Privacy Policy - Sutton Movers

This Privacy Policy explains how Sutton Movers collects, uses, stores, shares, and protects personal data when providing moving and related services. It applies to all Sutton Movers customers in the area, including prospective customers, current customers, former customers, and any individuals who interact with us in connection with our services. We are committed to processing personal data in a lawful, fair, and transparent manner in line with the UK GDPR and the Data Protection Act 2018.

1. Who We Are

Sutton Movers provides removals, packing, storage coordination, and associated customer support services. In order to deliver these services effectively, we may need to collect and use personal data about you, your household members, your business contacts, delivery recipients, and other people relevant to a move. This Policy describes the categories of data we process and the rights you have in relation to that data.

2. Personal Data We Collect

We collect only the information that is necessary for the purposes described in this Policy. The types of data we may collect include:

Identity details such as your name, title, and, where relevant, the names of household members or authorised representatives.
Contact details such as your address, email address, and telephone number.
Service information including move dates, property addresses, inventory details, access requirements, and instructions for handling items.
Payment and billing information such as invoice records, payment status, and transaction references. We do not intentionally store full card details where a secure payment provider is used.
Communication records including emails, messages, notes of phone calls, and any preferences or complaints you share with us.
Technical information where applicable, such as IP address, browser details, and website usage data if you submit a form or interact with our online services.
Special category data only where necessary and provided by you, for example information about access needs, health or mobility considerations that help us carry out a move safely.

We generally collect personal data directly from you. We may also receive data from third parties such as estate agents, landlords, solicitors, storage providers, or building managers where this is necessary for service delivery or coordination.

3. How We Use Your Data

We use personal data for the following purposes:

to provide quotations, schedule surveys, and arrange moving services;
to plan, manage, and complete your move;
to communicate with you about bookings, changes, delays, or service issues;
to process payments, send invoices, and maintain accounting records;
to handle complaints, claims, and customer support queries;
to improve our services, internal operations, training, and quality control;
to comply with legal, regulatory, insurance, and tax obligations;
to protect our business, staff, customers, and property from fraud, misuse, or other unlawful activity.

We will only use your personal data for the purposes for which it was collected, unless we reasonably consider that we need to use it for another compatible purpose and that purpose is lawful.

4. Lawful Basis for Processing

We process personal data only where we have a valid legal basis under the UK GDPR. Depending on the activity, our lawful bases may include:

Contract – where processing is necessary to enter into or perform a contract with you, such as arranging your move, issuing invoices, or responding to booking requests.
Legal obligation – where we must process data to meet legal requirements, including tax, accounting, insurance, and record-keeping duties.
Legitimate interests – where processing is necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms, such as service improvement, business administration, fraud prevention, and dispute management.
Consent – where we rely on your consent for specific optional activities, for example certain marketing communications or the handling of special category data when no other lawful basis applies.
Vital interests – in rare cases where processing is necessary to protect someone’s life or safety.

If we process special category data, we will do so only when an additional condition under the law is met, such as explicit consent or necessity for legal claims, health and safety, or substantial public interest where applicable.

5. Sharing and Processors

We may share personal data with trusted third parties where necessary to operate our services and meet legal requirements. These parties act either as processors, acting on our instructions, or as independent controllers in their own right.

Examples of processors may include:

IT and cloud service providers that host our systems, email, storage, and business software;
payment service providers that handle secure transactions;
accountants and bookkeeping services that assist with financial records;
customer management and communications tools used to organise bookings and service updates;
storage or logistics partners where coordination is needed for your move;
professional advisers such as lawyers, insurers, or auditors;
public authorities where disclosure is required by law or necessary to protect rights and safety.

We require our processors to handle personal data securely, to use it only for the purposes we specify, and to implement appropriate technical and organisational measures. We do not sell your personal data.

6. International Transfers

If any of our processors store or access data outside the UK, we will ensure that appropriate safeguards are in place before the transfer occurs. These safeguards may include adequacy regulations, standard contractual clauses, or other legally approved measures designed to protect your data to a required standard.

7. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, insurance, and reporting obligations. Retention periods depend on the type of data and the context in which it was collected.

Customer and booking records are usually retained for the period needed to provide the service and resolve any follow-up issues.
Financial and tax records are retained for the period required by law.
Complaints, claims, and correspondence may be retained for longer where needed to defend or pursue legal claims.
Marketing preferences are kept until you withdraw consent or object.

When personal data is no longer needed, we will securely delete, anonymise, or archive it in accordance with our retention procedures. We regularly review the data we hold to ensure it is not kept longer than necessary.

8. Data Security

We use appropriate security measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures may include access controls, secure storage, encryption where appropriate, staff training, and minimisation of data access. While no system can be guaranteed to be completely secure, we take reasonable steps to safeguard the information entrusted to us.

9. Your Rights

Under data protection law, you have several rights in relation to your personal data. Subject to legal limits and exemptions, you may have the right to:

access the personal data we hold about you;
rectify inaccurate or incomplete data;
erase your data in certain circumstances;
restrict how we use your data in certain situations;
object to processing based on legitimate interests or direct marketing;
data portability where processing is based on consent or contract and carried out by automated means;
withdraw consent at any time where processing relies on consent, without affecting the lawfulness of processing before withdrawal.

You also have the right to be informed about how your data is used, and the right not to be subject to decisions based solely on automated processing where such decisions have legal or similarly significant effects.

We may need to verify your identity before responding to a request. We will aim to respond within the time limits set by law and will keep you informed if we need more information to complete your request.

10. Marketing Preferences

We may send you service-related updates that are necessary for the delivery of our work. Where we send optional marketing communications, we will do so only in line with applicable law. You can object to direct marketing at any time, and we will respect your preference.

11. Children’s Data

Our services are not directed at children, and we do not knowingly collect personal data from children except where it is incidentally necessary for a move. If we become aware that we have collected data from a child without appropriate authorisation, we will take reasonable steps to delete it unless we are required to keep it for legal reasons.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or service arrangements. Any revised version will apply from the date it is made available. We encourage you to review it periodically so you remain informed about how we process personal data.

13. Complaints

If you are concerned about the way we handle your personal data, you should let us know so we can review the matter. You also have the right to lodge a complaint with the relevant data protection authority if you believe your rights have been infringed. We would, however, appreciate the opportunity to address your concerns first.

In summary: Sutton Movers processes personal data responsibly and only when necessary for service delivery, legal compliance, and legitimate business needs, while respecting your rights and protecting your information.