Privacy Policy - Elephant And Castle Movers

This Privacy Policy explains how Elephant And Castle Movers collects, uses, stores, shares, and protects personal data when providing moving, relocation, and related services. It applies to all Elephant And Castle Movers customers in the Elephant and Castle area and to anyone who uses our services in that area. We are committed to handling personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Elephant And Castle Movers acts as a data controller for the personal data we collect in connection with our services. This means we determine why and how personal data is used. In some cases, third-party service providers may process data on our behalf as data processors, following our instructions and contractual requirements.

2. Personal Data We Collect

We collect only the data necessary to deliver moving services, manage customer relationships, comply with legal obligations, and improve our operations. The types of personal data we may collect include:

Identity information such as name and title
Contact details such as address, email address, and telephone number
Service details including moving dates, property access notes, inventory lists, and special handling requirements
Billing and payment information such as payment status, invoicing details, and transaction references
Communication records such as emails, call notes, quotes, and service queries
Technical data such as basic website usage information if you interact with our digital services
Legal and compliance data where required for insurance, dispute resolution, or record-keeping

We do not intentionally collect special category data unless it is strictly necessary and you have provided it voluntarily, or unless we are legally permitted to do so. If such data is included in communications with us, we will treat it with additional care and only use it where lawful.

3. How We Use Your Data

We use personal data for the following purposes:

To provide quotes and confirm bookings
To plan, manage, and complete moving services
To communicate about service updates, access needs, or scheduling changes
To issue invoices, process payments, and manage accounts
To handle complaints, claims, and customer support requests
To maintain business records and meet legal or regulatory requirements
To improve service quality, safety, and operational efficiency
To protect our business against fraud, misuse, or unauthorized activity

We will only use your data in ways that are compatible with the original purpose for which it was collected, unless we have a lawful basis to use it otherwise.

4. Lawful Basis for Processing

Under GDPR, we must have a lawful basis to process personal data. Elephant And Castle Movers relies on the following lawful bases:

Performance of a Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes preparing quotations, arranging removals, handling bookings, and delivering moving services.

Legal Obligation

We may process data to comply with laws and regulations, including tax obligations, accounting rules, insurance requirements, and record retention requirements.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. Examples include service improvement, internal administration, customer support, fraud prevention, and protecting our property and operations.

Consent

In limited situations, we may ask for your consent to process certain data. Where consent is used, you have the right to withdraw it at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.

5. Sharing Your Data and Processors

We may share personal data with trusted third parties where necessary to deliver our services or meet legal obligations. These third parties act either as independent controllers or as processors acting on our behalf.

Examples of processors may include:

IT and cloud storage providers
Payment processing services
Accounting and bookkeeping providers
Customer management and communication tools
Insurance or claims management partners
Professional advisers, where necessary

All processors are required to protect personal data, use it only for the services we instruct them to perform, and maintain appropriate technical and organisational security measures. We do not sell personal data.

We may also disclose data where required by law, court order, law enforcement request, or to protect our legal rights, safety, or property.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes described in this Privacy Policy. Retention periods vary depending on the type of data and why it is held. In general:

Quotation and booking records are retained for a reasonable period to manage enquiries and provide evidence of service requests
Invoice, payment, and accounting records are retained for the period required by law
Customer correspondence may be retained to manage ongoing service issues, complaints, or claims
Operational records are kept only as long as needed for business, insurance, or legal purposes

When personal data is no longer required, we will securely delete it or anonymise it so that it can no longer identify you.

7. Data Security

We take the security of personal data seriously and use appropriate safeguards to reduce the risk of loss, misuse, unauthorised access, alteration, or disclosure. These safeguards may include access controls, secure systems, staff training, and contractual protections with processors.

While we work hard to protect personal data, no method of transmission or storage is completely secure. We therefore cannot guarantee absolute security, but we will act promptly and in accordance with legal requirements if a personal data incident occurs.

8. International Transfers

If any personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place to protect it. This may include the use of UK adequacy regulations, standard contractual clauses, or equivalent legal mechanisms as required by law.

9. Your Rights

As a data subject under GDPR, you have several rights in relation to your personal data. These rights may be subject to legal conditions or exemptions. They include:

Right of access - to request a copy of the personal data we hold about you
Right to rectification - to ask us to correct inaccurate or incomplete data
Right to erasure - to ask us to delete personal data in certain circumstances
Right to restrict processing - to request limited use of your data in certain situations
Right to data portability - to receive certain data in a structured, commonly used format
Right to object - to object to processing based on legitimate interests or direct marketing
Right to withdraw consent - where processing is based on consent

You also have the right to lodge a complaint with the UK Information Commissioner's Office if you believe your data protection rights have been infringed. We encourage you to raise concerns with us first so we can address them promptly and fairly.

10. Children’s Data

Our services are intended for adults and business customers arranging moving services. We do not knowingly collect personal data from children unless it is necessary in connection with a household move and provided by an adult customer. If we become aware that we have collected data inappropriately, we will take appropriate steps to delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in legal requirements, business practices, or service operations. Any updated version will apply from the date it is published, and we recommend reviewing this policy periodically to remain informed about how we handle personal data.

12. Summary of Our Commitment

Elephant And Castle Movers is committed to processing personal data lawfully, fairly, and transparently. We collect only the data needed to provide our moving services, rely on clear lawful bases for processing, retain data only as long as necessary, use trusted processors under strict obligations, and respect your rights under GDPR. We aim to protect your privacy at every stage of our service relationship.