Privacy Policy - Pinner Man And Van

Pinner Man And Van is committed to protecting the privacy and personal data of all customers, prospective customers, and website or service users. This Privacy Policy explains how we collect, use, store, share, and protect personal data in connection with our moving, delivery, and van hire services. It applies to all Pinner Man And Van customers in the area, including anyone who enquires about, books, receives, or pays for our services.

1. Who We Are

For the purposes of data protection law, Pinner Man And Van acts as the data controller in relation to personal data collected and used for the provision of our services. This means we decide how and why your personal data is processed. We handle personal information in accordance with the UK General Data Protection Regulation and the Data Protection Act 2018.

2. Personal Data We Collect

We only collect personal data that is relevant and necessary for providing our services, managing bookings, communicating with you, and meeting legal and contractual obligations. The types of data we may collect include:

Identity details such as your name or business name.
Contact details such as telephone number and email address.
Service details such as pickup and delivery addresses, access notes, move size, item lists, preferred dates, and special handling instructions.
Payment and billing information such as invoicing details, payment status, and transaction references.
Communication records including messages, call notes, and service-related correspondence.
Technical data if you interact with digital systems used to manage enquiries or bookings, such as IP address, browser type, or device information.
Operational data relating to service completion, claims, complaints, or feedback.

We do not intentionally collect more data than is needed for legitimate service purposes. Where possible, we keep personal data limited, accurate, and up to date.

3. How We Use Your Data

We use personal data to operate our services efficiently and lawfully. Typical uses include:

Processing enquiries and providing quotes.
Managing bookings and scheduling moves or deliveries.
Communicating with customers about service arrangements.
Preparing invoices and handling payments.
Meeting contractual duties and service obligations.
Handling complaints, disputes, or insurance-related matters.
Complying with legal, tax, and accounting requirements.
Improving the quality, safety, and efficiency of our services.

We may also use data to maintain internal records, prevent fraud, and protect our business, staff, and customers. Any use of personal data will be limited to what is necessary and proportionate for the purpose involved.

4. Lawful Basis for Processing

Under GDPR, we must have a lawful basis for every processing activity. Depending on the context, Pinner Man And Van may rely on one or more of the following lawful bases:

Contract: to take steps at your request before entering a service agreement and to perform the agreement once a booking is made.
Legal obligation: to comply with tax, accounting, record-keeping, and other statutory duties.
Legitimate interests: to run our business, manage customer relationships, prevent misuse, and improve services, provided your interests and rights do not override ours.
Consent: where we ask for your clear permission for optional activities, such as certain forms of marketing, if applicable.

Where we rely on legitimate interests, we consider the potential impact on your rights and freedoms and take appropriate safeguards. You may object to processing based on legitimate interests in certain circumstances.

5. Sharing Your Personal Data

We may share personal data with trusted third parties where necessary to deliver our services, manage our operations, or meet legal duties. These third parties may include:

Service processors who support booking administration, communications, invoicing, record management, or IT systems.
Payment providers who process transactions securely.
Professional advisers such as accountants, insurers, or legal advisers.
Regulators, authorities, or law enforcement where disclosure is required by law.
Contracted partners involved in completing a service request, where necessary and appropriate.

We only share the minimum data needed for the relevant purpose. Any third party acting on our behalf is expected to process personal data securely, lawfully, and only under our instructions where they are a processor.

6. Processors and Data Security

When we use external processors, they may host data, provide business tools, store records, or assist with administrative functions. We choose processors carefully and require them to apply suitable technical and organisational measures to protect personal data. These measures may include access controls, encryption, password protection, secure storage, and restricted user permissions.

We also take steps internally to protect data against accidental loss, unauthorised access, disclosure, alteration, or destruction. Although no system can be completely secure, we work to maintain an appropriate level of security based on the nature of the data and the risks involved.

7. Retention of Personal Data

We keep personal data only for as long as necessary for the purposes for which it was collected, including satisfying legal, accounting, or reporting requirements. Retention periods may vary depending on the nature of the information and the reason it was gathered.

In general:

Booking and service records may be retained for the period needed to manage the contract and resolve related queries.
Financial and tax records are retained for the duration required by law.
Complaint, dispute, or claims information may be kept for longer where necessary to establish, exercise, or defend legal claims.
Data held solely on the basis of consent will normally be deleted or anonymised when consent is withdrawn, unless another lawful basis applies.

When data is no longer needed, we will securely delete, destroy, or anonymise it in a way that prevents further identification.

8. Your Rights Under GDPR

You have important rights over your personal data. Subject to legal limitations, these may include the right to:

Access the personal data we hold about you.
Rectify inaccurate or incomplete information.
Erase your data in certain circumstances.
Restrict how we process your data in certain situations.
Object to processing based on legitimate interests or direct marketing, where applicable.
Data portability for data you provided to us in a structured, commonly used format, where the legal conditions are met.
Withdraw consent at any time where processing is based on consent.

You also have the right to raise a complaint with the relevant data protection authority if you believe your rights have been breached. We encourage you to raise concerns with us first so we can address them promptly and fairly.

How We Handle Rights Requests

When you make a rights request, we may need to verify your identity to protect your information. We aim to respond within the timeframes required by law. If a request is complex or numerous, we may extend the response period where permitted by GDPR. Where we cannot comply fully, we will explain the reasons, subject to legal restrictions.

9. Marketing and Communications

If we send marketing messages, we will do so only where permitted by law. You may opt out of marketing communications at any time. Even if you opt out, we may still contact you for service-related or legal reasons, such as booking updates, invoices, or important notices.

10. Children’s Data

Our services are intended for adult customers and business clients arranging moving or van services. We do not knowingly collect personal data from children except where it is incidentally provided in connection with a household move or similar service request. If we become aware that data has been collected inappropriately, we will take reasonable steps to delete it.

11. International Transfers

Where personal data is processed outside the UK, we will ensure appropriate safeguards are in place as required by data protection law. These safeguards may include adequacy regulations, standard contractual protections, or other lawful transfer mechanisms. We only allow transfers where there is a valid legal basis and an acceptable level of protection.

12. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal duties, or data-handling practices. The most recent version will apply to your use of our services. We encourage you to review this policy periodically to stay informed about how we protect personal data.

13. Summary of Our Commitment

Pinner Man And Van values privacy and handles personal data with care, fairness, and accountability. We collect only what we need, use it for lawful and clear purposes, retain it only as long as necessary, and respect the rights of every customer in the area we serve. By maintaining appropriate safeguards and working with reliable processors, we aim to ensure that your information is treated responsibly at every stage.