Privacy Policy - Oven Cleaning Westminster

This Privacy Policy explains how Oven Cleaning Westminster collects, uses, stores, shares, and protects personal data in connection with our oven cleaning services. It applies to all Oven Cleaning Westminster customers in the area, including prospective customers, existing customers, and anyone who contacts us about our services. We are committed to handling personal data in a lawful, fair, and transparent manner in line with the UK GDPR and the Data Protection Act 2018.

1. Who We Are

For the purposes of data protection law, Oven Cleaning Westminster acts as the data controller for the personal data we collect and process in the course of providing our services. This means we decide why and how your personal data is used. We take privacy seriously and only process personal data where we have a valid legal reason to do so.

2. Information We Collect

We may collect and process the following categories of personal data:

Identity details such as your name and title.
Contact details such as your phone number, email address, and service address.
Booking and service information such as appointment dates, service preferences, access notes, and cleaning requirements.
Payment information such as billing details and transaction records. We do not usually store full card details if payment is handled by a secure payment provider.
Communication records including emails, messages, and notes relating to enquiries, complaints, or service updates.
Technical data if you interact with us through digital means, such as basic device or browser information, where applicable.

We only collect information that is necessary for arranging, delivering, and managing our services, or where we are required to do so by law.

3. How We Use Your Data

Your personal data may be used for the following purposes:

To respond to enquiries and provide quotations.
To arrange, confirm, and carry out cleaning appointments.
To manage customer accounts and maintain service records.
To process payments and handle invoices or refunds where applicable.
To communicate about your booking, service updates, or any issues affecting the work.
To keep records for accounting, tax, and legal compliance purposes.
To improve the quality and efficiency of our services.
To handle complaints, disputes, or insurance-related matters.

We do not use your data for unrelated purposes unless we have a lawful basis to do so and, where required, your consent.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for processing personal data. Depending on the situation, we rely on one or more of the following lawful bases:

Contract

We process your data when it is necessary to enter into or perform a contract with you. This includes taking bookings, delivering cleaning services, issuing invoices, and communicating about appointments.

Legal Obligation

We may process data when required to comply with legal obligations, such as maintaining tax records, accounting records, or responding to lawful requests from authorities.

Legitimate Interests

We may process data where it is reasonably necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include managing customer relationships, improving services, preventing fraud, and keeping secure business records.

Consent

In limited cases, we may rely on your consent, for example where it is required for specific optional communications or non-essential processing. Where we rely on consent, you have the right to withdraw it at any time.

5. Sharing and Processors

We may share personal data with trusted third parties who help us operate our business. These organisations act as processors or, in some cases, separate controllers. We only use third parties that can provide appropriate safeguards for your data.

Typical categories of processors may include:

Payment processors who handle secure transaction processing.
Booking and scheduling providers who help manage appointments and diary systems.
IT and cloud service providers who store data securely or support our systems.
Accounting and bookkeeping providers who assist with financial records and tax compliance.
Communication service providers who help us send emails, messages, or service updates.

We may also disclose personal data where required by law, to protect our legal rights, or to prevent fraud or other misuse. We do not sell your personal data.

6. International Transfers

Where a processor or service provider stores or accesses personal data outside the United Kingdom, we will ensure appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or equivalent protections required by law. Our aim is to ensure your data remains protected regardless of where it is processed.

7. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Retention periods vary depending on the type of data and the reason for processing.

Customer and booking records are generally kept for as long as needed to manage the service relationship and any follow-up matters.
Financial and tax records are retained for the period required by law and accounting obligations.
Communication records may be kept for a reasonable period to resolve queries, maintain service history, or defend legal claims.
Consent-based records are kept only while consent remains valid or until they are no longer needed.

When personal data is no longer needed, we will securely delete or anonymise it. Retention is limited to what is necessary and proportionate.

8. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may apply depending on the circumstances:

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete information.
Right to erasure – in certain cases, you can request deletion of your data.
Right to restriction – you may ask us to limit how we use your data in some situations.
Right to object – you can object to processing based on legitimate interests, including some direct communication activities.
Right to data portability – where applicable, you can request that data provided by you is transferred to you or another provider in a structured format.
Right to withdraw consent – if we rely on consent, you can withdraw it at any time.

To exercise your rights, we may need to verify your identity before responding. We aim to respond within the time limits set by law. Some rights are subject to exemptions, which may mean we cannot always comply with every request.

9. Data Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures may include access controls, secure storage, staff confidentiality obligations, and careful management of third-party providers. While no system is completely secure, we take reasonable steps to keep your information safe.

10. Children’s Data

Our services are intended for adults and households arranging cleaning services. We do not knowingly collect personal data from children except where such data is incidentally provided by an adult customer and is necessary for the provision of the service. If we become aware that we have collected data improperly, we will take steps to delete it where appropriate.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or how we process personal data. Any updated version will apply from the date it is made available. We encourage customers to review the policy periodically so they remain informed about how their data is used.

12. Summary of Our Commitments

Oven Cleaning Westminster is committed to lawful, transparent, and responsible data handling. We collect only the information needed to provide our services, use it for clear and legitimate purposes, keep it only for as long as necessary, and work with processors that help protect your information. We also respect your rights and will handle requests in line with applicable data protection laws.

This policy applies to all Oven Cleaning Westminster customers in area and is intended to provide a clear explanation of how personal data is managed.