Privacy Policy - Removals Soho

This Privacy Policy explains how Removals Soho collects, uses, stores, shares, and protects personal data in connection with the services we provide. It applies to all Removals Soho customers in the area, including individuals, households, businesses, and anyone who interacts with us in relation to removals, packing, storage, delivery, and associated services. We are committed to handling personal data in a lawful, fair, transparent, and secure manner in line with the UK GDPR and the Data Protection Act 2018.

1. Information We Collect

We collect only the personal data that is necessary to provide our services, manage our relationship with customers, and meet legal and operational obligations. The exact information collected may vary depending on the nature of the service requested. Data collection may include:

Identity details such as name, title, and business name where applicable.
Contact information including address, email address, telephone number, and preferred communication details.
Service information such as property access notes, moving date, inventory details, delivery requirements, packing preferences, and instructions relevant to the removal.
Payment and billing information necessary to process transactions, issue invoices, and maintain accounting records.
Correspondence including records of enquiries, complaints, quotes, feedback, and service updates.
Technical and usage information where relevant, such as basic logs that support website or system security and performance.
Special category data only when strictly necessary and where a lawful condition applies, for example information relating to accessibility or health needs that affect the moving process.

We do not intentionally collect more information than is needed. If we receive data that is not required for the service, we will take appropriate steps to limit its use or delete it where possible.

2. How We Use Personal Data

We use personal data for clearly defined purposes connected to delivering our services and operating our business. These uses may include:

Providing quotes and assessing service requirements.
Booking, scheduling, and carrying out removals and related tasks.
Communicating with customers about arrangements, changes, and service progress.
Processing payments, issuing invoices, and keeping financial records.
Maintaining security, preventing fraud, and protecting our staff, vehicles, and property.
Handling complaints, claims, and service issues.
Meeting legal, tax, insurance, and regulatory obligations.
Improving our services, operational planning, and customer experience.

We may also use personal data in a limited way for internal administration, quality assurance, and record management. Where required, we will anonymise or pseudonymise data to reduce privacy risks.

3. Lawful Basis for Processing

We process personal data only where we have a valid lawful basis under the UK GDPR. Depending on the circumstances, our lawful bases may include:

Contract - processing is necessary to take steps at your request before entering into a contract or to perform our contract with you.
Legal obligation - processing is necessary for us to comply with applicable law, such as tax, accounting, insurance, or record-keeping duties.
Legitimate interests - processing is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. This may include service improvement, internal administration, and security management.
Consent - in limited situations where we ask for your permission, such as for optional marketing or the use of certain categories of data, we will rely on consent and you may withdraw it at any time.

Where special category data is processed, we will also identify an additional condition under data protection law. We only do this when it is necessary and relevant to the service being provided.

4. Sharing Data and Processors

We may share personal data with trusted third parties when necessary to deliver our services, meet legal requirements, or protect our legitimate business interests. These third parties may act as processors or, in some cases, independent controllers. We take steps to ensure that any sharing is limited and appropriate.

Typical processors may include:

Payment providers that process card or bank transactions securely.
Accounting and bookkeeping services that help manage invoices, payments, and financial compliance.
IT and cloud service providers that store or support our business systems, emails, or data backups.
Scheduling and operational software providers used for job management and customer administration.
Professional advisers such as legal, insurance, or tax advisers where needed.
Subcontractors or service partners assisting with removals, packing, storage, or delivery where this is necessary for service delivery.

All processors are required to handle personal data securely and only on our instructions, with appropriate confidentiality and data protection commitments. We do not sell personal data. If data is transferred outside the UK, we will ensure suitable safeguards are in place, such as approved contractual protections or adequacy measures.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, and reporting obligations. The retention period depends on the type of data, the nature of the service, and any legal requirement that applies.

In general:

Customer service records are kept for the period needed to manage the service and any follow-up issues.
Financial and tax-related records are retained for the period required by law.
Claims, disputes, and complaint records may be kept longer where necessary to defend or pursue legal claims.
Data no longer needed is securely deleted, anonymised, or archived in line with our retention practices.

We review retention periods regularly to ensure that data is not kept longer than necessary. Where it is no longer needed, we dispose of it securely.

6. Your Rights

Under data protection law, you have a number of rights regarding your personal data. These rights may be subject to conditions and exemptions, but we will always consider requests carefully and respond appropriately. Your rights may include:

Right of access - to request a copy of the personal data we hold about you.
Right to rectification - to ask us to correct inaccurate or incomplete data.
Right to erasure - to request deletion of your data in certain circumstances.
Right to restriction - to ask us to limit how we use your data in certain situations.
Right to object - to object to processing based on legitimate interests or direct marketing.
Right to data portability - to receive certain data in a structured, commonly used format where applicable.
Right to withdraw consent - where processing is based on consent, you may withdraw it at any time.

You also have the right to raise concerns about our handling of personal data with the relevant supervisory authority. We encourage you to contact us first so we can try to resolve any issue promptly and fairly.

7. Security of Personal Data

We use reasonable technical and organisational measures to protect personal data from unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and regular review of internal practices. While no system can be guaranteed completely secure, we work to reduce risk and respond appropriately to incidents.

Our staff and any relevant processors are expected to handle data carefully and only for legitimate business purposes. Access to personal data is restricted to those who need it to perform their duties.

8. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or how we process personal data. Any updated version will apply from the date it takes effect. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

9. Summary of Our Approach

In summary, Removals Soho only collects personal data that is needed to provide moving and related services, operates on a valid lawful basis, uses trusted processors under appropriate safeguards, and retains information only for as long as necessary. We are committed to respecting privacy rights and maintaining clear, responsible data practices for every customer in the area.

We value privacy, use data responsibly, and apply these standards consistently to all Removals Soho customers in the area.

This policy is intended to be clear, fair, and GDPR-compliant.