Privacy Policy - Waterloo Removals

This Privacy Policy explains how Waterloo Removals collects, uses, stores, shares, and protects personal data. It applies to all Waterloo Removals customers in area, including prospective customers, residential customers, business customers, and any individuals who interact with us in connection with removals, storage, packing, and related services.

1. Introduction

Waterloo Removals is committed to protecting your privacy and handling personal data in a lawful, fair, and transparent manner. We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy sets out what personal data we collect, why we collect it, the legal bases we rely on, how long we keep it, who may process it on our behalf, and what rights you have over your information.

By using our services or providing information to us, you acknowledge that your personal data may be processed in accordance with this policy.

2. Data We Collect

We collect only the data necessary to provide and manage our services, communicate effectively, comply with legal obligations, and improve our operations. The types of personal data we may collect include:

Identity information such as your name, title, and business name where applicable.
Contact details such as your address, email address, telephone number, and move location details.
Service information such as booking details, inventory lists, access requirements, move dates, and special handling instructions.
Billing and payment information such as invoice details, payment confirmations, and records relating to charges, refunds, or disputes.
Communication records such as emails, call notes, text messages, and enquiry details.
Technical information where relevant, such as IP address or device information when you interact with our digital systems.
Special category data only where strictly necessary and usually only if you choose to provide it, for example information about accessibility needs, health-related handling requirements, or other sensitive instructions needed to complete a move safely and appropriately.

We do not intentionally collect more information than is needed for the purpose at hand. If you provide information about third parties, such as family members, landlords, tenants, or building managers, you are responsible for ensuring that you have permission to share it with us.

3. How We Use Your Data

We use personal data for the following purposes:

To provide quotations, schedule surveys, and arrange removals or storage services.
To plan and deliver your move safely and efficiently.
To contact you before, during, or after the service.
To create and maintain customer records and service history.
To issue invoices, receive payments, and manage accounts.
To handle complaints, claims, and customer support requests.
To comply with legal, regulatory, tax, and insurance obligations.
To protect our business, staff, customers, and property from fraud, misuse, or security incidents.
To improve our services, operations, and internal processes.

We will only use personal data in ways that are compatible with the purposes for which it was collected, unless we reasonably believe another lawful basis applies and the new use is permitted under data protection law.

4. Lawful Basis for Processing

We process personal data only where we have a valid lawful basis under the UK GDPR. Depending on the situation, we may rely on one or more of the following:

Contract – when processing is necessary to enter into or perform a contract with you, including quoting, booking, delivering, and invoicing our services.
Legal obligation – when we must process data to comply with laws relating to taxation, accounting, insurance, transport, record keeping, or other regulatory requirements.
Legitimate interests – when processing is necessary for our legitimate business interests, provided your interests and rights do not override those interests. This may include managing our customer relationships, preventing fraud, improving services, and maintaining business security.
Consent – where required, for example if we need your explicit consent to process special category data or to send certain types of marketing communication.
Vital interests – in rare circumstances where processing is necessary to protect someone’s life or well-being.

Where we rely on consent, you may withdraw it at any time. This will not affect the lawfulness of processing carried out before the withdrawal.

5. Retention of Personal Data

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including meeting legal, contractual, accounting, and reporting requirements. The retention period depends on the nature of the information and the context in which it was obtained.

Customer and contract records are usually retained for the period needed to complete the service and for a reasonable period afterwards for administration, dispute resolution, and business records.
Financial and tax-related records are retained for the period required by law.
Complaints, claims, and incident records may be retained for longer where needed to establish, exercise, or defend legal claims.
Communication records are kept as long as necessary to manage the enquiry or service relationship.
Data collected with consent is retained until consent is withdrawn or the purpose for processing ends, unless a longer period is required by law.

When personal data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you.

6. Processors and Sharing of Data

We may share personal data with trusted third parties who act as data processors or independent controllers, but only where necessary and lawful. These parties are required to handle information securely and in accordance with data protection law.

Processors and recipients may include:

IT and cloud service providers used to store, manage, or back up business records.
Payment processing providers used to handle transactions and related financial records.
Accounting and bookkeeping services used for invoicing, tax, and financial administration.
Insurance providers and claims handlers where a claim, incident, or dispute needs to be reviewed.
Professional advisers such as legal, financial, or compliance advisers.
Subcontractors and operational partners assisting with removals, storage, packing, or logistics where required to deliver the service.
Regulators, law enforcement, and public authorities where disclosure is required by law or necessary to protect our rights or the rights of others.

We do not sell your personal data. If personal data is transferred outside the UK, we will ensure appropriate safeguards are in place, such as adequacy regulations or approved contractual protections.

7. Data Security

We use appropriate technical and organisational measures to protect personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and limited data sharing on a need-to-know basis.

Although we take reasonable steps to protect your information, no system can be guaranteed completely secure. If a personal data breach occurs and we are legally required to do so, we will notify the relevant supervisory authority and affected individuals.

8. Your Rights

Under data protection law, you may have the following rights in relation to your personal data:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete information.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restrict processing – to ask us to limit how we use your data in certain situations.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to receive certain data in a structured, commonly used, machine-readable format and transfer it where applicable.
Right to withdraw consent – where we rely on consent, you may withdraw it at any time.

These rights are not absolute and may be subject to legal exceptions and limitations. If we receive a valid request, we will respond within the time limits set by law.

9. Children’s Data

Our services are intended for adults and businesses. We do not knowingly collect personal data from children except where it is incidental to providing services requested by a parent, guardian, or responsible adult. If we become aware that we have collected such data unlawfully, we will take appropriate steps to delete it.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service offerings. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically to stay informed about how we protect personal data.

11. Summary of Key Commitments

We collect only the personal data needed to provide removals and related services.
We process data under clear lawful bases, including contract, legal obligation, legitimate interests, and consent where appropriate.
We retain data only for as long as necessary and delete or anonymise it when no longer required.
We use trusted processors under appropriate safeguards.
We respect your rights and will handle requests in accordance with GDPR requirements.

Waterloo Removals is committed to responsible data handling and to maintaining the trust of every customer in area. We aim to ensure that all personal information is treated with care, confidentiality, and respect throughout the entire service relationship.