Privacy Policy - Cleaners Westhampstead

This Privacy Policy explains how Cleaners Westhampstead collects, uses, stores, shares, and protects personal data. It applies to all Cleaners Westhampstead customers in the area, including individuals who enquire about, book, receive, or pay for our cleaning services. We are committed to handling personal data in a lawful, fair, and transparent way in accordance with the UK GDPR and the Data Protection Act 2018.

1. Who We Are

For the purposes of data protection law, Cleaners Westhampstead is the data controller in relation to the personal data described in this policy. This means we determine the purposes and means of processing your personal information when you use our services, communicate with us, or interact with our business in the course of receiving cleaning services.

2. Personal Data We Collect

We collect only the information that is necessary for us to provide cleaning services, manage our relationship with you, and meet our legal obligations. The personal data we may collect includes:

Identity data, such as your name and title.
Contact data, such as your address, email address, and telephone number.
Service data, such as service preferences, booking details, cleaning instructions, and information relating to access arrangements.
Payment data, such as payment status and transaction records. We do not store full card details unless this is necessary and securely handled by a compliant payment provider.
Communication data, such as messages, feedback, complaints, and notes from customer support interactions.
Technical data, where applicable, such as limited device or usage information when you interact with our digital systems.

We may also collect information you choose to provide voluntarily, such as special instructions for cleaning, scheduling preferences, or details needed to complete a service safely and effectively. We do not knowingly collect more personal data than is needed.

3. How We Use Your Data

We use personal data for the following purposes:

To register and manage your customer account or service request.
To provide cleaning services and fulfil bookings.
To communicate with you about appointments, changes, service updates, or billing matters.
To process payments, refunds, or credit notes where applicable.
To maintain service quality, respond to enquiries, and handle complaints.
To comply with legal, tax, accounting, and regulatory requirements.
To protect against fraud, misuse, or security incidents.
To improve our operations, training, and customer experience.

We only use personal data where we have a valid reason to do so. Lawfulness, fairness, and transparency are central to everything we do.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for processing your personal data. Depending on the nature of our interaction with you, we rely on one or more of the following lawful bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes managing bookings, carrying out cleaning services, and handling payment-related administration.

Legal Obligation

We may process and retain certain information to comply with legal duties, including tax, accounting, record-keeping, and safeguarding obligations.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This may include service improvement, internal administration, fraud prevention, and maintaining business security.

Consent

In limited cases, we may rely on your consent, for example for optional communications or certain types of marketing where required. If we rely on consent, you have the right to withdraw it at any time.

5. Data Sharing and Processors

We may share personal data with trusted third parties who act as processors on our behalf. These organisations only process data according to our instructions and are required to protect it appropriately. Examples of processors may include:

Payment service providers that securely handle transactions.
Booking, scheduling, and administration software providers.
IT hosting, cloud storage, and email service providers.
Customer relationship management and support tools.
Professional advisers such as accountants or legal advisers, where necessary.

We may also disclose data where required by law, court order, or regulatory authority, or where necessary to protect our rights, staff, customers, or property. We do not sell personal data.

6. International Transfers

Where a processor or service provider stores or accesses personal data outside the United Kingdom, we take appropriate measures to ensure that your data remains protected. These measures may include adequacy regulations, standard contractual clauses, or other lawful safeguards recognised under applicable data protection law.

7. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including meeting legal, accounting, or reporting requirements. Retention periods vary depending on the type of information and why it is held.

Customer and booking records are generally retained for the period needed to manage our relationship and handle any follow-up queries.
Financial and invoice records are retained in line with legal and tax obligations.
Communication records may be kept for a reasonable period to resolve disputes, improve service, or maintain accurate business records.

When personal data is no longer required, we will securely delete it or anonymise it so that it can no longer identify you.

8. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure systems, staff confidentiality obligations, and data minimisation practices. While no system can be guaranteed completely secure, we take reasonable steps to safeguard information at all times.

9. Your Rights

As a data subject, you have rights over your personal data. Subject to certain legal conditions and exemptions, you may have the right to:

Access the personal data we hold about you.
Rectify inaccurate or incomplete information.
Erase your personal data in certain circumstances.
Restrict the processing of your data in some situations.
Object to processing based on legitimate interests or direct marketing.
Data portability where processing is based on consent or contract and carried out by automated means.
Withdraw consent at any time where processing relies on consent.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office if you are concerned about how your personal data has been handled. We encourage you to raise any concerns with us first so we can try to resolve the matter promptly.

10. Children’s Data

Our cleaning services are not directed at children, and we do not knowingly collect personal data from children except where it is incidental to the provision of services to an adult customer, such as access or household instructions. If we become aware that we have collected children’s data improperly, we will take steps to delete it where appropriate.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our operations, legal obligations, or data protection practices. Any updates will take effect when published. We encourage customers to review this policy periodically to remain informed about how we process personal data.

12. Summary of Our Commitment

At Cleaners Westhampstead, we are committed to respecting your privacy and handling your personal data responsibly. We collect only what we need, use it for clear and lawful purposes, share it only with trusted processors or where required by law, and retain it only for as long as necessary. Our approach is built on accountability, security, and respect for your rights.

This policy applies to all Cleaners Westhampstead customers in area. If you use our services, you can expect your information to be treated with care and in accordance with applicable data protection law.