Privacy Policy - Deep Cleaning Lambeth

Effective date: This Privacy Policy applies to all Deep Cleaning Lambeth customers in the area and explains how we collect, use, store, share, and protect personal data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We are committed to handling personal information fairly, lawfully, and transparently. This policy applies to all customers, potential customers, website visitors, and anyone who contacts us or uses our cleaning services in the Lambeth area.

1. Who We Are

Deep Cleaning Lambeth provides professional deep cleaning services for homes and businesses in the Lambeth area. In this policy, “we,” “us,” and “our” refer to Deep Cleaning Lambeth. We act as the data controller for the personal data we collect and use in connection with our services.

2. Personal Data We Collect

We only collect personal data that is relevant and necessary for providing our services, managing customer relationships, and meeting legal obligations. The information we may collect includes:

Identity details: name, title, and, where relevant, business name.
Contact details: phone number, email address, and service address.
Service information: details about the cleaning service requested, booking preferences, special instructions, and property access notes.
Payment and billing information: invoicing details, payment status, and transaction records.
Communication records: emails, messages, call notes, complaint details, and feedback.
Technical data: limited information such as device or browser data if you interact with our digital systems.
Security information: records needed to manage access, verify appointments, or maintain the safety of staff and customers.

We do not knowingly collect special category data unless it is strictly necessary and you choose to provide it. If you share information about health, allergies, vulnerabilities, or other sensitive matters so we can carry out a service safely, we will treat it with appropriate care and only use it for that purpose.

3. How We Use Personal Data

We use personal data only where there is a lawful reason to do so. Our main purposes include:

processing enquiries and booking requests;
delivering cleaning services at the requested property;
managing customer accounts and service records;
issuing invoices, collecting payments, and handling refunds where relevant;
responding to queries, complaints, and service feedback;
maintaining service quality, internal training, and business administration;
meeting tax, accounting, insurance, and legal obligations;
preventing fraud, misuse, or security incidents;
sending service-related updates or administrative messages;
improving our services and customer experience.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process your personal data. Depending on the situation, we rely on the following lawful bases:

4.1 Contract

We process your personal data where it is necessary to perform a contract with you or to take steps at your request before entering into a contract. This includes accepting bookings, providing cleaning services, managing appointments, and processing payment details.

4.2 Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. Examples include managing customer communications, maintaining records, improving services, preventing fraud, and ensuring operational security.

4.3 Legal Obligation

We process certain information where required to comply with legal obligations, including accounting, tax, insurance, and regulatory requirements.

4.4 Consent

In some limited circumstances, we rely on your consent, for example where you voluntarily provide sensitive information or agree to receive certain non-essential communications. Where consent is used, you may withdraw it at any time.

We do not use personal data for unrelated purposes. If we need to use your information in a new way, we will explain this and identify the applicable lawful basis.

5. How We Share Personal Data

We may share personal data only when necessary and only with trusted third parties who support our operations. These third parties act as processors or, in some cases, as independent controllers. We ensure that appropriate data protection terms are in place before sharing data.

5.1 Processors

Processors may include:

payment service providers for processing transactions;
booking or scheduling software providers;
email and communication service providers;
cloud storage and IT support providers;
accounting and invoicing software providers;
customer review or feedback systems used for service management.

These processors only process data on our instructions and must protect it appropriately.

5.2 Other Sharing

We may also disclose personal data where necessary:

to professional advisers such as accountants, insurers, or legal advisers;
to public authorities, regulators, or law enforcement where required by law;
in connection with a business restructuring, transfer, or sale, subject to appropriate safeguards.

We do not sell personal data.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting obligations. Retention periods may vary depending on the type of information and the reason it was collected.

Booking and service records: retained for a reasonable period to manage service history, disputes, and operational needs.
Financial and invoice records: retained for the period required by tax and accounting law.
Communication records: retained as long as needed to resolve queries, complaints, or service matters.
Security-related information: retained only for the period necessary to protect customers, staff, and property.

When data is no longer needed, we will securely delete, anonymise, or archive it in line with our retention practices.

7. Your Rights

Under UK GDPR, you have several rights in relation to your personal data. These rights may apply depending on the circumstances and the legal basis for processing.

Right of access: you can request a copy of the personal data we hold about you.
Right to rectification: you can ask us to correct inaccurate or incomplete data.
Right to erasure: you can ask us to delete your data in certain situations.
Right to restriction: you can ask us to limit how we use your data in certain cases.
Right to object: you can object to processing based on legitimate interests or direct marketing.
Right to data portability: you can request that we provide certain data in a structured, commonly used format where applicable.
Right to withdraw consent: where we rely on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office if you are unhappy with how your data is handled. We encourage you to raise concerns with us first so we can address them promptly.

8. Data Security

We use reasonable technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures may include access controls, secure storage, staff confidentiality obligations, and limited data access on a need-to-know basis.

While no system is completely secure, we take data protection seriously and review our practices to reduce risk.

9. International Transfers

If any service provider processes data outside the UK, we will ensure that appropriate safeguards are in place so that your personal data remains protected in line with UK data protection law.

10. Children’s Data

Our services are not directed at children, and we do not knowingly collect personal data from children unless it is necessary in connection with a service request from an adult customer or property occupant. If we become aware that we have collected data from a child without appropriate basis, we will take steps to delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data protection practices. Any updated version will apply from the date it is published. We encourage customers in Lambeth to review this policy periodically.

12. Summary of Our Commitment

We only collect personal data that is relevant to providing deep cleaning services and running our business responsibly. We process it lawfully, keep it secure, share it only when necessary, and retain it for no longer than required. Your privacy matters to us, and we aim to handle your information with fairness, care, and respect.

This policy applies to all Deep Cleaning Lambeth customers in the area.