request a copy of the personal data we hold about you.
Right to rectification — to ask us to correct inaccurate or incomplete information.
Right to erasure — to request deletion of your data in certain situations.
Right to restrict processing — to ask us to limit how we use your data in certain cases.
Right to object — to object to processing based on legitimate interests or direct marketing.
Right to data portability — to receive certain data in a structured, commonly used, machine-readable format where applicable.
Right to withdraw consent — where processing is based on consent, you can withdraw it at any time.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office if you believe your data protection rights have been infringed. We encourage you to raise concerns directly with us first so we can address them promptly and fairly.

8. Children’s Data

Our services are intended for adults arranging removals or related services. We do not knowingly collect personal data from children except where it is incidentally included in move-related records, such as family household information, and only where it is necessary for service delivery.

9. International Transfers

Where personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place to protect it in line with applicable data protection laws. Such safeguards may include adequacy regulations or approved contractual protections.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection practices. Any revised version will apply from the date it is published or otherwise communicated. We encourage you to review this policy periodically so you remain informed about how we protect your personal data.

In summary: Crystal Palace Movers processes personal data only when necessary, uses it for legitimate moving and business purposes, keeps it for appropriate periods, and protects it through responsible data handling practices. This policy applies to all Crystal Palace Movers customers in the area, and we remain committed to respecting your privacy at every stage of your move.