Privacy Policy - Stockwell Cleaner

Effective date: This Privacy Policy applies to all Stockwell Cleaner customers in the area.

Stockwell Cleaner is committed to protecting your privacy and handling your personal data in a lawful, fair, and transparent manner. This Privacy Policy explains how we collect, use, store, share, and protect personal data when you use our cleaning services, make an enquiry, receive a quotation, or otherwise interact with us. It also explains your rights under the UK GDPR and the Data Protection Act 2018.

1. Who We Are

Stockwell Cleaner provides domestic and commercial cleaning services. For the purposes of data protection law, we are the data controller in relation to the personal data we collect and use about our customers, prospective customers, suppliers, and other individuals who interact with us in connection with our services.

This policy applies to all Stockwell Cleaner customers in area, including individuals who live, work, or receive services within our service area.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity data such as your name, title, and any relevant account or booking reference.
Contact data such as your address, email address, telephone number, and service location details.
Service data such as the type of cleaning requested, preferences, special instructions, access notes, and appointment history.
Payment data such as billing details, payment status, and transaction records. We do not necessarily store full card details if a secure third-party payment provider is used.
Communication data such as messages, enquiries, complaints, feedback, and records of correspondence.
Technical data such as IP address, device type, browser information, and usage data if you interact with our digital systems.
Marketing preferences such as your communication choices and opt-in or opt-out status.

We only collect data that is necessary for the purposes described in this policy. Where possible, we minimise the amount of personal data we process and avoid collecting information that is not relevant to our services.

3. How We Collect Your Data

We collect personal data in several ways:

Directly from you when you request a quote, make a booking, complete a form, or communicate with us.
Automatically through website or system interactions, where applicable.
From third parties where necessary to deliver services, such as payment processors, booking platforms, or referral partners.
From public or administrative sources where needed to verify details or prevent fraud.

We do not intentionally collect special category data unless it is necessary and lawful to do so. If you choose to provide sensitive information, we will only use it where a valid legal basis exists and where appropriate safeguards are in place.

4. Lawful Basis for Processing

We process personal data only where we have a lawful basis under the UK GDPR. Depending on the circumstances, we may rely on one or more of the following bases:

Contract: to provide cleaning services, manage bookings, process payments, and fulfil our obligations to you.
Legitimate interests: to manage our business, improve our services, respond to enquiries, maintain records, prevent fraud, and protect our operations, provided these interests do not override your rights and freedoms.
Legal obligation: to comply with tax, accounting, regulatory, and other legal requirements.
Consent: where required, for example for certain marketing communications or optional data uses. You can withdraw consent at any time.

When we rely on legitimate interests, we carry out a balancing assessment to ensure that our processing is proportionate and that your privacy interests are respected.

5. How We Use Your Data

We may use your personal data for the following purposes:

To provide, schedule, and manage cleaning services.
To communicate with you about appointments, changes, service updates, or invoices.
To process payments, refunds, and account administration.
To keep records of services delivered and customer preferences.
To handle complaints, disputes, and quality assurance.
To comply with legal and regulatory obligations.
To improve our services, operations, and customer experience.
To send marketing communications where permitted and in line with your preferences.

6. Sharing Your Data with Processors and Other Recipients

We may share personal data with trusted third-party service providers who act as processors on our behalf. These processors only process data according to our instructions and are required to protect it appropriately. Typical processors may include:

Payment processing providers.
Booking and scheduling software providers.
IT, hosting, and system support providers.
Email and communications service providers.
Accounting or invoicing service providers.

We may also disclose personal data where necessary to legal, tax, regulatory, or law enforcement authorities, or in connection with a sale, reorganisation, or restructuring of our business, where permitted by law.

All processors are chosen carefully and are subject to appropriate data protection obligations. We aim to ensure that any third party handling data on our behalf offers sufficient guarantees of security, confidentiality, and compliance.

7. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, tax, or reporting obligations.

Retention periods may vary depending on the type of data and the reason for processing. For example:

Customer and service records: retained for the duration of the service relationship and for a reasonable period afterwards.
Financial and accounting records: retained for the period required by law.
Complaints and correspondence: retained as long as needed to resolve issues and maintain service records.
Marketing records: retained until you withdraw consent or opt out, or until they are no longer needed.

When personal data is no longer required, we will delete it securely or anonymise it so that it can no longer be linked to an identifiable individual.

8. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff training, and contract terms with processors.

However, no system is completely secure. While we work hard to protect your data, we cannot guarantee absolute security. If a data breach occurs and we are legally required to do so, we will notify the relevant authority and affected individuals.

9. Your Rights

Under data protection law, you may have the following rights:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to request correction of inaccurate or incomplete data.
Right to erasure: to request deletion of your data in certain circumstances.
Right to restriction: to request that we limit how we use your data in certain situations.
Right to object: to object to processing based on legitimate interests or direct marketing.
Right to data portability: to request transfer of certain data to you or another provider where applicable.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

These rights are not absolute. In some cases, legal requirements or our legitimate grounds may allow us to continue processing data despite a request. If this happens, we will explain our decision.

10. Cookies and Similar Technologies

If we use websites or digital tools, we may use cookies or similar technologies to support functionality, improve performance, and understand how our services are used. Where required, we will seek consent before placing non-essential cookies. You can manage cookie preferences through your browser settings or any available cookie controls.

11. International Transfers

Where personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms designed to protect your information.

12. Children

Our services are not directed at children, and we do not knowingly collect personal data from children unless it is required in connection with a lawful service arrangement and provided by an authorised adult. If we become aware that we have collected data inappropriately, we will take steps to delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data processing practices. Any updated version will apply from the date of publication or from another stated effective date.

14. Summary of Your Choices

You may request access to the data we hold about you.
You may ask us to correct inaccurate information.
You may object to marketing at any time.
You may withdraw consent where consent is the legal basis.
You may request deletion or restriction in appropriate cases.

We respect your privacy and aim to process your personal data only when necessary, proportionate, and lawful. If you have a concern about how your data is handled, you are entitled to raise it with the relevant supervisory authority in addition to contacting us through the normal channels.

By using Stockwell Cleaner services, you acknowledge that you have read and understood this Privacy Policy.