Privacy Policy - Oven Cleaning Clapham

This Privacy Policy explains how Oven Cleaning Clapham collects, uses, stores, shares, and protects personal data when providing oven cleaning and related domestic cleaning services. It applies to all Oven Cleaning Clapham customers in the area, including prospective customers, existing customers, and individuals who enquire about our services. We are committed to handling personal data in a lawful, fair, transparent, and secure manner in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who This Policy Applies To

This policy applies to anyone who:

requests a quotation or makes an enquiry;
books a service;
receives a cleaning service;
communicates with us by phone, email, text, online form, or in person;
visits our website or interacts with our marketing where applicable;
is a resident, tenant, landlord, property manager, or other person connected to a property serviced by us.

We only process personal data where there is a valid legal reason to do so and where it is necessary for legitimate business purposes, service delivery, legal compliance, or with consent where required.

2. Data We Collect

We may collect and process the following categories of personal data:

Identity information: name, title, and, where needed, information used to verify identity.
Contact details: address, email address, telephone number, and preferred communication method.
Service information: booking details, service history, property access notes, cleaning preferences, and instructions.
Billing and payment information: invoice details, payment status, transaction records, and limited payment-related data processed through secure payment providers.
Communication records: emails, call notes, messages, feedback, complaints, and review responses.
Technical and usage data: basic device, browser, and website interaction data where our digital services collect it, such as cookies or analytics information.
Security and incident data: information necessary to protect our staff, customers, and business, such as records of access arrangements or incident reports.

We do not intentionally collect special category data unless it is strictly necessary and permitted by law. If such data is inadvertently shared with us, we will only process it where there is a lawful basis and appropriate safeguards.

3. How We Use Personal Data

We use personal data for the following purposes:

to provide quotations and manage bookings;
to deliver oven cleaning services safely and efficiently;
to communicate about appointments, service updates, and customer queries;
to issue invoices, process payments, and maintain financial records;
to handle complaints, feedback, and service follow-up;
to improve our services, processes, and customer experience;
to comply with legal, regulatory, tax, and insurance obligations;
to protect against fraud, misuse, unauthorised access, or other security risks;
to maintain internal records and business administration.

We process data only to the extent necessary for these purposes and in a way that is compatible with the original reason for collection.

4. Lawful Basis for Processing

Under UK GDPR, we rely on one or more of the following lawful bases:

Contract

We process data where it is necessary to enter into or perform a contract with you. This includes taking bookings, carrying out cleaning services, confirming appointments, and handling payment-related administration.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. Examples include maintaining records, improving services, preventing fraud, responding to enquiries, and ensuring the security of our operations.

Legal Obligation

We process data where we are required to do so by law, including for accounting, tax, insurance, and record-keeping purposes.

Consent

Where required, we rely on your consent, for example in relation to certain marketing communications or optional cookies. You may withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

5. Sharing Data and Processors

We may share personal data with trusted third parties who act as processors or, in some cases, independent controllers. These parties process data only where necessary and under appropriate contractual or legal safeguards.

Typical processors may include:

Payment service providers for secure transaction handling;
Booking and scheduling platforms used to manage appointments;
IT and cloud storage providers that support our systems and data storage;
Email and communication service providers used for business correspondence;
Accounting and invoicing services for financial administration;
Customer relationship management tools that help manage service records and communications;
Professional advisers such as accountants, insurers, or legal advisers where necessary.

We may also share data if required by law, regulation, court order, or to protect our legal rights, staff, customers, or property. We do not sell personal data.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting obligations. Retention periods may vary depending on the nature of the information and why it is held.

Customer service and booking records: retained for as long as needed to manage the customer relationship and any follow-up issues.
Financial and invoice records: retained for the period required by tax and accounting law.
Correspondence and complaint records: retained for a reasonable period to evidence service history and resolve disputes.
Technical data: retained for limited periods unless needed for security, analysis, or legal reasons.

When personal data is no longer required, we will delete, anonymise, or securely archive it in accordance with our retention practices.

7. Data Security

We use appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures may include access controls, secure storage, staff training, confidentiality practices, and limited data sharing on a need-to-know basis.

Although we take reasonable steps to safeguard information, no system can be guaranteed to be completely secure. If a data breach occurs that affects your rights and freedoms, we will respond in accordance with applicable law and notify the relevant authorities where required.

8. Your Rights

As a data subject under UK GDPR, you may have the following rights in relation to your personal data:

Right of access: request a copy of the data we hold about you;
Right to rectification: ask us to correct inaccurate or incomplete information;
Right to erasure: request deletion of data in certain circumstances;
Right to restriction: ask us to limit processing in certain situations;
Right to data portability: receive data you provided to us in a structured, commonly used format where applicable;
Right to object: object to processing based on legitimate interests or direct marketing;
Right to withdraw consent: where processing is based on consent, withdraw it at any time;
Right to complain: raise concerns with the relevant supervisory authority if you believe your data has been mishandled.

These rights may be subject to legal limits and exemptions. We may need to verify your identity before responding to a request.

9. Marketing Communications

We will only send marketing communications where permitted by law. If you have given consent or where soft opt-in rules apply, we may contact you with relevant information about our services. You can opt out at any time by using the unsubscribe option where provided or by telling us directly that you no longer wish to receive marketing messages.

10. Cookies and Online Tracking

If we operate a website or online booking system, we may use cookies or similar technologies to support functionality, remember preferences, measure performance, and improve user experience. Where consent is required, we will request it before placing non-essential cookies. You can manage cookie preferences through your browser settings or through any cookie controls provided.

11. International Transfers

If any personal data is transferred outside the UK, we will ensure that suitable safeguards are in place to protect it. These safeguards may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms recognised under applicable data protection law.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. Any updated version will apply from the date it is issued. We encourage customers in Clapham and the surrounding area to review this policy periodically so they remain informed about how their data is used.

13. Contact and Complaints

If you have questions about this Privacy Policy, wish to exercise your rights, or believe your data has been processed incorrectly, you should contact us using the relevant service channel you normally use. If you remain unhappy with the outcome, you may lodge a complaint with the UK data protection authority.

In summary: Oven Cleaning Clapham processes customer data only where lawful, necessary, and proportionate, with clear safeguards in place. We respect your privacy and aim to maintain transparent, secure, and responsible data handling for every customer in our area.