Right to Access
Request a copy of your data
Privacy Policy
GDPR-Compliant Data Protection Statement
Last Updated: March 2026
Your Data Rights Under GDPR
Right to Rectify
Correct inaccurate data
Right to Erasure
"Right to be forgotten"
To exercise any rights, email: support@removalsandtransport.co.uk
1. Data Controller Information
Company Name
Removals & Transport
Company Number
13113412
VAT Number
482591268
Registered Address
42 River Road, Barking, IG11 0DA
Contact Email
support@removalsandtransport.co.uk2. What Personal Data We Collect
Data Categories
| Category | Examples | Purpose |
|---|---|---|
| Identity Data | Name, title, date of birth | Service delivery, ID verification |
| Contact Data | Address, email, phone | Communication, move coordination |
| Financial Data | Payment card details (tokenized) | Payment processing |
| Transaction Data | Booking details, invoices | Service fulfillment, accounting |
| Technical Data | IP address, browser type, cookies | Website functionality, security |
| Usage Data | Pages visited, time spent | Website optimization, analytics |
Identity Data
Name, title, date of birth
Service delivery, ID verification
Contact Data
Address, email, phone
Communication, move coordination
Financial Data
Payment card details (tokenized)
Payment processing
Transaction Data
Booking details, invoices
Service fulfillment, accounting
Technical Data
IP address, browser type, cookies
Website functionality, security
Usage Data
Pages visited, time spent
Website optimization, analytics
3. Legal Basis for Processing (GDPR Article 6)
We process your personal data under the following lawful bases:
A
Contractual Necessity (Art. 6(1)(b))
To perform our obligations under your booking contract (e.g., delivering your move, sending invoices).
B
Legal Obligation (Art. 6(1)(c))
To comply with HMRC tax records (7-year retention), anti-money laundering checks, customs declarations for international moves.
C
Legitimate Interest (Art. 6(1)(f))
Fraud prevention, network security, direct marketing (you can opt out). We've balanced this against your rights via a Legitimate Interest Assessment (LIA).
D
Consent (Art. 6(1)(a))
For marketing emails/SMS and non-essential cookies. You can withdraw consent anytime.
4. How We Use Your Data
- Process bookings and coordinate move logistics
- Send booking confirmations, driver ETAs, and move updates
- Process payments via Stripe/PayPal (PCI-DSS compliant)
- Handle insurance claims and liability disputes
- Improve website performance using Google Analytics (anonymised IPs)
- Send marketing communications (opt-in only, unsubscribe anytime)
- Comply with legal/regulatory requirements (tax, customs, court orders)
5. Who We Share Your Data With
We do NOT sell your data to third parties. Period.
We share data only when necessary with the following categories of recipients:
Service Providers (Data Processors)
Stripe (payments), SendGrid (emails), Twilio (SMS), Google Maps (route optimisation). All have Data Processing Agreements (DPAs).
Insurance Underwriters
To process claims if you purchase Goods in Transit insurance.
Regulatory Authorities
HMRC (tax compliance), ICO (if they request audit), Police (if fraud suspected), Courts (if subpoenaed).
6. International Data Transfers
Some of our service providers are located outside the UK/EEA. We ensure protection through:
UK Adequacy Decisions: Transfers to countries deemed "adequate" by the UK (e.g., EU, Japan, Canada).
Standard Contractual Clauses (SCCs): For US providers (Stripe, SendGrid), we use UK IDTA (International Data Transfer Agreement).
Supplementary Measures: Post-Schrems II, we rely on SCCs + Supplementary Measures (encryption, server location guarantees).
7. How Long We Keep Your Data
| Data Type | Retention Period | Reason |
|---|---|---|
| Booking records | 7 years | HMRC accounting rules |
| Marketing consents | Until withdrawn | PECR regulations |
| Website analytics | 26 months | Google Analytics default |
| CCTV footage (depot) | 30 days | Security purposes |
Booking records
7 years
HMRC accounting rules
Marketing consents
Until withdrawn
PECR regulations
Website analytics
26 months
Google Analytics default
CCTV footage (depot)
30 days
Security purposes
8. Your Data Protection Rights
Right of Access
Art. 15
Request a copy of your data (free, within 1 month).
Right to Rectification
Art. 16
Correct inaccurate or incomplete data.
Right to Erasure
Art. 17
"Right to be forgotten" (exceptions apply for legal obligations).
Right to Restrict Processing
Art. 18
Pause processing while we verify accuracy.
Right to Data Portability
Art. 20
Receive your data in CSV/JSON format.
Right to Object
Art. 21
Opt out of direct marketing (immediate effect).
To exercise any right, email support@removalsandtransport.co.uk with proof of ID.
9. Cookies & Tracking Technologies
We use the following cookies (see Cookie Banner on first visit):
Strictly Necessary: Session cookies, CSRF protection (cannot be disabled)
Performance: Google Analytics (anonymised IPs, opt-out available)
Functional: Language preferences, quote calculator data
Marketing: Facebook Pixel, Google Ads (requires consent)
10. Data Security Measures
TLS 1.3 encryption for all data in transit
AES-256 encryption for data at rest
Access controls (role-based permissions, 2FA for staff)
Annual penetration testing by external auditors
ISO 27001 certification (in progress)
Data breach response plan (72-hour ICO notification)
11. Children's Privacy
Our services are not directed at children under 18. If we discover we've collected data from a minor without parental consent, we will delete it immediately.
12. Right to Complain
If you believe we've mishandled your data, you can complain to:
UK Information Commissioner's Office (ICO)
Questions About Your Data?
Our team is here to help with any data protection queries. We respond to all inquiries within 3 working days.