Oven Cleaning Camden Privacy Policy
This Privacy Policy explains how Oven Cleaning Camden collects, uses, stores and protects personal data relating to customers and prospective customers in the Camden area. It also explains your rights under the UK General Data Protection Regulation and the Data Protection Act, and how you can exercise those rights.
This Privacy Policy applies to all Oven Cleaning Camden customers and prospective customers in the Camden area who contact us, use our services, visit our website, or otherwise interact with us.
Data Controller
Oven Cleaning Camden is the data controller for the personal data described in this Privacy Policy. This means we decide how and why your personal data is used, and we are responsible for ensuring that it is handled in accordance with data protection laws.
Personal Data We Collect
We may collect and process the following categories of personal data about you when you contact us, request a quote, make a booking, or use our services:
Identification and contact details, such as your name, postal address, service address, and general location within the Camden area.
Communication details, such as your preferred contact method and the content of any messages you send to us, including enquiries, feedback or complaints.
Booking and service information, such as the date and time of your booking, details of the property or appliance that requires cleaning, access instructions, and any special requirements you tell us about.
Payment-related information, such as the amount paid, date of payment and method of payment. We do not store full payment card details when payment is processed through secure third-party payment providers.
Website and usage information, such as basic technical data sent by your browser when you visit our website, including IP address, device type and general browsing behaviour. This may include the use of cookies or similar technologies when you accept them.
Any other information you choose to provide to us, for example when you complete a feedback form, leave a testimonial, or take part in a promotion.
How We Collect Your Data
We collect personal data directly from you when you contact us by phone, through our website, by post or through other communication channels, when you make a booking, or when you use our services at your property.
We may also receive some information from service providers who support our operations, for example where a payment provider confirms that a payment has been completed or where a booking platform forwards your enquiry to us.
Purposes and Lawful Bases for Processing
We process your personal data only when we have a lawful basis under data protection law. The main purposes for which we use your data, and the lawful bases we rely on, are as follows:
To provide our oven cleaning services to you, including managing enquiries, providing quotes, confirming bookings, attending your property and completing the work. The lawful basis is performance of a contract or taking steps at your request before entering into a contract.
To communicate with you about your booking, including confirmations, updates, rescheduling, access arrangements and after-service follow-up. The lawful basis is performance of a contract and our legitimate interests in managing our relationship with you.
To manage payments, invoicing and accounting, including recording payments and dealing with payment-related queries. The lawful bases are performance of a contract and our legal obligations for accounting and tax purposes.
To improve our services and business operations, including analysing service usage, gathering feedback and monitoring quality. The lawful basis is our legitimate interests in running and improving our business.
To send you marketing communications about our services, offers or updates, where permitted by law. The lawful basis is your consent where required, or our legitimate interests where you are an existing customer and the marketing relates to similar services. You can opt out of marketing at any time.
To comply with legal obligations, such as record keeping, responding to lawful requests from public authorities, and complying with tax or regulatory requirements. The lawful basis is compliance with a legal obligation.
To protect our rights, property or safety and that of our staff, contractors and customers, including the prevention and detection of fraud and misuse of our services. The lawful basis is our legitimate interests in protecting our business and ensuring security.
Data Retention
We keep your personal data only for as long as necessary for the purposes for which it was collected, and to meet any legal, accounting or reporting requirements.
In general, we keep basic customer and booking records for a period that allows us to respond to queries, manage repeat bookings and meet tax and accounting obligations. After this period, data is securely deleted, anonymised or archived when no longer required.
The exact retention period may vary depending on the nature of the data, the services provided and legal requirements. We regularly review our retention practices to ensure that personal data is not kept longer than necessary.
Data Sharing and Processors
We do not sell your personal data. We may share your personal data with carefully selected third parties who act as data processors on our behalf. These processors are only allowed to use your data in accordance with our instructions and for the purposes described in this Privacy Policy.
Examples of processors include payment service providers that process card or electronic payments, booking or scheduling tools that help us manage appointments, IT and hosting providers that store data securely, and providers that help us send service communications or customer surveys.
Where we use processors, we ensure that appropriate data protection agreements are in place, requiring them to maintain adequate security measures and to process personal data only as necessary to provide their services to us.
We may also share personal data where required by law, regulation or a valid request from a public authority, or where necessary to establish, exercise or defend legal claims.
International Transfers
Where any of our service providers or their servers are located outside the United Kingdom, personal data may be transferred to countries that do not provide the same level of data protection as UK law. In such cases, we take appropriate safeguards to protect your data, for example by using standard contractual clauses or ensuring that the recipient is subject to an adequate level of protection.
Data Security
We take the security of your personal data seriously. We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction or damage. These measures are designed to provide a level of security appropriate to the risks involved and are regularly reviewed.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to certain conditions and exemptions. You have the right to request access to the personal data we hold about you and to receive a copy of that data.
You have the right to request that we correct any inaccurate or incomplete personal data. You have the right to request that we delete your personal data in certain circumstances, for example where the data is no longer needed for the purpose for which it was collected or where you withdraw consent and there is no other lawful basis for processing.
You have the right to request that we restrict the processing of your personal data in certain situations, such as where you contest the accuracy of the data or object to our processing. You have the right to object to our processing of your personal data where the lawful basis is our legitimate interests or where we are using your data for direct marketing.
Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing that took place before consent was withdrawn.
You also have the right to data portability, which allows you in some circumstances to receive personal data you have provided to us in a structured, commonly used and machine-readable format and to transmit it to another controller.
Exercising Your Rights
If you wish to exercise any of your data protection rights, including accessing your data, correcting it, deleting it, restricting processing, objecting to processing or withdrawing consent, you can contact us using the contact methods you normally use for our services.
We may need to verify your identity before responding to your request to ensure that personal data is not disclosed to the wrong person. We aim to respond to all valid requests within one month in accordance with legal requirements.
Complaints
If you have concerns about how we handle your personal data, we encourage you to contact us in the first instance so that we can try to resolve the issue. You also have the right to lodge a complaint with the Information Commissioner's Office in the United Kingdom if you believe that your data protection rights have been infringed.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, how we process personal data, or changes in legal requirements. The most recent version will always apply to the personal data we hold about you.
You should review this Privacy Policy periodically to stay informed about how we protect your personal data and your rights.
