Privacy Policy - Catford Cleaner
Effective date: This Privacy Policy applies to all Catford Cleaner customers in the area and explains how we collect, use, store, share, and protect personal data in line with the UK GDPR and the Data Protection Act 2018.
Catford Cleaner is committed to handling personal information fairly, lawfully, and transparently. This policy applies when you request a quote, book a service, communicate with us, make a payment, leave feedback, or otherwise use our cleaning services.
1. Personal Data We Collect
We only collect personal data that is necessary to provide and manage our services. The information we may collect includes:
- Identity details: name, title, and any preferred form of address.
- Contact details: postal address, email address, telephone number, and service location.
- Service information: booking details, property access notes, cleaning preferences, job instructions, and service history.
- Payment information: payment status, billing records, and transaction references. We do not usually store full card details where payment is processed securely by a third-party provider.
- Communications: messages, complaints, service requests, quotes, and feedback.
- Technical data: limited information such as IP address, browser type, and device information where this is collected through our systems or website tools.
We do not intentionally collect special category data unless you choose to provide it and it is relevant to the service, such as information about health conditions that affect access, safety, or cleaning requirements. If such data is provided, we handle it with additional care and only where lawful.
2. How We Use Personal Data
We use personal data to deliver our services efficiently and responsibly. This may include:
- providing quotes and managing bookings;
- carrying out cleaning services;
- communicating about appointments, changes, and service updates;
- processing payments and maintaining financial records;
- handling complaints, claims, and customer support;
- improving service quality, training, and internal operations;
- meeting legal, tax, insurance, and accounting obligations;
- preventing fraud, misuse, or security incidents.
We do not sell personal data. We only use data for the purposes set out in this policy or for closely related purposes that would reasonably be expected.
3. Lawful Basis for Processing
Under data protection law, we must have a lawful basis for processing your personal data. Depending on the circumstances, we rely on one or more of the following:
Contract
We process personal data where it is necessary to enter into or perform a contract with you. This includes taking bookings, delivering cleaning services, handling payments, and communicating about the service.
Legitimate Interests
We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This includes managing customer relationships, improving operations, protecting our business, and maintaining service records.
Legal Obligation
We process data where required to comply with legal duties, including accounting, tax, insurance, and regulatory obligations.
Consent
In some situations, we rely on your consent, for example where you ask us to use optional communication methods or where special category data is provided voluntarily and processed on that basis. You may withdraw consent at any time where it is the lawful basis used, without affecting prior processing.
4. Retention of Personal Data
We keep personal data only for as long as necessary for the purposes for which it was collected, and no longer than required by law. The exact retention period depends on the type of data and the reason we hold it.
- Customer and booking records: retained for the period needed to manage services and resolve disputes.
- Financial and tax records: kept for the period required by accounting and tax laws.
- Communications and complaints: retained for a reasonable period to support customer service and record keeping.
- Technical records: kept only as long as necessary for security, analytics, or system performance.
When personal data is no longer required, it is deleted, anonymised, or securely destroyed. We review retention regularly to ensure data is not kept longer than necessary.
5. Processors and Sharing of Data
We may share personal data with trusted third-party processors who help us operate our business. These processors only handle data on our instructions and must protect it appropriately.
Examples of processors may include:
- Payment processors that handle secure card or online payments;
- Booking or scheduling providers that help manage appointments;
- IT and cloud service providers that store data securely or support our systems;
- Communication providers that support email, phone, or messaging services;
- Accountants or professional advisers who assist with legal, tax, or financial obligations.
We may also disclose personal data where required by law, court order, insurance requirements, or to protect our rights, customers, staff, or the public. Where possible, we ensure any recipient handles data securely and only for the relevant purpose.
6. International Transfers
If any processor stores or accesses data outside the UK, we take steps to ensure an adequate level of protection. This may include using approved safeguards and contractual protections to keep personal data safe and compliant with applicable law.
7. Data Security
We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, password protection, and staff confidentiality obligations. While no system is completely secure, we work to maintain a high level of protection.
8. Your Rights
Under data protection law, you have rights over your personal data. These rights may apply depending on the legal basis and the context of processing.
- Right of access: you can request a copy of the personal data we hold about you.
- Right to rectification: you can ask us to correct inaccurate or incomplete data.
- Right to erasure: in certain circumstances, you can ask us to delete your data.
- Right to restrict processing: you can ask us to limit how we use your data in some cases.
- Right to object: you can object to processing based on legitimate interests or direct marketing where applicable.
- Right to data portability: where applicable, you can request your data in a structured, commonly used format.
- Right to withdraw consent: where we rely on consent, you can withdraw it at any time.
You also have the right to lodge a complaint with the relevant supervisory authority if you are unhappy with how your personal data is handled. We encourage you to raise concerns directly so they can be addressed promptly.
9. Children’s Data
Our services are intended for adult customers or those acting on behalf of property owners, tenants, or managers. We do not knowingly collect personal data from children except where it is incidental and necessary for service delivery, such as household access arrangements. If we become aware that we have collected data inappropriately, we will take steps to delete it.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in legal requirements, business practices, or service arrangements. Any updated version will apply from the date it is issued. We encourage customers to review this policy periodically so they remain informed about how their data is handled.
Summary: Catford Cleaner explains what data is collected, why it is used, lawful bases, retention, processors, security, and customer rights for all local customers.