Privacy Policy - Westhampstead Cleaners

This Privacy Policy explains how Westhampstead Cleaners collects, uses, stores, shares, and protects personal data. It applies to all Westhampstead Cleaners customers in the area, including individuals who request, receive, or enquire about our cleaning services. We are committed to handling personal data fairly, lawfully, and transparently in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Westhampstead Cleaners provides domestic and commercial cleaning services. In connection with those services, we may process personal data relating to customers, prospective customers, household members, billing contacts, and other individuals whose information is necessary for service delivery. For the purposes of data protection law, Westhampstead Cleaners is the data controller in relation to the personal data described in this policy.

2. Personal Data We Collect

We only collect data that is relevant and necessary for providing our services, managing our relationship with customers, and meeting legal obligations. The information we may collect includes:

Identity data such as your name, title, and any relevant household or business contact details.
Contact data such as address, email address, and telephone number.
Service data such as service preferences, cleaning instructions, booking history, quotes, and appointment details.
Payment and transaction data such as payment status, invoices, and records of payments made or due.
Communication data such as messages, complaints, feedback, and records of customer service interactions.
Technical data where applicable, such as limited device or usage information if you interact with our digital systems.

We do not seek to collect special category data unless it is strictly necessary and lawful to do so. If such information is ever provided to us unintentionally, we will handle it carefully and only process it where a valid legal condition applies.

3. How We Use Personal Data

We use personal data for the following purposes:

To provide quotes, confirm bookings, and deliver cleaning services.
To manage customer accounts and service arrangements.
To process payments, issue invoices, and maintain financial records.
To communicate about appointments, changes, service issues, and customer queries.
To improve service quality, train staff, and handle complaints or disputes.
To comply with legal, tax, accounting, and regulatory obligations.
To protect our business, staff, customers, and property from fraud, misuse, or unlawful activity.

We always aim to use personal data in a way that is proportionate, relevant, and limited to what is necessary for the purposes for which it is processed.

4. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis for processing personal data. Depending on the context, Westhampstead Cleaners relies on one or more of the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes taking bookings, managing services, confirming attendance, and processing payments.

Legal Obligation

We process certain data to comply with legal requirements, including tax, accounting, record-keeping, and other obligations imposed by law.

Legitimate Interests

We may process personal data where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. This may include managing our business efficiently, improving services, preventing fraud, and keeping proper internal records.

Consent

Where we rely on consent, we will request it clearly and separately. You may withdraw consent at any time where consent is the lawful basis for processing. Withdrawal of consent will not affect processing already carried out lawfully before withdrawal.

We do not rely on personal data for purposes that are incompatible with those listed in this policy.

5. Retention of Personal Data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting, and reporting obligations. The length of time depends on the nature of the data and the reason for processing.

Customer and service records are generally kept for the duration of the customer relationship and for a reasonable period after the relationship ends.
Financial records are retained for the period required by tax and accounting laws.
Communications and complaints may be retained for longer where necessary to resolve disputes, demonstrate compliance, or protect legal rights.
Data no longer needed is securely deleted, anonymised, or otherwise disposed of in line with our retention practices.

We review retention periods periodically to ensure that information is not kept longer than necessary. When data is no longer required, it is erased or anonymised securely.

6. Processors and Data Sharing

In some cases, we use trusted third-party service providers, known as processors, to help us operate our business. These processors only process personal data on our instructions and are required to protect it appropriately.

Processors may include:

Payment service providers that handle card or electronic payments.
Accounting or bookkeeping providers that assist with financial administration.
IT, cloud storage, or software providers that help us store and manage records securely.
Scheduling, communication, or customer management systems used to organise bookings and service delivery.

We may also share personal data where required by law, where necessary to establish, exercise, or defend legal claims, or where we must protect the rights, safety, or property of Westhampstead Cleaners, our customers, or others. We do not sell personal data.

Where personal data is shared with processors, we take steps to ensure appropriate contractual safeguards are in place. This includes requirements relating to confidentiality, security, and lawful processing.

7. Your Rights

As a data subject under UK GDPR, you have a number of rights in relation to your personal data. These rights may apply in different circumstances and may be subject to certain legal exemptions.

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete information.
Right to erasure – in some cases, you can ask us to delete your personal data.
Right to restriction – you can ask us to limit how we use your data in certain situations.
Right to data portability – you can request certain data in a structured, commonly used, machine-readable format.
Right to object – you can object to processing based on legitimate interests, and in some cases to direct marketing.
Right to withdraw consent – where we rely on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond in accordance with applicable law. We may need to verify your identity before acting on your request. We aim to act promptly and within the time limits required by law.

You also have the right to lodge a complaint with the UK data protection supervisory authority if you believe your data protection rights have been infringed. We encourage you to raise concerns with us first so we can try to resolve the issue.

8. Data Security

We take appropriate technical and organisational measures to protect personal data from unauthorised access, accidental loss, alteration, disclosure, or destruction. These measures are designed to reflect the nature of the data we process and the risks involved.

Access to personal data is limited to authorised personnel and approved processors who need the information to perform their duties. We also expect staff and service providers to handle information confidentially and responsibly.

9. International Transfers

Where any service provider processes personal data outside the United Kingdom, we will take appropriate steps to ensure that the transfer is lawful and that your information remains protected to a standard consistent with UK GDPR requirements. This may include the use of approved contractual safeguards or other legally recognised transfer mechanisms.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or service arrangements. Any updated version will apply from the date it is published or otherwise communicated. We recommend reviewing this policy periodically so you remain informed about how your data is handled.

11. Scope of This Policy

This Privacy Policy applies to all Westhampstead Cleaners customers in the area and to personal data processed in connection with our cleaning services, whether the data is provided directly by you, by someone acting on your behalf, or obtained in the course of delivering our services. By using our services, you acknowledge that your personal data may be processed as described in this policy and in accordance with applicable data protection law.

We are committed to processing personal data fairly, lawfully, and transparently. We will only keep information for as long as necessary, will share it only where appropriate, and will respect your rights under the law.