Privacy Policy - Movers Finchley

This Privacy Policy explains how Movers Finchley collects, uses, stores, shares, and protects personal data. It applies to all Movers Finchley customers in the area, including anyone who requests, books, receives, or enquires about our moving-related services. We are committed to handling personal information in a lawful, fair, and transparent way in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our services, you acknowledge that we may process your personal data as described in this policy. We only collect information that is relevant and necessary for providing our services, managing customer relationships, meeting legal obligations, and improving our operations.

1. Information We Collect

We may collect and process the following types of personal data:

Identity details: name, title, and any other information needed to identify you.
Contact details: postal address, email address, and telephone number.
Service details: moving date, property access information, inventory information, special handling needs, and service preferences.
Billing and payment information: records required to process invoices, quotes, or payments.
Communication records: messages, notes from calls, and any correspondence you send to us.
Technical information: basic website or device information if you interact with our digital services, such as IP address or browser type, where applicable.
Usage and operational records: service history, scheduling notes, and records of complaints or feedback.

We do not collect more information than we need. Where possible, we limit the data we process to what is required for a specific service, quotation, or legal purpose. If you choose not to provide certain information, we may be unable to deliver some or all of our services effectively.

2. How We Use Personal Data

We use your personal data for the following purposes:

to respond to enquiries and provide quotations;
to arrange and deliver moving services;
to communicate with you about bookings, schedules, and service changes;
to prepare invoices and process payments;
to manage customer service, complaints, and aftercare;
to maintain business records and service history;
to comply with legal, tax, accounting, and regulatory requirements;
to improve service quality, internal processes, and customer experience;
to protect our business, staff, customers, and property against fraud, misuse, or legal claims.

We will only use your information for legitimate purposes and will not process it in ways that are incompatible with those purposes. Where we need to use your data for a new purpose, we will make sure we have a valid lawful basis before doing so.

3. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis for processing personal data. Depending on the situation, we rely on one or more of the following bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes providing quotes, managing bookings, completing moves, and handling payments. Without this information, we may not be able to provide the requested service.

Legal Obligation

We may process data where necessary to comply with legal requirements, including tax, accounting, record-keeping, or other obligations imposed by law.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include managing customer communications, preventing fraud, improving service delivery, maintaining internal records, and protecting our business operations.

Consent

In limited cases, we may rely on your consent, for example where a specific type of optional communication or data use requires it. Where consent is used, you may withdraw it at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

4. Sharing Your Information and Processors

We may share personal data with trusted third parties where necessary to operate our services and meet our obligations. These third parties act either as processors or independent controllers depending on the service provided.

Processors are service providers that process data on our behalf and under our instructions. They may include:

payment service providers;
accounting and bookkeeping services;
IT and cloud storage providers;
customer relationship management tools;
email and communication service providers;
administrative or operational support providers.

We require processors to handle personal data securely, only for the agreed purpose, and in accordance with data protection law. We do not allow them to use your information for their own unrelated purposes.

We may also share data with other parties where required by law, to protect our legal rights, to prevent fraud, or in connection with a business transaction such as a reorganisation or transfer of assets. Where personal data is shared with independent controllers, they will be responsible for their own data protection obligations.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting, contractual, and operational requirements. Retention periods vary depending on the type of data and the reason it is held.

For example:

Quotation and booking records may be kept for a reasonable period after the service is complete to manage follow-up queries or disputes.
Financial and invoicing records may be retained for the period required by tax and accounting laws.
Customer correspondence may be retained for as long as needed to resolve issues, maintain accurate records, or support legitimate business purposes.

When personal data is no longer needed, we will take appropriate steps to delete, anonymise, or securely destroy it. We regularly review the information we hold to ensure it is not kept longer than necessary. This retention approach is designed to balance operational needs with your privacy rights.

6. Data Security

We take the security of personal data seriously and use appropriate technical and organisational measures to protect it from unauthorised access, disclosure, loss, alteration, or destruction. These measures may include access controls, secure storage, staff confidentiality obligations, and procedures for handling data securely.

Although we take reasonable steps to protect your information, no system can be guaranteed completely secure. If a data breach were to occur, we would assess the situation promptly and take action in accordance with applicable law.

7. Your Rights

Under data protection law, you have important rights in relation to your personal data. These may include:

The right of access – to request a copy of the personal data we hold about you;
The right to rectification – to ask us to correct inaccurate or incomplete information;
The right to erasure – to request deletion of your data in certain circumstances;
The right to restriction – to ask us to limit how we use your data in some cases;
The right to data portability – to receive certain data in a structured, commonly used format, where applicable;
The right to object – to object to processing based on legitimate interests or direct marketing;
The right to withdraw consent – where processing is based on consent;
The right to complain – to raise concerns with the relevant data protection authority.

Some rights are subject to conditions and may not apply in every situation. If you exercise a right, we may need to verify your identity before responding. We will always respond within the time limits required by law and will explain any refusal where a request cannot be fully granted.

8. International Transfers

If any personal data is transferred outside the United Kingdom, we will ensure appropriate safeguards are in place to protect that information. This may include the use of approved contractual protections or transfers only to countries recognised as offering adequate protection.

9. Children’s Data

Our services are not directed at children, and we do not knowingly collect personal data from children except where it is necessary in connection with a customer request and appropriate lawful basis exists. If we become aware that we have collected data without a valid basis, we will take steps to delete it where required.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or service arrangements. Any revised version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their personal data is handled.

11. Summary of Our Approach

Movers Finchley processes personal data only where necessary, uses it for clear and lawful purposes, and keeps it only for as long as needed. We aim to be transparent about how data is used and to respect the rights of every customer in the area. If we process your information, we do so with care, security, and a commitment to GDPR principles such as lawfulness, fairness, data minimisation, and storage limitation.

This Privacy Policy is intended to provide a clear explanation of our data practices for all Movers Finchley customers in the area.