Privacy Policy - Oven Cleaning Bloomsbury

This Privacy Policy explains how Oven Cleaning Bloomsbury collects, uses, stores, shares, and protects personal data relating to all customers and prospective customers in the Bloomsbury area. It applies to every individual who uses, enquires about, or receives services from Oven Cleaning Bloomsbury in this area. We are committed to handling personal information lawfully, fairly, and transparently in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who this policy applies to

This policy applies to all Oven Cleaning Bloomsbury customers in area, including people who request a quote, book a service, communicate with us, or otherwise interact with our business in connection with oven cleaning services. It also applies to any person whose personal data is provided to us by a customer when arranging a booking, such as a household member or property contact.

2. Personal data we collect

We collect only the information that is necessary to provide our services, manage our business, and meet our legal obligations. The types of data we may collect include:

Identity details such as your name.
Contact details such as telephone number and email address.
Address details for booking, access, and service delivery purposes.
Service information such as appointment details, property access notes, oven type, cleaning requirements, and service preferences.
Payment and billing information needed to process charges, invoices, refunds, or payment confirmation.
Communication records including messages, enquiries, complaints, and feedback.
Technical information that may be gathered when you interact with us electronically, such as time of contact or device-related metadata, where relevant to security and service management.

We do not intentionally collect special category data unless you choose to provide it and it is strictly necessary for a specific reason. If you share such information, we will only use it where permitted by law and where appropriate safeguards are in place.

3. How we use personal data

We use personal data for the following purposes:

To respond to enquiries and provide quotes.
To arrange, confirm, and deliver oven cleaning services.
To communicate about bookings, access arrangements, or changes to appointments.
To process payments and manage accounts.
To handle customer service matters, including complaints and follow-up issues.
To maintain accurate business records.
To comply with legal, accounting, insurance, and regulatory obligations.
To protect our business, staff, and customers from fraud, misuse, or security incidents.

We will only use your data for the purposes for which it was collected, unless we reasonably consider another lawful use is compatible and permitted by law.

4. Lawful basis for processing

Under GDPR, we must have a lawful basis for each use of personal data. Oven Cleaning Bloomsbury relies on the following lawful bases:

Contract – where processing is necessary to provide a quote, manage a booking, perform cleaning services, or take steps at your request before entering into a contract.
Legal obligation – where we must retain records, respond to lawful requests, or comply with tax, accounting, or regulatory duties.
Legitimate interests – where processing is necessary for our legitimate business interests, such as improving service quality, handling enquiries, managing customer relationships, preventing misuse, and keeping secure records, provided your rights do not override those interests.
Consent – where we specifically ask for your permission, for example for certain optional communications or where consent is otherwise required by law.

Where we rely on legitimate interests, we assess the impact on your rights and freedoms to ensure the processing is proportionate and appropriate.

5. Sharing your data and processors

We may share personal data with trusted third parties that help us operate our business. These parties act as processors when they process data on our instructions, or as separate controllers where they determine their own purposes. Examples may include:

IT and cloud service providers that store or protect booking records and communications.
Payment processors that handle card or electronic payments.
Accounting or bookkeeping providers that support invoicing, tax, and financial administration.
Customer management or scheduling tools used to organise appointments and service delivery.
Professional advisers such as insurers, legal advisers, or auditors where necessary.

We require processors to take appropriate technical and organisational measures to protect personal data and to process it only in accordance with our instructions and applicable law. We do not sell personal data.

6. Data retention

We keep personal data only for as long as necessary for the purposes described in this policy. Retention periods vary depending on the type of information and the reason we hold it. In general:

Booking and service records are retained for as long as needed to manage the customer relationship and deal with any follow-up matters.
Financial records are retained for the period required by tax and accounting laws.
Communication records are kept for a reasonable period to resolve disputes, respond to queries, and maintain service history.
Data that is no longer required is securely deleted, anonymised, or archived in line with our retention practices.

When deciding how long to keep information, we consider legal requirements, the nature of the data, the purpose of processing, and any potential need to defend legal claims. We do not keep data indefinitely.

7. Data security

We take appropriate measures to protect personal data from unauthorised access, loss, disclosure, alteration, or destruction. These measures may include access controls, secure storage, staff awareness, and limiting data access to those who need it for business purposes. While no system can be guaranteed completely secure, we review our safeguards regularly and act promptly if an issue arises.

8. Your rights

As a data subject, you have rights under GDPR in relation to your personal data. These rights may be subject to legal limitations or exemptions. You have the right to:

Be informed about how your data is used.
Access the personal data we hold about you.
Rectify inaccurate or incomplete data.
Erase your data in certain circumstances.
Restrict processing in certain situations.
Object to processing based on legitimate interests or direct marketing.
Data portability for data you have provided to us, where applicable.
Withdraw consent at any time where processing is based on consent.

If you exercise any of these rights, we may need to verify your identity before responding. We will normally respond within one month, unless the request is complex or numerous.

9. International transfers

If any of our service providers store or process data outside the UK, we will ensure that appropriate safeguards are in place to protect that information in line with applicable law. These safeguards may include adequacy regulations, contractual protections, or other lawful transfer mechanisms.

10. Marketing communications

We will only send marketing communications where permitted by law. If consent is required, we will ask for it clearly and separately. You can opt out of non-essential communications at any time. If you object to receiving marketing, we will stop using your data for that purpose.

11. Children’s data

Our services are intended for adults arranging cleaning services for domestic or commercial premises. We do not knowingly collect data from children. If we become aware that a child’s data has been provided without appropriate authority, we will take reasonable steps to delete it promptly.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or how we handle data. The latest version will apply from the date it is published or otherwise communicated. We encourage customers to review it periodically.

13. Summary of our commitment

Oven Cleaning Bloomsbury is committed to protecting the privacy of all customers in area. We collect only necessary personal data, use it for clear and lawful purposes, retain it for no longer than needed, and work with trusted processors under proper safeguards. We also respect your rights and aim to handle all personal data fairly, securely, and transparently.