Privacy Policy - Deep Cleaning Enfield

Effective date: This Privacy Policy applies to all Deep Cleaning Enfield customers in the area and explains how we collect, use, store, share, and protect personal data in connection with our cleaning services.

We are committed to handling personal information in a lawful, fair, and transparent manner in accordance with the UK GDPR and the Data Protection Act 2018. This policy is intended to help customers understand what personal data we process, why we process it, how long we keep it, and the rights available to individuals.

1. Who this policy applies to

This Privacy Policy applies to all customers, prospective customers, and service recipients of Deep Cleaning Enfield in the area where our services are offered. It also applies to individuals who interact with us on behalf of a customer, such as household members, tenants, landlords, managing agents, or business representatives, where their personal data is provided to us in connection with a booking or service request.

2. Personal data we collect

We only collect personal data that is necessary to provide our services, manage our operations, and comply with legal obligations. The data we collect may include:

Identity information: name, title, and, where relevant, business name or property ownership details.
Contact information: address, email address, telephone number, and other communication details.
Service and booking information: details of requested services, property type, service dates, access instructions, preferences, and notes relevant to the job.
Payment information: billing details, payment status, and transaction records. We do not store full card details unless required by a secure payment provider.
Communication records: emails, call notes, messages, complaints, feedback, and other correspondence.
Technical information: limited information such as IP address or device data if it is collected through digital systems used for security, fraud prevention, or service administration.
Special category data: we do not عادة seek to collect special category personal data. If such data is incidentally provided, for example through access notes relating to health or vulnerability, it will only be processed where strictly necessary and with appropriate safeguards.

We ask that customers only share information necessary for service delivery and avoid including sensitive information unless it is required for the safe performance of the service.

3. How we use personal data

We use personal data for the following purposes:

to respond to enquiries and provide quotes;
to arrange and deliver cleaning services;
to manage access to properties and ensure safe service delivery;
to process payments and issue invoices or receipts;
to communicate about appointments, changes, and service updates;
to handle complaints, disputes, or service follow-up;
to keep business records and support accounting, tax, and insurance requirements;
to improve our services, train staff, and maintain quality standards;
to detect and prevent fraud, misuse, or unlawful activity;
to comply with legal and regulatory obligations.

We do not use personal data for automated decision-making that produces legal or similarly significant effects.

4. Lawful basis for processing

Under data protection law, we must have a lawful basis for each type of processing. Depending on the circumstances, we rely on one or more of the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with a customer. This includes taking bookings, arranging access, delivering cleaning services, and managing payments.

Legitimate interests

We may process personal data where it is necessary for our legitimate interests and where those interests are not overridden by the rights and freedoms of the individual. This may include managing customer records, improving service quality, preventing fraud, and protecting our business and staff.

Legal obligation

We process personal data where necessary to comply with legal requirements, such as accounting, tax, record-keeping, insurance, or responding to lawful requests from public authorities.

Consent

Where we rely on consent, we will make this clear at the time of collection. For example, consent may be used for optional communications or for the processing of particularly sensitive information when no other lawful basis is appropriate. You may withdraw consent at any time, although this will not affect processing carried out before withdrawal.

5. Sharing personal data and processors

We do not sell personal data. However, we may share it with trusted third parties where necessary to operate our business and deliver services. These third parties act as processors or, in some cases, separate controllers.

Processors may include:

Payment processors: to securely handle card or online payments.
Booking and administration systems: to manage appointments, invoices, and customer records.
Email, messaging, and cloud storage providers: to facilitate communication and securely store business records.
IT and website service providers: to maintain digital systems, security, and backups.
Professional advisers: such as accountants, insurers, legal advisers, and auditors where necessary.
Regulators, law enforcement, or public authorities: where disclosure is required by law or to protect rights, property, or safety.

Where processors are used, we require them to process personal data only on our instructions, to keep it confidential, and to apply appropriate security measures. We take reasonable steps to ensure that any third party handling personal data does so in line with data protection law.

6. International transfers

If any processor or service provider stores or accesses personal data outside the UK, we will ensure that appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or equivalent legal mechanisms designed to protect the data to an appropriate standard.

7. Data retention

We keep personal data only for as long as necessary for the purpose for which it was collected, including to meet legal, accounting, insurance, and reporting requirements. Retention periods depend on the type of information and the nature of the relationship with the customer.

Customer and booking records: retained for as long as needed to manage the service relationship and resolve issues.
Invoices, receipts, and payment records: retained for the period required by tax and accounting law.
Communication records: kept for a reasonable period to support service management, complaints handling, and evidence of agreements.
Safety or incident records: retained as long as necessary for risk management, insurance, or legal claims.

When personal data is no longer required, we will delete it securely or anonymise it so that it can no longer identify an individual. Retention is reviewed regularly to ensure data is not held for longer than needed.

8. Data security

We use appropriate technical and organisational measures to protect personal data from unauthorised access, accidental loss, misuse, disclosure, alteration, or destruction. These measures may include access controls, password protection, secure storage, staff confidentiality obligations, and careful management of physical and digital records.

Although we take reasonable steps to secure personal data, no system can be guaranteed to be completely secure. If a personal data breach occurs, we will assess the risk and take action in line with our legal obligations.

9. Your rights

Under data protection law, individuals have rights regarding their personal data. Subject to legal conditions and exemptions, these rights may include:

The right of access: to request a copy of the personal data we hold about you.
The right to rectification: to ask us to correct inaccurate or incomplete information.
The right to erasure: to request deletion of your personal data where there is no good reason for us to continue processing it.
The right to restrict processing: to ask us to limit how we use your data in certain circumstances.
The right to object: to object to processing based on legitimate interests or direct marketing, where applicable.
The right to data portability: to receive certain data in a structured, commonly used format and, where technically feasible, have it transferred to another controller.
The right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we may need to verify your identity before responding. We aim to respond within the time limits required by law.

10. Complaints

If you are concerned about how we handle personal data, you can raise the issue with us first so we have an opportunity to address it. You also have the right to lodge a complaint with the UK Information Commissioner's Office if you believe your data protection rights have been infringed.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or operational practices. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically to stay informed about how we protect personal data.

12. Summary of our commitment

Deep Cleaning Enfield is committed to processing personal data responsibly, securely, and transparently. We collect only what we need, use it for clear and lawful purposes, retain it only as long as necessary, and respect the rights of every individual whose data we process. This policy applies to all Deep Cleaning Enfield customers in the area and forms part of our ongoing commitment to privacy and compliance.