Lambeth Man and Van Privacy Policy
This Privacy Policy explains how Lambeth Man and Van collects, uses, stores and protects personal data relating to our customers and prospective customers. It applies to all services provided by Lambeth Man and Van to individuals and businesses located in our service area and to all customers who book, enquire about, or use our man and van or related services.
We are committed to complying with the UK General Data Protection Regulation and the Data Protection Act 2018, and to handling your personal data lawfully, fairly and transparently.
Scope of this Privacy Policy
This Privacy Policy applies to all personal data processed by Lambeth Man and Van in connection with enquiries, quotations, bookings, service delivery, invoicing and follow-up communication. It covers data collected via telephone, messaging services, enquiry forms, booking forms, and any other direct communications between you and Lambeth Man and Van.
By contacting us, requesting a quote, or using our services, you acknowledge that you have read this Privacy Policy and understand how we process your personal data.
Personal data we collect
We collect and process only the personal data that is necessary for us to provide our services and manage our relationship with you. The types of personal data we may collect include:
Name and contact details, such as full name, address, service addresses, and other contact details you choose to provide during enquiries or bookings.
Service information, such as collection and delivery addresses, property access details you choose to share, preferred dates and times, service requirements, and any special instructions necessary for us to carry out the job safely and effectively.
Booking and transaction data, such as booking history, service dates, amounts charged, payment status, and basic payment details necessary for invoicing. We do not store full payment card details when payment is processed through a third-party payment provider.
Communication data, such as records of enquiries, quotes, messages, and any correspondence you send to us, including complaints or feedback.
Technical or usage data, where applicable, such as basic information about how you interacted with any online form or service we provide, limited to what is necessary for the functioning of that service.
Lawful bases for processing your data
Lambeth Man and Van processes personal data only where we have a valid lawful basis under the UK GDPR. Depending on the context, we may rely on the following lawful bases:
Contract: We process your personal data when it is necessary to enter into or perform a contract with you. This includes providing quotations, confirming bookings, delivering services, and handling payments.
Legitimate interests: We may process your data where it is necessary for our legitimate business interests and where your interests and fundamental rights do not override those interests. This may include managing our business operations, improving services, protecting our business from fraud, handling customer queries, and maintaining records of services provided.
Legal obligation: We may process and retain personal data where required to comply with legal or regulatory obligations, such as accounting, tax, or insurance requirements.
Consent: In specific cases, we may ask for your consent to process your data for particular purposes, such as optional marketing communications. Where we rely on consent, you have the right to withdraw it at any time.
How we use your personal data
We use the personal data we collect for the following purposes:
To respond to enquiries and provide quotations based on your requested service details.
To confirm and manage bookings, including scheduling, route planning, and resource allocation.
To deliver our man and van and related services at the addresses and times you have requested.
To issue invoices, process payments, and maintain financial records for accounting and tax purposes.
To communicate with you about your booking, including confirmations, updates, and any issues or changes.
To handle feedback, queries, complaints, and disputes in a fair and transparent manner.
To maintain business records, analyse service usage, and improve the efficiency and quality of our services.
To meet our legal and regulatory obligations and to cooperate with lawful requests from public authorities where required.
Data processors and third parties
We may share your personal data with trusted third parties who act as data processors on our behalf. These processors are engaged only to the extent necessary to provide our services or support our operations, and they are contractually required to handle your data securely and in accordance with data protection law.
Examples of data processors and third parties we may use include:
Service and booking management providers that assist with booking administration and scheduling.
Payment and accounting service providers that process payments and maintain financial records.
IT, hosting, and storage providers that support our systems, data storage, and security.
Professional advisers such as accountants, where necessary for legal or regulatory reasons.
We do not sell your personal data to third parties. We will only disclose your personal data to other third parties where required by law, where necessary to protect our rights, or with your explicit consent.
Data retention
We keep your personal data only for as long as necessary for the purposes for which it was collected, including to provide our services, maintain accurate records, and meet legal and regulatory requirements.
Enquiry and quotation data that does not lead to a booking may be retained for a limited period to respond to follow-up questions, manage potential bookings, or understand demand for our services.
Booking and service records, including invoices and essential correspondence, are retained for a period that allows us to meet our tax, accounting, and legal obligations and to address any disputes or warranty issues that may reasonably arise after the service date.
Where we rely on consent for optional marketing communications, we will retain the necessary contact details until you withdraw your consent or opt out, or until we decide to cease that type of communication.
When personal data is no longer needed, we will securely delete it or anonymise it so that it can no longer be associated with an identifiable individual.
International transfers
Where we use third-party service providers that store or process data outside the United Kingdom, we will take steps to ensure that your personal data receives an adequate level of protection. This may include using countries that have been deemed to provide an adequate level of data protection or using appropriate safeguards such as standard contractual clauses.
Security of your personal data
We take reasonable and proportionate technical and organisational measures to protect your personal data from unauthorised access, loss, misuse, alteration, or disclosure. These measures include access controls, secure storage practices, and limiting data access to those personnel and processors who need it to perform their duties.
While we strive to protect your personal data, no system can be guaranteed to be completely secure. We therefore encourage you to use caution when sharing personal information and to contact us if you suspect any misuse of your data in connection with our services.
Your data protection rights
Under the UK GDPR, you have a number of rights in relation to your personal data, subject to certain conditions and exceptions. These include:
The right of access: You have the right to request confirmation that we process your personal data and to obtain a copy of that data, together with information about how we use it.
The right to rectification: You have the right to ask us to correct personal data that is inaccurate or incomplete.
The right to erasure: You may request that we delete your personal data in certain circumstances, for example where it is no longer needed for the purposes for which it was collected and we have no legal obligation to retain it.
The right to restriction of processing: You may ask us to restrict the processing of your data in certain cases, such as while we are verifying its accuracy or considering an objection you have raised.
The right to object: You have the right to object to our processing of your personal data where we rely on legitimate interests, including any direct marketing based on those interests.
The right to data portability: Where processing is based on consent or contract and is carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine-readable format and to transmit it to another controller, where technically feasible.
The right to withdraw consent: Where we rely on your consent to process personal data, you can withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing that took place before the withdrawal.
You also have the right to lodge a complaint with a supervisory authority if you believe that we have not complied with data protection law. In the United Kingdom, this is the Information Commissioner’s Office.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or the services we offer. Any updated version will apply from the date it is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.
If you continue to use our services after changes to this Privacy Policy take effect, your continued use will be taken as acknowledgment of the updated terms to the extent permitted by law.
