Privacy Policy - Saintpancras Removals

This Privacy Policy explains how Saintpancras Removals collects, uses, stores, shares, and protects personal data. It applies to all Saintpancras Removals customers in our service area, including prospective customers, current customers, former customers, and individuals who enquire about our services. We are committed to handling personal information lawfully, fairly, and transparently in accordance with the UK GDPR and the Data Protection Act 2018.

1. Who We Are

Saintpancras Removals provides removal and related moving services. In the course of operating our business, we may process personal data about customers, household members, business clients, building managers, suppliers, and other individuals connected with a removal booking or enquiry. For the purposes of data protection law, Saintpancras Removals is the data controller for the personal data described in this policy when we decide how and why such data is processed.

2. Personal Data We Collect

We only collect personal data that is relevant and necessary for providing our services, managing our business, and meeting legal obligations. Depending on your interaction with us, we may collect the following categories of information:

Identity details such as your name, title, and, where relevant, the names of other household or business contacts;
Contact details including address, telephone number, and email address;
Service and booking details including property access information, moving dates, inventory details, and instructions relating to your move;
Billing and payment information such as invoice details, payment status, and transaction references;
Communications including emails, messages, call notes, and complaint records;
Technical data such as device, browser, and usage information if you interact with our digital services;
Special category data only where strictly necessary and usually only if you choose to provide it, for example information that may reveal health-related access needs or vulnerability-related moving requirements.

We do not seek to collect unnecessary personal data. Where special category data is provided, we apply additional safeguards and process it only when a lawful condition applies.

3. How We Collect Personal Data

We may collect data directly from you when you make an enquiry, request a quote, make a booking, communicate with us, or complete forms. We may also receive information from third parties where needed to provide our services, such as building managers, landlords, estate agents, solicitors, payment providers, or subcontracted partners involved in your move. In some cases, personal data may be created by us during the course of providing services, for example service notes, records of completed work, or customer support logs.

4. Why We Use Your Data

We use personal data only for specific, explicit, and legitimate purposes. These may include:

responding to enquiries and providing quotations;
managing bookings and carrying out removal services;
coordinating logistics, access arrangements, and timing;
issuing invoices and processing payments;
communicating updates, confirmations, or service-related notices;
handling complaints, disputes, or insurance-related matters;
maintaining business records and ensuring quality control;
meeting legal, accounting, tax, and regulatory obligations;
protecting our business, staff, customers, and property from fraud, misuse, or security risks.

We will not use your data for purposes that are incompatible with the original reason it was collected unless we have a valid legal basis and have informed you where required.

5. Lawful Basis for Processing

We process personal data only where we have a lawful basis under UK GDPR. The main lawful bases we rely on are:

Contract

We process data when it is necessary to enter into or perform a contract with you, such as providing a quote, arranging a move, delivering the service, or managing payment and customer support.

Legal Obligation

We may process data to comply with legal requirements, including tax, accounting, insurance, record-keeping, and regulatory obligations.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This may include service administration, business improvement, fraud prevention, network and information security, and record management. When relying on legitimate interests, we ensure the processing is proportionate and relevant.

Consent

In limited cases, we may rely on your consent, for example for specific optional communications or where special category data is processed outside another lawful condition. Where consent is used, you may withdraw it at any time.

6. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, and to meet legal, accounting, and operational requirements. Retention periods vary depending on the type of data and the purpose of processing. In general:

customer enquiry records may be retained for a short period if no booking follows;
booking and service records are kept for the duration of the service relationship and a reasonable period afterwards;
invoice, tax, and accounting records are retained in line with legal requirements;
complaints, claims, and dispute records may be kept longer where necessary to resolve the matter or defend legal claims.

When personal data is no longer required, we will securely delete, anonymise, or archive it as appropriate. We do not keep data indefinitely.

7. Data Sharing and Processors

We may share personal data with trusted third parties where necessary for service delivery, legal compliance, or business operations. These third parties act either as independent controllers or as processors acting on our instructions. Processors may include:

IT and cloud service providers;
payment processing providers;
accounting and bookkeeping software providers;
communications and customer management platforms;
subcontractors or operational partners involved in the removal service;
professional advisers such as lawyers, insurers, and accountants;
public authorities, regulators, or law enforcement where required by law.

We only use processors that provide sufficient guarantees to implement appropriate technical and organisational measures. Where a processor is engaged, we ensure a written contract is in place requiring them to process data only on our instructions, keep it secure, and assist us in meeting GDPR obligations.

8. International Transfers

If any personal data is transferred outside the United Kingdom, we will ensure that appropriate safeguards are in place. These may include adequacy regulations, the International Data Transfer Agreement, or other lawful transfer mechanisms. We take reasonable steps to confirm that overseas recipients provide an adequate level of protection.

9. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss, or destruction. These measures may include access controls, secure storage, encryption where appropriate, staff confidentiality obligations, and regular review of our data handling practices. While no system can be guaranteed completely secure, we take data protection seriously and work to minimise risk.

10. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. Subject to legal limits, these include:

Right of access — you can ask for a copy of the personal data we hold about you;
Right to rectification — you can ask us to correct inaccurate or incomplete data;
Right to erasure — in certain circumstances, you can ask us to delete your data;
Right to restriction — you can ask us to limit how we use your data in certain situations;
Right to object — you can object to processing based on legitimate interests and to direct marketing;
Right to data portability — you may request a copy of certain data in a structured, machine-readable format;
Right to withdraw consent — where processing is based on consent, you can withdraw it at any time;
Right to complain — you may raise concerns with the UK Information Commissioner’s Office if you believe your rights have been infringed.

We may need to verify your identity before responding to a request. We aim to respond within the time limits set by law. Some rights may not apply in every case, particularly where we have a legal obligation to keep certain records.

11. Children’s Data

Our services are intended for adults and businesses. We do not knowingly collect personal data from children except where it is incidental to a household move and necessary for the provision of our services. If we become aware that we have collected data from a child without an appropriate basis, we will take steps to delete it where required.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any updated version will apply from the date it is published or otherwise made available. We encourage customers to review this policy periodically to stay informed about how their information is used.

13. Summary of Our Commitment

Saintpancras Removals is committed to processing personal data in a lawful, fair, and transparent manner. We collect only what we need, use it for clear business and legal purposes, retain it for no longer than necessary, and work with trusted processors under appropriate safeguards. We also respect your rights and will handle requests with care and in accordance with applicable law. This policy reflects our ongoing commitment to privacy, security, and responsible data handling for all Saintpancras Removals customers in area.