Privacy Policy - Harrow Removals

Harrow Removals is committed to protecting the privacy and personal data of every customer, prospective customer, and website or service user. This Privacy Policy explains how we collect, use, store, share, and protect personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to all Harrow Removals customers in the area, including individuals and businesses who use our removal, packing, storage, and related services. By engaging our services, you acknowledge that your personal data may be processed as described in this Privacy Policy.

1. Personal Data We Collect

We collect only the personal data necessary to provide our services effectively, manage our relationship with you, and meet our legal obligations. The types of data we may collect include:

Identity details such as your name and title
Contact details such as address, telephone number, and email address
Service information such as moving date, pickup and delivery addresses, inventory details, access requirements, and special handling instructions
Payment and billing data such as billing address and payment status
Communication records such as emails, phone notes, and messages relating to enquiries, bookings, complaints, or feedback
Usage and technical information if you interact with our digital services, including IP address and device information where applicable

We may also collect limited information about third parties where required to complete a move, such as contact details for landlords, agents, building managers, or nominated recipients. Where you provide third-party information, you should ensure that you have the appropriate authority or consent to do so.

2. How We Use Your Data

We use personal data to deliver our removal services in a safe, reliable, and efficient way. Typical uses include:

Providing quotes and responding to enquiries
Planning, arranging, and carrying out removals and related services
Managing bookings, schedules, and operational logistics
Processing payments, refunds, and invoicing
Communicating service updates and responding to customer requests
Handling complaints, claims, and service issues
Meeting legal, tax, accounting, and insurance obligations
Protecting our business, staff, customers, and property

We do not use personal data for purposes that are incompatible with the reasons for which it was collected unless we have a lawful basis to do so and, where required, your consent.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for processing your personal data. Depending on the situation, Harrow Removals may rely on one or more of the following bases:

Contract

We process data where it is necessary to enter into or perform a contract with you. This includes preparing a quote you request, confirming a booking, carrying out your move, and managing associated administration.

Legal Obligation

We may process data where required to comply with laws and regulations, including record-keeping, tax requirements, accounting duties, fraud prevention, and responses to lawful requests from authorities.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. This may include improving our services, managing customer relationships, protecting against misuse, and maintaining internal business records.

Consent

In limited circumstances, we may rely on your consent, for example where it is required for certain communications or optional data uses. Where we rely on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

4. Data Sharing and Processors

We may share personal data with trusted third parties where necessary to operate our business and provide our services. These third parties act either as processors or as independent controllers, depending on their role.

Processors are third parties that process personal data on our behalf and under our instructions. They may include:

IT and cloud storage providers
Booking and administrative software providers
Payment service providers
Professional advisers such as accountants, auditors, and insurers
Waste disposal, storage, or logistics partners where required for service delivery

We only use processors that provide appropriate security and data protection safeguards. Contracts are put in place to ensure they process personal data lawfully, securely, and only for the agreed purposes.

We may also disclose personal data where necessary to comply with legal obligations, enforce agreements, prevent fraud, protect rights and safety, or in connection with business transactions such as a merger or restructuring. Any such disclosure will be limited to what is necessary and appropriate.

5. International Transfers

Where any of our service providers store or access personal data outside the United Kingdom, we take steps to ensure that adequate safeguards are in place. These may include approved data transfer mechanisms and contractual protections designed to keep your information secure and compliant with applicable law.

6. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Retention periods vary depending on the type of information and our legal obligations.

Quotation and enquiry data may be kept for a limited period to manage follow-up, customer service, and business records
Contract and service records are generally retained for the duration of the service relationship and for a reasonable period afterward
Financial and accounting records are retained for the period required by tax and accounting laws
Claims and complaint records may be kept longer where necessary to resolve disputes or defend legal claims

When personal data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you.

7. Data Security

We take the security of personal data seriously and apply appropriate technical and organisational measures to protect it from unauthorised access, alteration, disclosure, loss, or destruction. These measures may include access controls, secure storage, staff confidentiality requirements, and regular review of our data handling practices.

While we take reasonable steps to protect your data, no system can be guaranteed as completely secure. If a personal data breach occurs, we will assess the risk and take appropriate action in accordance with our legal obligations.

8. Your Rights

Under GDPR, you have important rights in relation to your personal data. Subject to certain legal limits, these rights include:

Right of access – to request a copy of the personal data we hold about you
Right to rectification – to ask us to correct inaccurate or incomplete data
Right to erasure – to request deletion of your data in certain circumstances
Right to restriction – to ask us to limit how we use your data in certain situations
Right to data portability – to receive certain data in a structured, commonly used format
Right to object – to object to processing based on legitimate interests or direct marketing
Right to withdraw consent – where processing is based on consent

If you exercise any of these rights, we may need to verify your identity before responding. We will respond within the time limits required by law, unless an extension is permitted.

9. Automated Decision-Making

We do not use fully automated decision-making or profiling in a way that produces legal or similarly significant effects on customers. If this changes in the future, we will update this policy and provide appropriate information about the process.

10. Complaints

If you have concerns about how we handle personal data, you should contact us through the appropriate internal process so we can review and address the issue. You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) or another relevant supervisory authority if you believe your data protection rights have been violated.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. Any updated version will apply from the date it is published. We encourage customers to review this policy periodically to stay informed about how we protect personal data.

12. Summary of Our Commitment

Harrow Removals respects the privacy of every customer and processes personal data responsibly, lawfully, and transparently. We collect only what we need, use it for clear and legitimate purposes, retain it for no longer than necessary, and protect it with suitable safeguards. This Privacy Policy applies to all Harrow Removals customers in the area and is intended to explain our practices in a clear and accessible way.