Privacy Policy - Elephant And Castle Man And Van

This Privacy Policy explains how Elephant And Castle Man And Van collects, uses, shares, and protects personal data. It applies to all Elephant And Castle Man And Van customers in area, including individuals who request a quotation, make a booking, receive moving services, or otherwise interact with us in connection with our services. We are committed to handling personal data in a fair, transparent, and lawful manner in accordance with applicable data protection law, including the UK GDPR and the Data Protection Act 2018.

1. Who We Are

Elephant And Castle Man And Van provides removal, delivery, transport, and related moving services. For the purposes of data protection law, we act as the data controller when we determine why and how personal data is used for our business operations. In some cases, we may also act as a data processor when handling information on behalf of another business or organization, where applicable arrangements are in place.

2. Personal Data We Collect

We collect and process only the personal data that is reasonably necessary to provide our services, manage our business, and meet legal obligations. The categories of data may include:

Identity information such as your name, title, and company name, where relevant.
Contact details such as address, email address, and telephone number.
Service information such as booking details, moving dates, inventory details, access requirements, and special instructions.
Payment and billing information such as payment status, invoices, and transaction references. We do not store more payment data than is necessary.
Communication records such as emails, messages, notes from calls, and complaint or feedback records.
Technical information that may be collected when you interact with our digital systems, such as device or browser information, where applicable.
Legal and compliance records where needed for taxation, insurance, dispute handling, or regulatory requirements.

We do not intentionally collect special category data unless you provide it voluntarily and it is necessary for a specific service need, such as accessibility or safety arrangements. If such information is provided, we will process it only where lawful and appropriate safeguards are in place.

3. How We Use Personal Data

We use personal data for the following purposes:

to provide quotations, confirm bookings, and carry out moving services;
to communicate with customers about scheduling, access, service changes, or service issues;
to manage payments, invoices, and account administration;
to respond to questions, complaints, and support requests;
to maintain business records and improve our services;
to protect against fraud, misuse, or unauthorized activity;
to comply with legal, tax, insurance, and regulatory obligations;
to defend or establish legal claims where necessary.

We will only use your data for purposes that are compatible with the original reason it was collected, unless we have a lawful basis to use it differently.

4. Lawful Basis for Processing

We rely on one or more of the following lawful bases under the UK GDPR:

Performance of a Contract

We process personal data when it is necessary to provide a quotation, make arrangements, carry out a booking, deliver services, or manage payment related to a contract with you.

Legal Obligation

We may process personal data to comply with legal duties, including record keeping, accounting, tax requirements, insurance obligations, and lawful requests from authorities.

Legitimate Interests

We may process personal data for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include managing operations, improving service quality, preventing fraud, handling disputes, and maintaining business security.

Consent

In limited circumstances, we may rely on consent, for example where it is required for certain optional uses of data. Where consent is used, you can withdraw it at any time.

5. Sharing Personal Data and Processors

We may share personal data with trusted third parties only when necessary and appropriate. These recipients may include processors that act on our instructions and provide services such as:

payment processing providers;
accounting and bookkeeping providers;
IT hosting, cloud storage, and software providers;
communication and customer management tools;
insurance providers and claims handlers;
legal, tax, and professional advisers;
subcontractors or delivery partners engaged to support service delivery.

All processors are required to protect personal data and to use it only for the purposes we specify. Where a third party acts as an independent controller, we will only share data where there is a lawful basis to do so.

We may also disclose personal data if required by law, by a court order, or to protect our rights, property, staff, customers, or the public.

6. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax, insurance, or dispute-resolution requirements. The retention period may vary depending on the type of information and the reason for processing.

In general:

booking and service records are kept for a reasonable period after the service is completed;
billing and accounting records are kept for the period required by law;
correspondence and complaint records are kept for as long as needed to deal with the matter and to evidence our handling of it;
information that is no longer needed is securely deleted, anonymized, or archived in accordance with our retention practices.

Retention is always limited to what is necessary. When data is no longer required, we take appropriate steps to dispose of it securely.

7. Data Security

We take reasonable technical and organizational measures to protect personal data against unauthorized access, accidental loss, destruction, alteration, or disclosure. These measures are designed to reflect the nature of the data we process and the risks involved. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

8. International Transfers

Where personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place to protect it, such as adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms. Any such transfer will be carried out only where necessary and in compliance with data protection law.

9. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may apply depending on the circumstances and legal conditions. They include:

Right of access - to request a copy of the personal data we hold about you;
Right to rectification - to ask us to correct inaccurate or incomplete data;
Right to erasure - to request deletion of your data in certain situations;
Right to restriction - to ask us to limit the way we use your data;
Right to object - to object to processing based on legitimate interests or direct marketing;
Right to data portability - to receive certain data in a structured, commonly used format, where applicable;
Right to withdraw consent - where processing is based on consent;
Right to complain - to a supervisory authority if you believe your rights have been infringed.

Some rights are not absolute and may be subject to legal exceptions. We will respond to any valid request in accordance with applicable law.

10. Children's Data

Our services are intended for adult customers and business users. We do not knowingly collect personal data from children except where it is incidentally provided in service-related communications and only where necessary for the delivery or safety of a moving service. If we become aware that we have collected data that is not needed, we will take reasonable steps to delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically to remain informed about how personal data is handled.

12. Summary of Our Commitment

We respect the privacy of every customer and use personal data only where it is necessary, fair, and lawful. We aim to keep information accurate, secure, and retained only for as long as required. We also ensure that any processors we use are subject to appropriate contractual protections and that your rights are respected throughout our relationship with you.

Elephant And Castle Man And Van is committed to processing personal data responsibly for all customers in area, with transparency, accountability, and respect for individual privacy.