Privacy Policy - Sutton Removals

Sutton Removals is committed to protecting the privacy and personal data of our customers, prospective customers, suppliers, and website users. This Privacy Policy explains how we collect, use, store, share, and protect personal information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to all Sutton Removals customers in the area, including anyone who requests a quotation, books a removal service, makes an enquiry, or otherwise interacts with us in connection with our services.

1. Who We Are

Sutton Removals provides moving and relocation services for residential and commercial customers. For the purposes of data protection law, we act as the data controller for the personal data described in this Privacy Policy. This means we determine the purposes and means of processing your personal information.

2. Information We Collect

We may collect and process the following categories of personal data:

Identity details such as your name, title, and, where relevant, the name of your business or organisation.
Contact details including your address, email address, and telephone number.
Service details including your removal date, property access information, inventory lists, delivery instructions, and storage requirements.
Payment details such as transaction records, invoicing information, and payment status. We do not necessarily store full card details if payment is processed through a secure payment provider.
Communication records including emails, messages, call notes, and any feedback or complaints you provide.
Technical data where applicable, such as IP address, browser type, and device information if you use digital channels to contact us.
Special category data only where strictly necessary and limited to information you voluntarily provide, for example access needs or health-related moving requirements. We process such data carefully and only when there is a lawful basis to do so.

We generally collect personal data directly from you when you request a quote, make a booking, complete forms, call, email, or otherwise engage with us. In some cases, we may also receive data from third parties such as estate agents, landlords, solicitors, letting agents, or business partners where this is necessary for arranging a move.

3. How We Use Your Personal Data

We use your information for the following purposes:

To provide quotations and assess service requirements.
To manage bookings and complete removal services.
To communicate with you before, during, and after the move.
To issue invoices, process payments, and maintain accounting records.
To manage customer service enquiries, complaints, and service improvements.
To comply with legal and regulatory obligations.
To protect our business from fraud, misuse, or security incidents.
To keep internal records and evidence of services provided.

We only process personal data where it is necessary, relevant, and limited to the purposes described in this policy.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for processing your personal data. Depending on the context, Sutton Removals relies on one or more of the following lawful bases:

Contract

We process your data when it is necessary to take steps at your request before entering into a contract or to perform a contract with you. This includes preparing quotations, arranging services, carrying out the move, and managing related administration.

Legal Obligation

We may process data where necessary to comply with legal requirements, such as tax, accounting, insurance, record-keeping, or responding to lawful requests from authorities.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. This may include service management, quality control, improving operations, preventing fraud, and handling customer correspondence.

Consent

In limited situations, we may rely on your consent, for example where you voluntarily provide information that is not otherwise necessary for the service. Where we rely on consent, you may withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

5. Sharing Your Data and Processors

We may share your personal data with trusted third parties where necessary to deliver our services, operate our business, or meet legal requirements. These third parties may act as processors or independent controllers depending on the relationship and purpose.

Processors We May Use

IT and cloud service providers who host or support our systems, email, and storage.
Accounting and invoicing providers who help manage financial records.
Payment processors who handle secure transaction processing.
Customer management software providers used for booking and service administration.
Communication service providers that support email, phone, or messaging operations.
Professional advisers such as accountants, insurers, or legal advisers where necessary.

Where a third party processes data on our behalf, we ensure appropriate contractual safeguards are in place and that they only use the data according to our instructions and applicable law.

We may also disclose information to public authorities, courts, or regulators where required or permitted by law. If our business is restructured, sold, or transferred, personal data may be shared as part of that process subject to legal protections.

6. International Transfers

Where personal data is transferred outside the United Kingdom, we will ensure that appropriate safeguards are in place, such as adequacy regulations, standard contractual clauses, or equivalent legal protections. We take reasonable steps to ensure your information remains protected wherever it is processed.

7. Retention of Personal Data

We retain personal data only for as long as necessary for the purposes for which it was collected, including to fulfil contractual obligations, comply with legal requirements, resolve disputes, and enforce agreements.

Our retention periods depend on the type of information and the reason for holding it. In general:

Quotation and enquiry data may be retained for a reasonable period to manage follow-up enquiries and business records.
Customer service and contract data may be retained for the duration of the service relationship and for a further period afterwards where necessary.
Financial and tax records are kept for the period required by law and accounting practice.
Complaints and dispute records may be retained until the matter is resolved and for an additional period if needed for legal defence.

When personal data is no longer required, we will securely delete, anonymise, or archive it in accordance with our retention practices. We do not keep personal data indefinitely.

8. Data Security

We use appropriate technical and organisational measures to protect personal data from unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, password protection, and regular review of our systems and procedures.

Although we take reasonable steps to safeguard data, no method of transmission or storage is completely secure. If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will act in accordance with legal obligations, which may include notifying the relevant authority and affected individuals where required.

9. Your Rights

Under UK data protection law, you have a number of rights in relation to your personal data. Depending on the circumstances, these may include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain situations.
Right to restriction – to ask us to limit the way we process your data in certain cases.
Right to object – to object to processing based on legitimate interests or direct marketing, where applicable.
Right to data portability – to receive certain data in a structured, commonly used format where the legal conditions are met.
Right to withdraw consent – where processing is based on consent.

To exercise your rights, you may contact us using the details provided through our usual business channels. We may need to verify your identity before responding to your request. We will respond within the time limits set by law unless an extension is permitted.

If you are unhappy with how we handle your personal data, you also have the right to lodge a complaint with the UK Information Commissioner’s Office. We would, however, appreciate the chance to address your concerns first.

10. Children’s Data

Our services are intended for adults, and we do not knowingly collect personal data from children unless it is necessary in the context of a service request and provided by a responsible adult. If we learn that we have collected data from a child without appropriate permission or necessity, we will take steps to delete it where required.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or our data processing practices. Any updated version will take effect when made available. We encourage you to review this policy periodically so that you remain informed about how we protect your personal data.

12. Summary of Our Commitment

Sutton Removals treats privacy as an important part of the service we provide. We collect only the information needed to deliver removals, communicate effectively, manage our business, and meet legal obligations. We process personal data lawfully, keep it secure, limit access to trusted processors, and retain it only for as long as necessary. We also respect your rights and aim to handle all personal information transparently, fairly, and responsibly.

This Privacy Policy applies to all Sutton Removals customers in the area.