Privacy Policy - Oven Cleaning Camden

Effective date: This Privacy Policy applies to all Oven Cleaning Camden customers in the area.

This Privacy Policy explains how Oven Cleaning Camden collects, uses, stores, shares, and protects personal data when providing oven cleaning and related household cleaning services. It also explains the rights available to individuals under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

We are committed to handling personal information fairly, lawfully, and transparently. We only collect data that is necessary for delivering our services, managing customer relationships, meeting legal obligations, and improving our business operations. This policy is designed to be clear, practical, and GDPR-compliant.

1. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity information: name and any title or preferred name.
Contact details: address, email address, and telephone number.
Service details: booking preferences, cleaning instructions, access arrangements, appointment history, and service notes.
Payment-related information: payment status, billing records, and transaction references. We do not store full card details where payment is processed by a third-party provider.
Communication records: messages, service enquiries, complaints, feedback, and correspondence related to bookings or aftercare.
Technical information: limited device or usage information if you interact with digital booking tools, such as IP address or browser data where applicable.
Property-related information: details needed to complete the service safely and effectively, such as access instructions or relevant cleaning concerns.

We do not intentionally collect special category data unless it is necessary and provided by you for a specific reason, for example, to support access arrangements. If special category data is ever processed, we will do so only where a valid lawful basis exists and appropriate safeguards are in place.

2. How We Use Your Personal Data

We use personal data for the following purposes:

to manage enquiries and confirm bookings;
to provide oven cleaning services at your property;
to communicate about appointments, changes, or follow-up matters;
to process payments and maintain financial records;
to handle complaints, refunds, or service issues;
to maintain internal records and service quality;
to meet tax, accounting, and legal obligations;
to protect our business, staff, and customers from fraud or misuse;
to analyse service performance and improve operations;
to send occasional service-related updates where permitted.

We only use your personal data for the purposes for which it was collected, unless we reasonably need to use it for a compatible purpose or another lawful reason.

3. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for every processing activity. The lawful bases we rely on are:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes taking bookings, delivering the cleaning service, handling instructions, and processing payment.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include managing customer records, improving service quality, preventing fraud, and responding to enquiries or complaints. We always consider whether the processing is proportionate and necessary.

Legal Obligation

We may process and retain certain personal data to comply with legal obligations, such as tax, accounting, insurance, or regulatory requirements.

Consent

Where consent is required, we will request it clearly and separately. You may withdraw consent at any time, although this will not affect the lawfulness of processing carried out before consent was withdrawn.

Vital Interests and Public Task

These bases are unlikely to apply in normal circumstances, but may be used in exceptional situations where necessary to protect someone’s life or where required by law.

4. Sharing Personal Data and Processors

We may share personal data with trusted third parties only when necessary for running our business and delivering services. These third parties may act as processors under GDPR, meaning they process data on our instructions and are required to keep it secure.

Examples of processors and service providers may include:

Payment processors: to handle card or online payments securely.
Booking and scheduling providers: to organise appointments and manage service calendars.
Email and communication providers: to send service confirmations or updates.
IT and cloud storage providers: to store data and support operational systems.
Accounting and bookkeeping providers: to maintain financial records.

We may also share data with:

law enforcement, courts, or regulatory bodies where required by law;
professional advisers such as accountants, insurers, or legal advisers;
successor businesses in the event of a sale, merger, or restructuring.

We do not sell personal data. Any sharing is limited to what is necessary and is subject to appropriate confidentiality and security measures. Where processors are used, we ensure they are contractually bound to process data only on our instructions and in accordance with data protection law.

5. International Transfers

Where a processor or service provider is located outside the UK, personal data may be transferred internationally. In such cases, we will ensure that appropriate safeguards are in place, such as an adequacy decision, standard contractual clauses, or another permitted transfer mechanism under UK GDPR. Your data protection rights remain protected.

6. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including legal, accounting, or reporting requirements.

Customer and booking records: retained for as long as needed to manage the relationship and service history.
Financial records: typically retained for the period required by tax and accounting laws.
Complaint and communication records: kept for a reasonable period to resolve issues and improve service.
Marketing preferences: retained until you withdraw consent or object, where applicable.

Once retention periods expire, data is securely deleted, anonymised, or archived where appropriate. We use a data minimisation approach, retaining only what is necessary for legitimate business or legal purposes.

7. Data Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, disclosure, alteration, or destruction. These measures may include access controls, secure storage, staff training, password protection, and limiting access to data on a need-to-know basis.

While no system can be guaranteed 100% secure, we work to maintain a high standard of security and review safeguards regularly.

8. Your Rights Under GDPR

You have a number of rights in relation to your personal data. Subject to legal conditions and exemptions, these rights include:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to ask us to correct inaccurate or incomplete data.
Right to erasure: to request deletion of your data in certain circumstances.
Right to restriction: to ask us to limit how we use your data in certain situations.
Right to object: to object to processing based on legitimate interests or direct marketing.
Right to data portability: to receive some personal data in a structured, commonly used format where processing is based on consent or contract and carried out by automated means.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data protection rights have been infringed. We encourage you to contact us first so we can try to resolve any concerns promptly.

9. Cookies and Similar Technologies

If any online tools or digital services are used, they may rely on cookies or similar technologies for basic functionality, security, and performance. Where consent is required, we will seek it in a compliant manner. You can manage browser settings to control cookies, though some functions may not work properly if cookies are disabled.

10. Children’s Data

Our services are intended for adult customers and household service arrangements. We do not knowingly collect personal data from children as part of ordinary business operations. If we become aware that we have collected such data without a valid reason, we will take appropriate steps to delete it or obtain proper authorisation where permitted.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or service-related changes. Any revised version will apply from the stated effective date. We encourage customers to review this policy periodically to stay informed about how personal data is handled.

12. Summary of Our Privacy Commitments

Oven Cleaning Camden will only process personal data where there is a lawful basis, will keep data secure, will share information only with trusted processors or where required by law, and will retain data only for as long as necessary. We respect the rights of all customers in the area and aim to handle personal information with fairness, transparency, and accountability.

By using our services, you acknowledge that your personal data may be processed in accordance with this Privacy Policy. This statement does not override your legal rights, and it should be read alongside applicable data protection laws.