Privacy Policy - Oven Cleaning Hampstead

This Privacy Policy explains how Oven Cleaning Hampstead collects, uses, stores, and protects personal data. It applies to all Oven Cleaning Hampstead customers in the area, including anyone who requests a quote, books a service, or interacts with us in relation to oven cleaning and related domestic cleaning services. We are committed to handling personal information in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who this policy applies to

This policy applies to customers, prospective customers, household members, and anyone whose personal data is provided to us in connection with a service request. It also applies to individuals who communicate with us about appointments, invoicing, service follow-up, complaints, or feedback. By using our services or providing your information, you acknowledge that this policy explains how your personal data may be processed.

2. Personal data we collect

We only collect personal data that is necessary for delivering our services, managing our business, and meeting legal obligations. Depending on the nature of your interaction with us, we may collect the following categories of information:

Identity data such as your name and, where relevant, the name of another household member or contact person.
Contact data such as address, email address, and telephone number.
Service information such as property access details, appointment preferences, service instructions, and details about the cleaning work requested.
Transaction data such as payment status, invoices, and records of services provided.
Communication data such as messages, complaint details, feedback, and correspondence with us.
Technical data if you contact us through digital systems, including basic device or usage information generated by our systems.

We do not intentionally collect special category data unless you choose to provide it and it is necessary for a specific service issue, such as access or safety arrangements. If such information is received, it will be handled with enhanced care and only where a lawful basis applies.

3. How we use your data

We use personal data for legitimate business and service purposes, including:

Providing quotations and confirming bookings.
Delivering oven cleaning and related services at your property.
Managing scheduling, access arrangements, and service changes.
Handling payments, invoicing, and record keeping.
Responding to enquiries, complaints, and follow-up requests.
Meeting legal, tax, accounting, and insurance requirements.
Improving our services, processes, and customer experience.
Preventing fraud, misuse, or unlawful activity.

We only process personal data for the purposes set out in this policy or for purposes that are compatible with them. We do not sell your personal data.

4. Lawful basis for processing

Under GDPR, we must have a lawful basis for every use of personal data. We rely on the following bases where appropriate:

Contract

We process your data when it is necessary to perform a contract with you or to take steps at your request before entering into a contract. This includes quoting, booking, carrying out cleaning services, and arranging payment.

Legal obligation

We may process and retain information where required to comply with legal obligations, such as tax, accounting, consumer law, and record retention requirements.

Legitimate interests

We may process data where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. Examples include managing our business, maintaining service records, improving customer service, and preventing misuse or fraud.

Consent

Where consent is needed, for example for certain optional communications, we will rely on consent that you can withdraw at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

5. Data sharing and processors

We may share personal data with trusted third parties who help us operate our business. These organisations act as processors or, in some cases, independent controllers. We only share the minimum data required and ensure appropriate safeguards are in place.

Payment providers for handling card or electronic transactions.
Accounting and bookkeeping services for invoicing, tax, and financial records.
IT and system providers for data storage, email, scheduling, and business administration.
Professional advisers such as insurers, auditors, legal advisers, or debt recovery services where necessary.

We may also disclose data if required by law, court order, regulatory authority, or to protect our rights, property, staff, customers, or the public. All processors are expected to process data only on our instructions, keep it secure, and delete or return it when no longer required.

6. Data retention

We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law. Retention periods depend on the type of information and our legal obligations.

Booking and service records are kept for a period necessary to manage the relationship and resolve any queries or disputes.
Invoice and payment records are generally retained for tax and accounting purposes in line with legal requirements.
Correspondence and complaint records may be kept for a reasonable period to evidence communications and service outcomes.

When personal data is no longer needed, we will securely delete, anonymise, or archive it in accordance with our internal retention practices.

7. Data security

We take appropriate technical and organisational measures to protect personal data from accidental loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, and limiting data access to personnel or processors who need it for legitimate business purposes. No method of transmission or storage is completely secure, but we work to protect your information to a standard appropriate to the risks involved.

8. Your rights under GDPR

You have several rights in relation to your personal data, subject to certain legal limitations. These rights include:

Right of access – request a copy of the personal data we hold about you.
Right to rectification – ask us to correct inaccurate or incomplete information.
Right to erasure – request deletion of your data in certain circumstances.
Right to restrict processing – ask us to limit how we use your data in certain cases.
Right to data portability – request that we provide certain data in a reusable format.
Right to object – object to processing based on legitimate interests or direct marketing.
Right to withdraw consent – where processing relies on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond in accordance with applicable data protection law. We may need to verify your identity before fulfilling your request. In some cases, we may be unable to comply fully if legal or operational obligations require us to retain certain information.

9. International transfers

If any of our processors store or access data outside the UK, we will ensure that appropriate safeguards are in place. These safeguards may include adequacy regulations, standard contractual clauses, or equivalent protective measures required by law.

10. Children’s data

Our services are intended for adults arranging domestic cleaning services. We do not knowingly collect personal data from children unless it is incidentally provided in the course of household service arrangements and is necessary for safety or access reasons. If we become aware that we have collected data that is not needed, we will take reasonable steps to delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. Any revised version will apply from the date it is published or otherwise communicated. We encourage you to review it periodically so you remain informed about how your information is used.

12. How we interpret our responsibilities

Oven Cleaning Hampstead is committed to fairness, transparency, and accountability in all personal data processing activities. We will only collect what we need, keep it secure, use it for clear purposes, and retain it only for as long as necessary. Your privacy matters to us, and we aim to handle your information in a way that respects both your rights and our legal obligations.

13. Summary of key commitments

We collect only relevant personal data needed to provide services.
We rely on contract, legal obligation, legitimate interests, or consent as lawful bases.
We share data only with trusted processors and legal authorities where necessary.
We keep data only as long as required and then delete or anonymise it.
We respect your GDPR rights and respond to valid requests appropriately.

This Privacy Policy applies to all Oven Cleaning Hampstead customers in the area and reflects our ongoing commitment to responsible data handling.