Privacy Policy - Bermondsey Movers

Bermondsey Movers is committed to protecting the privacy and personal data of all customers, prospective customers, website users, and other individuals whose information we process. This Privacy Policy explains how we collect, use, store, share, and protect personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to all Bermondsey Movers customers in the Bermondsey area, as well as any individual whose personal data is processed by us in connection with our removal, packing, storage, delivery, and related services.

1. Information We Collect

We collect only the personal data that is necessary for providing our services effectively, safely, and lawfully. The information we may collect includes:

Identity details such as your name, title, and any business name where applicable.
Contact details such as telephone number, email address, and service address.
Service information such as move dates, pickup and delivery addresses, inventory details, access requirements, and special handling instructions.
Payment information such as billing details, payment status, and transaction records. We do not store unnecessary payment card details where these are handled by a secure payment processor.
Communications including emails, call notes, quotations, complaints, feedback, and messages exchanged with us.
Technical data where relevant, such as website usage data, device information, IP address, and cookies if you interact with digital services.
Proof and verification data such as identification documents or access authorisations, where required for security, compliance, or contractual reasons.

We may also receive personal data from third parties, including letting agents, landlords, property managers, estate agents, storage providers, or people authorised to act on your behalf. Where this occurs, we use the data only for legitimate service purposes and in line with this policy.

2. How We Use Personal Data

We use personal data to provide moving and related services efficiently and to meet our contractual, legal, and operational obligations. In particular, we may use your data to:

prepare quotations and service estimates;
arrange bookings and manage move logistics;
communicate about your move, scheduling, and service changes;
carry out packing, loading, transport, unloading, and storage services;
process payments and maintain financial records;
respond to enquiries, complaints, and claims;
maintain internal records and service quality;
protect our staff, customers, and property;
comply with legal, regulatory, tax, and insurance obligations.

We only process personal data for specified, explicit, and legitimate purposes. We will not use it in a way that is incompatible with those purposes unless we have a lawful basis to do so.

3. Lawful Basis for Processing

Under data protection law, we must have a valid lawful basis for each processing activity. Depending on the circumstances, Bermondsey Movers may rely on one or more of the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes creating quotations, managing bookings, delivering moving services, handling payments, and fulfilling agreed service obligations.

Legal Obligation

We may process data where required to comply with legal duties, such as accounting, tax, insurance, record-keeping, fraud prevention, or responding to lawful requests from public authorities.

Legitimate Interests

We may process data where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. Examples include managing operations, improving services, maintaining security, preventing misuse, and defending legal claims. Where we rely on legitimate interests, we consider the impact on individuals and ensure appropriate safeguards are in place.

Consent

In limited cases, we may process personal data based on your consent, such as for certain marketing communications or optional services. Where consent is used, it will be freely given, specific, informed, and unambiguous. You may withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

4. Sharing Data with Processors and Other Third Parties

We may share personal data with trusted third parties when necessary for the delivery of our services or when required by law. These third parties act either as processors or independent controllers, depending on the nature of the relationship.

Processors are service providers that process data on our instructions. They may include:

IT and cloud storage providers;
payment processing services;
customer relationship and communication tools;
accounting and invoicing providers;
inventory or logistics software providers;
storage facilities engaged to support a move;
professional advisers such as accountants, insurers, or legal advisers when necessary.

We require processors to handle personal data securely, only in accordance with our instructions, and in compliance with applicable data protection laws. They must implement appropriate technical and organisational measures to safeguard your information.

We may also disclose personal data to authorities, regulators, courts, law enforcement, or other third parties where disclosure is required by law or necessary to protect our rights, customers, staff, or property.

Where third parties act as independent controllers, they will be responsible for their own privacy practices. We encourage you to review their privacy information where relevant.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for service delivery, legal compliance, dispute resolution, and legitimate business needs. Retention periods depend on the type of data and the reason it was collected.

As a general approach:

Contract and service records are kept for the period needed to manage the customer relationship and handle any follow-up issues.
Financial and accounting records are retained for the period required by tax and accounting laws.
Complaint, claim, and legal records may be kept for longer where necessary to establish, exercise, or defend legal rights.
Consent-based marketing data is retained until you withdraw consent or we determine it is no longer needed.

When data is no longer required, we will securely delete, anonymise, or otherwise dispose of it in line with our retention procedures. We do not keep personal data indefinitely.

6. Data Security

We take the security of personal data seriously and apply appropriate technical and organisational measures to protect against unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures may include access controls, staff training, secure storage, encryption where appropriate, and regular review of our processes.

While we work hard to protect personal data, no system can be guaranteed completely secure. If a personal data breach occurs and presents a risk to your rights and freedoms, we will handle it in accordance with applicable law and take the necessary steps to mitigate harm.

7. Your Rights Under GDPR

You have important rights regarding your personal data. Subject to legal conditions and exceptions, these rights may include:

Right of access - to request confirmation of whether we process your personal data and to receive a copy of it.
Right to rectification - to correct inaccurate or incomplete data.
Right to erasure - to request deletion of your data in certain circumstances.
Right to restriction - to ask us to limit how we use your data in certain situations.
Right to data portability - to receive certain data in a structured, commonly used, machine-readable format where applicable.
Right to object - to object to processing based on legitimate interests or direct marketing.
Right to withdraw consent - where processing is based on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been breached. We encourage you to raise concerns with us first so we can try to resolve the matter promptly.

8. International Transfers

If personal data is transferred outside the UK, we will only do so where appropriate safeguards are in place to protect your information. This may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms permitted by data protection law.

9. Children’s Data

Our services are not directed at children, and we do not knowingly collect personal data from children unless it is necessary in connection with a service request made by a parent, guardian, or authorised adult. Where such data is processed, we do so only where lawful and necessary.

10. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data protection practices. Any updated version will apply from the date it is made available. We encourage customers to review this policy periodically to remain informed about how personal data is handled.

11. Summary of Our Commitment

Bermondsey Movers respects your privacy and is committed to processing personal data fairly, transparently, and securely. We collect only what we need, use it for clear purposes, retain it for no longer than necessary, and share it only with trusted processors or where the law requires it. Your trust matters to us, and we aim to handle your information with care at every stage of our service.

This Privacy Policy applies to all Bermondsey Movers customers in the Bermondsey area.