Privacy Policy
Cleaners Elephant and Castle Privacy Policy
This Privacy Policy explains how Cleaners Elephant and Castle collects, uses, stores and protects personal data for all customers located in and around the Elephant and Castle area. It is designed to comply with the requirements of the United Kingdom General Data Protection Regulation and related data protection laws. By using our services, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all services provided by Cleaners Elephant and Castle to customers in the Elephant and Castle area, whether services are arranged in person, by phone, or online. It covers all personal data processed in connection with booking, providing, managing, and improving our cleaning services for domestic and commercial customers.
Data Controller
Cleaners Elephant and Castle is the data controller for the personal data described in this Privacy Policy. As data controller, we decide why and how personal data is processed and are responsible for ensuring that such processing is carried out in accordance with applicable data protection laws.
Personal Data We Collect
We collect and process different categories of personal data depending on how you interact with us and which services you use. This may include the following types of information.
Identification and contact details such as your name and title, billing address, service address, and communication preferences.
Booking and service information such as details about the property where the cleaning is to be carried out, preferred dates and times, frequency of cleaning, specific instructions or notes relevant to the service, and records of the services we have provided.
Payment and billing information such as information necessary to process payments and issue invoices and receipts. Where payments are processed through third party providers, we receive limited information necessary for accounting and record keeping.
Communication data such as records of communications with you, including enquiries, complaints, feedback, and any other correspondence related to our services.
Technical and usage data where relevant, such as basic information about how you access any online booking or contact forms, including device and browser information and timestamps. We do not intentionally collect more data than necessary for delivering and improving our services.
How We Collect Personal Data
We collect personal data in several ways.
Directly from you when you contact us to request a quote, make a booking, amend or cancel a service, provide feedback, or otherwise communicate with us.
From third party service providers such as payment processors, scheduling platforms or marketing and analytics providers, where this is necessary for us to deliver our services or understand how our services are used.
From publicly available sources where we need to verify basic business contact details for commercial customers.
Lawful Bases for Processing
We only process personal data where we have a valid legal basis under the UK GDPR. Depending on the context, the following lawful bases may apply.
Contract. We process personal data to take steps at your request before entering into a contract, and to perform our contract with you, for example to arrange and deliver cleaning services, manage bookings, and handle payments.
Legal obligation. We process certain data to comply with legal obligations, such as tax and accounting rules, record keeping and responding to lawful requests from public authorities.
Legitimate interests. We process personal data where this is necessary for our legitimate interests and where those interests are not overridden by your rights and freedoms. This may include improving and developing our services, managing our business operations, preventing fraud, and maintaining security.
Consent. In limited cases, we may rely on your consent, for example for certain types of marketing communications. Where we rely on consent, you can withdraw it at any time.
How We Use Personal Data
We use your personal data for the following purposes.
To provide, manage and personalise our cleaning services, including scheduling bookings, coordinating cleaning staff, and following your instructions.
To process payments, issue invoices, manage accounts, and handle queries or disputes about charges.
To communicate with you about your bookings, service updates, changes to terms or policies, and responses to any enquiries or complaints.
To maintain our business records and comply with accounting, tax and other legal obligations.
To improve our services, including through internal analysis, staff training and quality control.
To protect our rights, property and safety, and the rights, property and safety of our staff, customers and others, including through the detection and prevention of fraud or misuse of our services.
Use of Data Processors and Third Parties
We sometimes use trusted third party service providers to process personal data on our behalf. These data processors only process data under our instructions and are bound by contractual obligations to protect your personal data and keep it confidential.
Examples of such processors may include payment processing providers, customer relationship management tools, scheduling and booking platforms, IT hosting and support providers, and professional advisers such as accountants.
We only share personal data with these processors to the extent necessary for the services they provide to us, and we do not authorise them to use your data for their own purposes.
Data Retention
We retain personal data only for as long as is necessary for the purposes for which it was collected, or as required by law.
For most customer data, we retain information for the duration of the customer relationship and for a reasonable period afterwards to respond to queries, maintain records for legal, tax and accounting purposes, and to demonstrate compliance with our obligations.
Where we rely on consent for specific activities, such as certain marketing communications, we will keep the relevant data for as long as your consent remains valid or until you withdraw it.
At the end of the applicable retention periods, personal data is securely deleted, anonymised or archived in a way that no longer identifies you.
Data Security
We take appropriate technical and organisational measures to protect personal data from unauthorised access, accidental loss, damage or disclosure. These measures include restricting access to personal data to those staff and processors who need it for legitimate business purposes, using secure systems and processes, and regularly reviewing our security arrangements.
While we strive to protect your personal data, no system can be completely secure. We therefore cannot guarantee absolute security, but we continually work to improve our security practices.
International Data Transfers
Where we use third party service providers that are located outside the United Kingdom or the European Economic Area, or that store data in other countries, we take steps to ensure that appropriate safeguards are in place. These may include the use of standard contractual clauses or reliance on adequacy regulations issued by relevant authorities. We will only transfer personal data internationally where it is lawful and where your rights and protections travel with your data.
Your Data Protection Rights
Under the UK GDPR, you have certain rights in relation to your personal data, subject to applicable legal conditions and exemptions.
Right of access. You have the right to request confirmation as to whether we process your personal data and, if so, to request a copy of that data and information about how it is used.
Right to rectification. You have the right to ask us to correct or complete any inaccurate or incomplete personal data we hold about you.
Right to erasure. In some circumstances, you have the right to request that we delete your personal data, for example where the data is no longer necessary for the original purposes or where you withdraw consent and there is no other legal basis for processing.
Right to restriction. You may have the right to request that we restrict the processing of your personal data, for example while we verify its accuracy or consider an objection you have raised.
Right to object. You have the right to object to certain types of processing, including processing based on legitimate interests and processing for direct marketing purposes.
Right to data portability. You may have the right to receive personal data that you have provided to us in a structured, commonly used, machine readable format, and to request that we transfer it to another controller where technically feasible.
Where we rely on consent to process your personal data, you have the right to withdraw that consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
Exercising Your Rights
If you wish to exercise any of your data protection rights, please contact us using your preferred communication method. To protect your privacy, we may need to verify your identity before responding to your request. We aim to respond to all valid requests within one month, or within any extended period permitted by law for complex or numerous requests.
You also have the right to lodge a complaint with the relevant supervisory authority if you believe that your personal data has not been handled in accordance with data protection law. We encourage you to contact us first so that we can try to resolve your concerns directly.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal obligations. Any significant changes will be explained clearly, and the updated version will apply from the date it is issued. We encourage you to review this Privacy Policy periodically to stay informed about how we handle personal data.