Privacy Policy - Removals Toedinburgh

This Privacy Policy explains how Removals Toedinburgh collects, uses, stores, shares, and protects personal data in connection with our removal, moving, packing, storage, and related services. It applies to all Removals Toedinburgh customers in area, including individuals, families, landlords, tenants, and business clients who use our services within our operational area. We are committed to handling personal information in a fair, lawful, transparent, and secure manner, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Removals Toedinburgh provides home, office, and specialist removal services, along with packing support, item handling, and related logistical arrangements. In delivering these services, we act as a data controller for the personal information we determine the purpose and means of processing. This means we decide why and how your data is used for the service we provide.

2. Personal Data We Collect

We collect only the information necessary to provide, manage, and improve our services. Depending on the service requested, we may collect the following categories of personal data:

Identity information such as your name, title, and any business or account name.
Contact details including address, email address, and telephone number.
Service details such as pickup and delivery addresses, moving dates, property access notes, inventory lists, and special handling requirements.
Payment information where needed for billing, invoicing, refunds, or payment confirmation.
Communication records including messages, call notes, quotes, complaints, and correspondence.
Technical information such as basic website or device data if you interact with our online services.
Risk and safety information relevant to the handling of items, access, parking, building restrictions, or health and safety concerns.

We do not intentionally collect special category data unless it is necessary and you choose to provide it, or unless it is required for the service and allowed by law. Where such data is received, we limit its use and apply additional safeguards.

3. How We Use Your Data

We use personal data to deliver our services efficiently and lawfully. Typical uses include:

Providing quotes and confirming bookings.
Planning and carrying out removal and storage services.
Communicating with you before, during, and after a service.
Preparing invoices, processing payments, and managing refunds or adjustments.
Handling complaints, claims, and customer support requests.
Meeting legal, tax, insurance, and regulatory obligations.
Improving our operations, service quality, staff training, and safety procedures.
Preventing fraud, misuse, or unlawful activity.

We only use your personal data for the purposes for which it was collected, unless we reasonably consider that we need to use it for a compatible purpose or a legal requirement.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for processing your personal data. Depending on the context, Removals Toedinburgh may rely on one or more of the following legal bases:

Contract - processing is necessary to perform our contract with you or to take steps at your request before entering into a contract.
Legal obligation - processing is necessary to comply with legal or regulatory obligations, such as accounting, taxation, or record-keeping requirements.
Legitimate interests - processing is necessary for our legitimate business interests, such as service improvement, administration, fraud prevention, and customer support, provided your rights and freedoms do not override those interests.
Consent - in limited cases, we may rely on your consent, for example where you choose to receive certain optional communications or provide specific information that is not otherwise required.

Where we rely on consent, you may withdraw it at any time. This will not affect the lawfulness of processing carried out before consent was withdrawn.

5. Sharing Your Personal Data

We may share personal data only when necessary and only with appropriate safeguards in place. Recipients may include:

Service providers and processors who support our business operations, such as booking systems, payment services, secure storage providers, IT support, and administrative tools.
Professional advisers such as accountants, insurers, or legal advisers where required.
Authorities or regulators where disclosure is required by law, court order, or lawful request.
Subcontractors or partners involved in fulfilling your removal or storage service, where relevant and necessary.

We do not sell your personal data. If data is transferred to a processor or third party, we ensure appropriate contractual and technical measures are in place so that the data is protected and processed only for the intended purpose.

6. Data Processors

We may appoint third-party data processors to act on our behalf. These processors only process personal data according to our instructions and are required to keep it secure and confidential. Typical categories of processors may include:

IT and cloud service providers that host or maintain our systems.
Customer management and communication tools used for scheduling and correspondence.
Payment processors that facilitate card or electronic transactions.
Document storage and archiving services used for business records.
Operational partners supporting packing, storage, or logistics where needed.

We assess processors to help ensure they have suitable security, privacy, and compliance measures in place.

7. Data Retention

We keep personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, including any legal, accounting, tax, or insurance requirements. Retention periods may vary depending on the type of data and service provided. In general:

Booking and service records are kept for the duration needed to manage the service and after completion for administrative purposes.
Financial and invoicing records are retained for the period required by law.
Complaint, claim, and dispute records may be retained for longer where needed to establish, exercise, or defend legal claims.
Information collected on the basis of consent is kept until consent is withdrawn or the information is no longer needed.

When personal data is no longer required, we take reasonable steps to delete, anonymise, or securely destroy it.

8. Data Security

We use appropriate technical and organisational measures to help protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, staff confidentiality obligations, secure storage, and limiting access to data on a need-to-know basis.

While no system can be guaranteed to be completely secure, we take data protection seriously and regularly review our procedures to reduce risk.

9. Your Rights

Depending on your circumstances and the legal basis for processing, you may have the following rights under data protection law:

Right of access - to request a copy of the personal data we hold about you.
Right to rectification - to request correction of inaccurate or incomplete data.
Right to erasure - to request deletion of your data in certain circumstances.
Right to restriction - to request that processing is limited in certain situations.
Right to object - to object to processing based on legitimate interests or direct marketing.
Right to data portability - to receive certain data in a structured, commonly used, machine-readable format.
Right to withdraw consent - where processing is based on consent.

These rights are not absolute and may be subject to legal exceptions or limitations. If you exercise a right, we may need to verify your identity before responding.

10. Marketing Communications

We may send limited service-related communications that are necessary for bookings, scheduling, or administration. We will only send marketing communications where permitted by law and, where required, with your consent. You may opt out of marketing at any time.

11. International Transfers

If any personal data is transferred outside the UK, we will ensure appropriate safeguards are in place to protect it, such as adequacy regulations, standard contractual clauses, or equivalent legal mechanisms. We remain committed to handling your information with the same level of care regardless of where it is processed.

12. Children???s Data

Our services are not directed to children, and we do not knowingly collect personal data from children unless it is necessary in the context of a household move and provided by an adult customer or lawful representative. If we become aware that data has been collected improperly, we will take reasonable steps to delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data protection practices. Any updated version will apply from the date it is published or otherwise communicated, as appropriate. We encourage customers to review this policy periodically.

14. How to Raise a Concern

If you are concerned about how your personal data is handled, you may contact us through the appropriate customer service channels for clarification or to exercise your rights. You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe your rights have been infringed.

By using Removals Toedinburgh services, you acknowledge that you have read and understood this Privacy Policy. This policy is intended to provide clear information about our data practices and the steps we take to protect the personal information of all Removals Toedinburgh customers in area.