Privacy Policy - Tufnell Park Movers

This Privacy Policy explains how Tufnell Park Movers collects, uses, stores, shares, and protects personal data. It applies to all Tufnell Park Movers customers in the area, including anyone who requests a quote, books a move, receives moving services, or otherwise interacts with us in connection with our services. We are committed to handling personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Tufnell Park Movers provides moving and related logistics services to customers in the local area. For the purposes of data protection law, we act as the data controller for the personal data we collect and process in connection with our services. This means we determine the purposes and means of processing your personal data.

2. Personal Data We Collect

We collect only the information that is necessary, relevant, and limited to what is required for providing our services and managing our business. Depending on your interaction with us, we may collect the following categories of personal data:

Identity data such as your name and, where relevant, the names of other household members or authorised representatives.
Contact data such as your address, email address, and telephone number.
Service and booking data such as moving dates, property access details, inventory information, and service preferences.
Payment data such as payment status, billing records, and transaction references. We do not store card details unless explicitly required and securely processed by a payment provider.
Communications data such as messages, calls, complaints, feedback, and notes made in connection with your booking or enquiry.
Technical data such as limited device or browser information if you interact with our digital services, where applicable.
Special category data only if you voluntarily provide it and only where it is necessary, for example if accessibility requirements or health-related circumstances affect a move. We will process such information carefully and only where a lawful condition is met.

We do not intentionally collect unnecessary personal data. We also do not seek to collect information about children unless it is incidental to arranging a move for a household customer and only where needed to provide the service safely.

3. How We Use Personal Data

We use personal data for the following purposes:

to provide quotations and manage bookings;
to plan, deliver, and complete moving services;
to communicate with customers about service arrangements, scheduling, and updates;
to issue invoices, process payments, and maintain financial records;
to handle complaints, claims, or disputes;
to maintain internal records and improve our operations;
to comply with legal, accounting, tax, and regulatory obligations;
to protect our business, staff, and customers, including fraud prevention and security purposes.

We only use your data where we have a valid legal reason to do so and where the use is proportionate to the purpose.

4. Lawful Basis for Processing

Under GDPR, we must identify a lawful basis for each type of processing. Tufnell Park Movers relies on the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes preparing quotes, confirming bookings, planning services, moving goods, and handling payment-related administration.

Legal obligation

We may process data where required to comply with legal obligations, including tax, accounting, record-keeping, insurance, and other statutory requirements.

Legitimate interests

We may process data where it is necessary for our legitimate business interests, provided these interests are not overridden by your rights and freedoms. This may include service improvement, internal administration, customer support, fraud prevention, and secure business operations.

Consent

Where we rely on consent, we will ask for it clearly and separately. You may withdraw your consent at any time, although this will not affect the lawfulness of processing carried out before withdrawal.

Vital interests and special category data

In rare circumstances, we may process personal data to protect someone’s vital interests, or process special category data where lawful and necessary for a specific purpose related to your move. We will always limit such processing to what is necessary and appropriate.

5. Sharing Personal Data and Processors

We may share personal data with trusted third parties where necessary to provide our services or run our business. Where these third parties process data on our behalf, they act as processors. We ensure that processors are subject to appropriate contractual safeguards and only process data according to our instructions.

Examples of processors and recipients may include:

IT and cloud service providers who support secure storage, communication, and business systems;
payment service providers who process transactions securely;
accountants and bookkeepers who assist with financial administration;
insurance providers and claims handlers where required for risk management or claims resolution;
legal or professional advisers where necessary for compliance, disputes, or business protection;
subcontracted service providers involved in fulfilling a booking, where applicable and necessary.

We may also disclose personal data where required by law, court order, regulator, or other competent authority. If the business is involved in a merger, restructuring, or transfer of assets, personal data may be transferred as part of that transaction, subject to appropriate protections.

6. International Transfers

Where any processor or service provider stores or accesses data outside the UK, we will ensure appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms permitted under data protection law.

7. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including legal, accounting, and reporting requirements. Retention periods depend on the type of data and the purpose of processing.

In general:

booking and service records are kept for a period necessary to manage the relationship and any follow-up queries;
financial and tax records are retained for the period required by law;
communications and complaint records are retained for a reasonable period to resolve disputes and improve services;
data collected with consent is kept until consent is withdrawn or the data is no longer needed.

When personal data is no longer required, we will securely delete, anonymise, or archive it in accordance with our retention practices.

8. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and restricted data handling practices.

While we take data security seriously, no system is completely risk-free. We therefore work continuously to maintain and improve our safeguards.

9. Your Rights

As a data subject under GDPR, you have a number of rights in relation to your personal data. Subject to legal limits and conditions, these may include:

the right to be informed about how your data is used;
the right of access to obtain a copy of your personal data;
the right to rectification to correct inaccurate or incomplete data;
the right to erasure in certain circumstances, sometimes called the right to be forgotten;
the right to restrict processing in certain situations;
the right to data portability where processing is based on consent or contract and carried out by automated means;
the right to object to processing based on legitimate interests or direct marketing;
rights related to automated decision-making, where applicable.

If you wish to exercise any of these rights, we will respond in accordance with applicable law. We may need to verify your identity before responding to a request.

10. Marketing Communications

We do not send marketing communications without a lawful basis. Where consent is required, we will obtain it before sending such messages. If you have opted in to receive marketing, you can withdraw consent at any time. This will not affect service-related communications that are necessary for a booking or contract.

11. Complaints

If you are concerned about how your personal data is handled, you have the right to raise a complaint with the relevant data protection authority. We encourage you to contact us first so that we can try to resolve the issue promptly and fairly. We will review concerns carefully and take appropriate action where needed.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. The most current version will apply to your use of our services from the time it is published or communicated.

13. Summary of Our Commitment

Tufnell Park Movers is committed to processing personal data lawfully, fairly, and transparently. We collect only what we need, use it for clear purposes, share it only with trusted processors or when legally required, and retain it only for as long as necessary. We respect your rights and aim to protect your privacy at every stage of your experience with us.

By using our services, you acknowledge that this Privacy Policy applies to all Tufnell Park Movers customers in the area.