Privacy Policy - Movers Sutton

This Privacy Policy explains how Movers Sutton collects, uses, stores, shares, and protects personal data in connection with our moving, packing, storage, and related services. It applies to all Movers Sutton customers in the area, including prospective customers, current customers, and individuals who enquire about our services. We are committed to handling personal information in a lawful, fair, and transparent manner in accordance with the UK GDPR and the Data Protection Act 2018.

1. Who We Are

Movers Sutton acts as the data controller for the personal data processed in the course of providing our services, unless we state otherwise. This means we decide why and how your personal data is used. In limited cases, we may act as a data processor when processing data on behalf of another organisation, but this policy primarily describes our role as controller for our customers and enquiries in the Sutton area.

2. Personal Data We Collect

We only collect data that is necessary to provide our services, manage our business, and meet our legal obligations. The categories of data we may collect include:

Identity details: name, title, and, where needed, proof of identity.
Contact details: address, email address, and telephone number.
Service details: move dates, property access details, inventory information, packing requirements, and special handling instructions.
Billing and payment data: invoice details, payment status, and records of transactions.
Communication records: emails, notes from calls, messages, quotes, complaints, and feedback.
Technical data: limited website or device data if you interact with our digital systems, such as IP address or browser information where applicable.
Special category data: we do not intentionally collect sensitive data such as health information, unless you choose to provide it and it is necessary for a particular service, for example access needs. If we do receive such data, we handle it with extra care and only where a lawful basis applies.

We generally collect personal data directly from you. In some cases, we may receive information from third parties such as property agents, landlords, solicitors, employers, or payment providers, where that is necessary to deliver the service or manage the booking.

3. How We Use Your Data

We use personal data for clearly defined purposes, including:

providing quotations and handling enquiries;
arranging, scheduling, and delivering moving services;
communicating with you about bookings, changes, and service updates;
preparing invoices, processing payments, and keeping accounting records;
managing customer care, complaints, and service improvements;
meeting legal, tax, and regulatory obligations;
protecting our business, customers, and staff from fraud or misuse;
keeping operational records for administration and service quality.

We will not use your personal data for purposes that are incompatible with the reasons it was collected, unless we have a lawful basis to do so and you are informed where required.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each type of processing. Movers Sutton relies on the following bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes providing quotes, booking moves, delivering the service, sending invoices, and managing payment arrangements.

Legal Obligation

We may process data where needed to comply with legal duties, such as accounting, tax, record-keeping, health and safety, and responding to lawful requests from authorities.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided your rights do not override those interests. This may include service administration, business planning, record retention, fraud prevention, and improving our operations. Where we rely on legitimate interests, we consider the impact on your privacy and apply safeguards.

Consent

In limited cases, we may rely on your consent, for example where you voluntarily provide optional sensitive information or agree to receive certain marketing communications. You may withdraw consent at any time where consent is the lawful basis used.

5. Data Sharing and Processors

We may share personal data with trusted third parties who help us operate our services. These parties act as processors when they handle data on our instructions, or as separate controllers where they determine their own purposes. We require appropriate contracts and safeguards where processors are used.

Examples of processors and service providers may include:

IT and cloud storage providers that host our records and systems;
payment processing providers that handle card or online payments;
accounting and bookkeeping providers;
customer management or booking software providers;
communications providers, such as email or messaging platforms;
professional advisers, including legal or insurance advisers, where necessary.

We may also disclose data to law enforcement, regulators, courts, or other public authorities where required by law or to protect our rights, property, staff, customers, or the public. We do not sell your personal data.

6. International Transfers

Where any service provider stores or accesses data outside the United Kingdom, we will take steps to ensure an adequate level of protection. This may include using approved contractual safeguards and assessing the relevant risks before transfer takes place.

7. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, including legal, accounting, or reporting requirements. Retention periods depend on the type of information and the reason it was obtained.

As a general approach:

Quotation and enquiry records: kept for a reasonable period to manage follow-up and business records.
Customer service and contract records: retained for the duration of the service and for a further period where needed for dispute handling or legal claims.
Financial and tax records: kept for the period required by law.
Complaint records: retained while the matter is active and for a period afterwards if needed to evidence how it was handled.

When data is no longer needed, we will securely delete, anonymise, or archive it in line with our retention practices. Retention is reviewed regularly to ensure information is not held longer than necessary.

8. Data Security

We use appropriate technical and organisational measures to protect personal data from unauthorised access, accidental loss, destruction, or damage. These measures may include access controls, secure storage, encryption where suitable, staff confidentiality obligations, and regular review of our processes. However, no system can be guaranteed completely secure, and we encourage customers to take care when sharing information with us.

9. Your Rights

Under data protection law, you have important rights in relation to your personal data. These rights may be subject to conditions or exemptions depending on the circumstances.

Right of access: you can request a copy of the personal data we hold about you.
Right to rectification: you can ask us to correct inaccurate or incomplete data.
Right to erasure: you can request deletion of your data in certain situations.
Right to restriction: you can ask us to limit how we use your data in certain cases.
Right to object: you can object to processing based on legitimate interests or direct marketing.
Right to data portability: you can ask for certain data in a structured, commonly used format where applicable.
Right to withdraw consent: where we rely on consent, you can withdraw it at any time.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office if you believe your data protection rights have been violated. We encourage you to raise any concerns with us first so we can try to resolve them promptly and fairly.

10. Marketing Communications

If we send marketing communications, we will do so only where permitted by law. You may opt out of marketing at any time, and we will respect your preferences. Service-related messages, such as booking updates or important customer notices, are not marketing and may still be necessary for us to provide the service.

11. Children’s Data

Our services are intended for adults. We do not knowingly collect personal data from children unless it is provided as part of a booking or move arrangement by a parent, guardian, or authorised adult and only where necessary.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection practices. Any updated version will apply from the date it is made available. We encourage you to review this policy periodically so you remain informed about how we process personal data.

13. Summary of Our Commitment

Movers Sutton is committed to privacy, transparency, and responsible data handling. We collect only the data we need, use it for clear and lawful purposes, retain it for no longer than necessary, and work with trusted processors under appropriate safeguards. We respect your rights and aim to provide a secure, reliable, and compliant service to all Movers Sutton customers in the area.