Privacy Policy - Oven Cleaning Croydon

This Privacy Policy explains how Oven Cleaning Croydon collects, uses, stores, and protects personal data in connection with the services we provide. It applies to all Oven Cleaning Croydon customers in the area, including anyone who requests a quotation, books a cleaning service, communicates with us, or otherwise interacts with our business. We are committed to handling personal information in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are

Oven Cleaning Croydon provides professional oven cleaning and related domestic cleaning services to customers in Croydon and surrounding local areas. For the purposes of data protection law, we act as the data controller for the personal information we collect and determine how and why that information is used.

2. Personal data we collect

We only collect personal data that is necessary for us to provide our services, manage our business, and meet legal obligations. The types of information we may collect include:

Identity details such as your name;
Contact details such as your address, email address, and telephone number;
Service information such as your booking history, service preferences, and instructions related to the cleaning work;
Payment-related information such as records of payments made, invoices, and transaction references;
Communication records such as emails, messages, notes from calls, and feedback;
Property information relevant to the service, such as appliance type, access details, and any cleaning concerns you share;
Technical data where applicable, such as basic website usage data or device information if you visit a digital platform associated with our services.

We do not intentionally collect special category personal data unless it is voluntarily provided and genuinely necessary for a specific purpose, in which case we will ensure that appropriate safeguards are in place.

3. How we use your personal data

We use personal data for legitimate business purposes connected to our services. These purposes may include:

responding to enquiries and providing quotations;
confirming, managing, and delivering cleaning appointments;
processing payments and maintaining business records;
communicating with you about your booking or service requirements;
handling complaints, queries, or follow-up requests;
meeting legal, accounting, and insurance obligations;
improving our services and customer experience;
preventing fraud, misuse, or unlawful activity.

We will only use your data for the purpose for which it was collected unless we reasonably determine that we need to use it for another compatible purpose and the law allows this.

4. Lawful basis for processing

Under UK GDPR, we must have a lawful basis before processing personal data. Depending on the circumstances, we rely on one or more of the following lawful bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes taking bookings, delivering oven cleaning services, and managing payments.

Legal obligation

We may process personal data where we are required to do so by law, including for tax, accounting, record-keeping, or regulatory purposes.

Legitimate interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This can include maintaining customer records, improving services, managing business operations, and protecting against misuse.

Consent

In limited cases, we may rely on your consent, for example if specific optional communications or certain types of marketing are offered. Where consent is used, you can withdraw it at any time.

5. Data sharing and processors

We may share personal data only when necessary and only with trusted third parties who act as processors or independent controllers under data protection law. These may include:

IT and email service providers that host, store, or help manage communications and records;
Booking or scheduling systems used to arrange appointments;
Payment processors that handle card or electronic payments securely;
Accountants or bookkeeping services that assist with financial and tax compliance;
Insurance providers where required for claims or risk management;
Legal or regulatory professionals where advice or disclosure is needed for compliance;
Service partners or subcontractors who help deliver a booked service under our instructions.

Where we use processors, we require them to protect personal data, use it only for authorised purposes, and keep it secure. We do not sell personal data to third parties.

6. International transfers

In some cases, your data may be stored or processed outside the UK, for example if a service provider uses servers in another country. Where this happens, we will ensure appropriate safeguards are in place so your personal data remains protected in line with UK data protection law.

7. Data retention

We keep personal data only for as long as necessary for the purpose it was collected, including to meet legal, accounting, or reporting requirements. Retention periods may vary depending on the type of record and the reason it is held.

In general:

customer service and booking records are kept for a reasonable period after the service is completed;
financial records are retained for the period required by tax and accounting laws;
communication records are kept as long as needed to deal with enquiries or resolve disputes;
records needed for legal claims may be retained until the relevant limitation period expires.

When personal data is no longer required, we will securely delete, anonymise, or archive it in accordance with our retention practices.

8. How we protect your data

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures may include secure storage systems, restricted access, password protection, staff awareness, and data minimisation practices. While no system can be guaranteed completely secure, we take data protection seriously and review our practices regularly.

9. Your rights under GDPR

As a data subject, you have rights under data protection law. These rights may apply depending on the circumstances and legal conditions. They include:

The right of access – to request a copy of the personal data we hold about you;
The right to rectification – to ask us to correct inaccurate or incomplete data;
The right to erasure – to ask us to delete your data in certain situations;
The right to restrict processing – to request limited use of your data in specific cases;
The right to object – to object to processing based on legitimate interests or direct marketing;
The right to data portability – to receive some data in a structured, commonly used format where applicable;
The right to withdraw consent – where processing relies on consent;
The right to complain – to raise concerns with the Information Commissioner’s Office (ICO) if you are unhappy with how your data has been handled.

We may need to verify your identity before responding to a request. Some rights may not always apply, particularly where we must retain information for legal or contractual reasons.

10. Marketing communications

If we ever send optional marketing messages, we will do so only where we are permitted to under the law. You can opt out of marketing at any time. Even if you choose not to receive marketing, you may still receive essential service-related communications such as booking confirmations or important updates about your appointment.

11. Children’s data

Our services are intended for adults arranging cleaning services for their homes or properties. We do not knowingly collect personal data directly from children. If we become aware that we have collected children’s data without an appropriate legal basis, we will take steps to delete it where required.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data protection practices. Any updated version will apply from the date it is made available. We encourage customers to review this policy periodically to stay informed about how we protect personal data.

13. Summary of our commitment

Oven Cleaning Croydon is committed to handling personal data responsibly, securely, and transparently. We collect only the information we need, use it for clear and lawful purposes, share it only with trusted processors when necessary, and retain it only for as long as required. All customers in the Croydon area can expect their personal information to be treated with care and in accordance with applicable privacy law.

This Privacy Policy is intended to provide general information about our data protection practices and should be read alongside any specific notices or terms that may apply to particular services.