Privacy Policy - Oven Cleaning Shoreditch

This Privacy Policy explains how Oven Cleaning Shoreditch collects, uses, stores, shares, and protects personal data. It applies to all Oven Cleaning Shoreditch customers in the area, including prospective customers, current customers, and individuals who enquire about our services. We are committed to handling personal information in a lawful, fair, and transparent way in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who this policy applies to

This policy applies to anyone who uses, requests, or receives services from Oven Cleaning Shoreditch in the Shoreditch area. It also applies to individuals whose data we may receive when arranging a service, carrying out a booking, managing access to a property, issuing invoices, or responding to customer service matters. By engaging our services, you acknowledge that your personal information may be processed as described in this policy.

2. Data we collect

We only collect personal data that is relevant and necessary for providing our services, managing our business, and meeting legal obligations. The categories of data we may collect include:

Identity information: name, title, and any preferred form of address.
Contact information: telephone number, email address, and service address.
Booking and service information: appointment details, service instructions, access notes, and records of completed work.
Payment information: payment status and transaction records. We do not retain full card details where payment is processed securely by a third-party provider.
Communication records: messages, feedback, complaints, and correspondence relating to enquiries or services.
Technical information: limited data such as device or browser information if received through digital systems used to manage enquiries or bookings.

We do not intentionally collect special category data unless you choose to provide it and there is a lawful reason for us to process it. We ask customers to avoid sharing unnecessary sensitive information unless it is directly relevant to the service.

3. How we use your data

We use personal data for specific and legitimate purposes connected to our services. These purposes include:

arranging and managing bookings;
providing oven cleaning and related services;
confirming access arrangements and service details;
processing payments and issuing invoices or receipts;
responding to enquiries, complaints, and aftercare requests;
maintaining service records and business accounts;
meeting legal, tax, and regulatory obligations;
preventing fraud, misuse, or security incidents;
improving our services, procedures, and customer experience.

We will only use your personal information for the purposes for which it was collected, unless we reasonably determine that another compatible purpose applies.

4. Lawful basis for processing

Under data protection law, we must have a lawful basis to process your personal data. Depending on the activity, we rely on one or more of the following lawful bases:

Contract: where processing is necessary to enter into or perform a contract with you, such as managing a booking or completing a cleaning service.
Legal obligation: where we must process data to comply with legal requirements, including accounting, tax, or record-keeping duties.
Legitimate interests: where processing is necessary for our legitimate business interests and your rights do not override those interests. This may include service administration, customer support, fraud prevention, and internal record management.
Consent: where we rely on your clear permission for a specific purpose. If consent is used, you may withdraw it at any time.

Where we rely on legitimate interests, we ensure that our use of your data is proportionate, relevant, and respectful of your privacy. We do not process personal data in a way that is excessive or unrelated to the service provided.

5. Data sharing and processors

We may share personal data with trusted third parties who act as processors on our behalf. These processors only handle data under our instructions and are required to protect it appropriately. The types of processors we may use include:

payment processing providers;
booking or scheduling systems;
email or communication service providers;
accounting and invoicing platforms;
IT support, data storage, and backup providers;
professional advisers such as accountants or legal advisers, where necessary.

We may also disclose personal data where required by law, court order, or a lawful request from a public authority. In all cases, we limit sharing to what is necessary and ensure appropriate safeguards are in place. We do not sell your personal data.

6. International transfers

Some processors may store or access data outside the United Kingdom. If this occurs, we take steps to ensure that appropriate safeguards are in place, such as recognised contractual protections or equivalent legal mechanisms. These measures are designed to ensure that your information remains protected to a standard consistent with UK GDPR requirements.

7. Data retention

We keep personal data only for as long as necessary for the purpose for which it was collected, and to meet any legal, accounting, or reporting obligations. Retention periods depend on the type of data and the reason we hold it. In general:

booking and service records are kept for a period necessary to manage the customer relationship and resolve any queries;
financial and tax records are kept for the period required by law;
communication records may be retained for a reasonable period to handle complaints, follow-up questions, or service issues;
data that is no longer needed is securely deleted or anonymised.

When personal data is no longer required, we take steps to ensure it is disposed of securely and appropriately.

8. Data security

We use suitable technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and regular review of business processes. While no system can be guaranteed to be completely secure, we work to maintain a high standard of protection for the data we handle.

9. Your rights

As a data subject under UK GDPR, you have several important rights regarding your personal data. Subject to legal limits and exemptions, these rights include:

Right of access: you can request a copy of the personal data we hold about you.
Right to rectification: you can ask us to correct inaccurate or incomplete information.
Right to erasure: in certain circumstances, you can ask us to delete your data.
Right to restrict processing: you can ask us to limit how your data is used in some situations.
Right to object: you can object to processing based on legitimate interests or direct marketing, where applicable.
Right to data portability: you can request your data in a structured, commonly used format in certain cases.
Right to withdraw consent: where we rely on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond in accordance with applicable data protection law. We may need to verify your identity before completing your request. You also have the right to lodge a complaint with the UK Information Commissioner’s Office if you are concerned about how your data is handled.

10. Children’s data

Our services are intended for adults and households arranging cleaning services. We do not knowingly collect personal data from children unless it is incidentally provided and necessary for the provision of a service. If we become aware that we have collected data improperly, we will take appropriate steps to remove it.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in the law, our operations, or the services we provide. Any revised version will apply from the date it is published or otherwise made available. We encourage customers to review this policy periodically so they remain informed about how their personal data is processed.

12. Our commitment to privacy

At Oven Cleaning Shoreditch, we believe privacy is an important part of good service. We aim to keep personal information accurate, relevant, secure, and limited to what is necessary. Our approach is guided by lawfulness, fairness, transparency, and accountability. We process customer information responsibly so that our services can be delivered efficiently while respecting your rights and expectations.

Key principles

We collect only the data needed for legitimate service and business purposes.
We use personal data fairly and transparently.
We keep data secure and retain it only for as long as needed.
We share data only with trusted processors or where required by law.
We respect your rights and handle requests carefully.

This Privacy Policy applies to all Oven Cleaning Shoreditch customers in the area. By using our services or making an enquiry, you acknowledge that your personal data may be processed as described above in accordance with applicable data protection law.