Cleaners Tooting Privacy Policy
This Privacy Policy explains how Cleaners Tooting collects, uses, stores and protects personal data relating to customers in the Tooting area. It also explains your rights under the UK General Data Protection Regulation and related data protection laws. This Privacy Policy applies to all Cleaners Tooting customers in the service area and to anyone who contacts us to enquire about or book our cleaning services.
Who we are and scope of this policy
Cleaners Tooting is a cleaning services provider operating in the Tooting area. For the purposes of data protection law, Cleaners Tooting is the data controller in respect of the personal data described in this Privacy Policy. This means we decide how and why your personal data is processed when you interact with us, make an enquiry or use our services.
Personal data we collect
We collect and process different types of personal data depending on how you interact with us and which services you use. The main categories of data are:
Identification and contact details such as your name, address, service address, billing address and other contact details you choose to provide.
Booking and service details such as dates and times of bookings, type of cleaning service requested, access instructions and any preferences or notes you provide about your property or requirements.
Communication history such as records of enquiries, complaints, feedback and any other correspondence you have with us by any communication channel.
Payment and billing information such as billing name and address, details of payments received, payment method used and records needed for accounting and tax purposes. We do not store full card details if you pay by card; such details are handled by our payment processors.
Technical and usage information such as basic information about how you use our website or online booking systems, including date and time of visits and information your browser or device provides. Where cookies or similar technologies are used, this will be explained in a separate cookies notice, where applicable.
How we collect your personal data
We collect personal data directly from you when you request an estimate or quotation, book a service, contact us with a question or complaint, or provide feedback.
We may also receive personal data indirectly from third parties who help us deliver our services, for example payment providers that confirm payment status or online platforms that you use to contact us. In such cases, those third parties will also be data controllers in their own right and have their own privacy policies.
Lawful bases for processing your data
We only process your personal data where we have a lawful basis to do so. The main lawful bases we rely on are:
Contract: We process your personal data when it is necessary to enter into or perform a contract with you, for example to manage bookings, deliver cleaning services, take payment and communicate with you about your service.
Legal obligation: We process some personal data to comply with legal and regulatory obligations, such as tax and accounting laws, health and safety requirements and record-keeping obligations.
Legitimate interests: We may process your personal data where it is necessary for our legitimate business interests and where your interests and fundamental rights do not override those interests. These interests include managing and improving our services, responding to enquiries, protecting our business from fraud or abuse and keeping records of customer interactions.
Consent: In limited cases, we may rely on your consent, for example for certain types of optional marketing communications. Where we rely on consent, you may withdraw it at any time, and we will explain how to do this when we collect your consent.
How we use your personal data
We use your personal data for the following purposes:
To provide and manage cleaning services including processing enquiries, issuing quotations, creating and managing bookings, allocating cleaning staff, carrying out services at the agreed location and time and handling cancellations and rescheduling.
To communicate with you about your services including sending booking confirmations, reminders, updates about your service, responses to queries and notifications of any changes.
To manage payments and billing including issuing invoices, processing payments, handling refunds where appropriate and maintaining financial records.
To manage customer relationships including handling feedback and complaints, resolving issues, monitoring service quality and improving our services.
To ensure security and prevent misuse including verifying identity where necessary, protecting against fraud or unauthorised use of our services and maintaining the safety and security of our systems and personnel.
To comply with legal and regulatory obligations including responding to lawful requests from authorities, maintaining records for tax and accounting purposes and complying with health and safety duties.
Data retention and storage
We keep your personal data only for as long as necessary for the purposes for which it was collected and to meet any legal, accounting or reporting requirements.
In general, we retain core customer and booking records for a period that allows us to respond to queries about past services, meet tax and accounting obligations and defend potential legal claims. After this period, data is securely deleted or anonymised so that it can no longer be linked to you.
The specific retention period can vary depending on the type of data, the services provided and legal requirements. For example, financial records may be kept for a longer period to comply with tax rules, while routine correspondence may be retained for a shorter time. We regularly review the data we hold and delete or anonymise data that is no longer needed.
Data processors and third party recipients
We may share your personal data with trusted third parties who act as data processors on our behalf. These processors only process your data in accordance with our instructions and for the purposes set out in this Privacy Policy. They are required to implement appropriate security measures and to protect your data.
Processors and third party recipients may include providers of payment processing services, accounting or bookkeeping services, customer relationship management systems and similar business tools, information technology, hosting, email and communication services, and professional advisers such as accountants or legal advisers where necessary.
Where any third party acts as an independent data controller, they will be responsible for their own handling of your personal data in line with their own privacy information.
International data transfers
If we transfer personal data outside the United Kingdom or the European Economic Area, we will ensure that an adequate level of protection is in place. This may include using countries that have been recognised as providing an adequate level of data protection or using appropriate safeguards such as standard contractual clauses approved under data protection laws.
Data security
We take appropriate technical and organisational measures to protect your personal data from unauthorised access, accidental loss, destruction or damage. Measures include limiting access to personal data to staff and processors who have a legitimate need to know it, using secure systems and implementing internal policies and training aimed at keeping your data safe.
While we take reasonable steps to protect your personal data, no system can be completely secure. We cannot therefore guarantee the absolute security of your data but we work continuously to maintain and improve our safeguards.
Your data protection rights
Under data protection law, you have a number of rights in relation to your personal data. These rights apply to all Cleaners Tooting customers in the area, although they may be subject to certain conditions and legal exceptions.
Right of access: You have the right to request confirmation that we process your personal data and to request a copy of that data, together with information about how we use it.
Right to rectification: You have the right to ask us to correct or complete personal data you believe is inaccurate or incomplete.
Right to erasure: In certain circumstances, you have the right to ask us to delete your personal data, for example where it is no longer needed for the purposes for which it was collected, you withdraw consent where consent was the basis for processing, or you object to processing and there are no overriding legitimate grounds.
Right to restriction of processing: You have the right to request that we restrict the processing of your personal data in certain situations, for example while we verify its accuracy or while we consider an objection you have raised.
Right to object: You have the right to object to our processing of your personal data where we rely on legitimate interests as our lawful basis. We will stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or unless the processing is for the establishment, exercise or defence of legal claims.
Right to data portability: In some cases, you have the right to receive personal data you have provided to us in a structured, commonly used and machine readable format and to ask us to transfer that data to another controller where technically feasible and where the processing is based on consent or contract and carried out by automated means.
Right to withdraw consent: Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of processing based on consent before its withdrawal.
If you make a request to exercise your rights, we may need to ask you for information to help confirm your identity. We aim to respond to all valid requests within the timeframes set by data protection law.
Complaints and contact
If you have concerns about how we handle your personal data, you can contact us using any of the usual contact methods available on our materials or website so that we can try to resolve the issue. You also have the right to lodge a complaint with the relevant data protection authority, such as the Information Commissioners Office in the United Kingdom.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services or legal obligations. When we make changes, we will revise the date of the update and, where appropriate, notify you of significant changes. We encourage you to review this Privacy Policy periodically so that you remain informed about how we protect your personal data.