Privacy Policy - Edgware Cleaners

Edgware Cleaners is committed to protecting the privacy and personal data of all customers in our area. This Privacy Policy explains how we collect, use, store, share, and protect personal information when you use our cleaning services. It also explains the rights you have under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy applies to all Edgware Cleaners customers in the area, including individuals, households, landlords, tenants, and business clients who use our services. By using our services, you acknowledge that your personal data may be processed in accordance with this policy.

1. Data We Collect

We collect only the information that is necessary to provide our cleaning services effectively, manage bookings, and meet legal or contractual obligations. The types of personal data we may collect include:

• Identity information: your name, title, and, where relevant, business name.
• Contact details: your address, email address, and telephone number.
• Service information: details about the cleaning services you request, service preferences, access instructions, and property-related notes necessary for service delivery.
• Payment information: billing details, payment status, and transaction records. We do not store card details unless required by a secure payment provider.
• Communication records: emails, messages, call notes, complaint records, and service feedback.
• Technical information: limited data such as IP address or device-related information if you interact with our digital systems, where applicable.

We do not intentionally collect special category data unless it is strictly necessary and you have provided it for a specific reason, such as access needs or safety instructions. Where such data is provided, we handle it with extra care and only when a lawful basis applies.

2. How We Use Your Data

We use personal data to operate our business and deliver services properly. This includes:

• processing enquiries and booking requests;
• providing, managing, and completing cleaning services;
• issuing invoices and handling payments;
• communicating service updates, changes, or issues;
• maintaining service records and customer preferences;
• responding to complaints, queries, and feedback;
• meeting legal, accounting, tax, and insurance obligations;
• protecting our business, staff, and customers from fraud, misuse, or unsafe activity.

We only use your information for specified, lawful, and legitimate purposes. We do not sell your personal data to third parties.

3. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis to process personal data. Depending on the situation, we rely on one or more of the following:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes taking bookings, delivering cleaning services, managing payments, and communicating about service delivery.

Legal Obligation

We may process data to comply with legal requirements, including record keeping, tax obligations, and responding to lawful requests from authorities.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include improving our services, handling operational administration, preventing fraud, and maintaining service quality. We always consider whether the processing is necessary and proportionate.

Consent

In limited cases, we may rely on your consent, for example where you voluntarily provide information that is not strictly required for the service. Where consent is used, you may withdraw it at any time. This will not affect the lawfulness of processing carried out before withdrawal.

4. How We Share Personal Data

We may share personal data with trusted third parties only when necessary and only for the purposes described in this policy. These may include:

• Payment processors for secure payment handling;
• IT and cloud service providers for data storage, email, scheduling, and administration;
• Accountants and professional advisers for financial and compliance purposes;
• Insurance providers where needed to handle claims or assess incidents;
• Legal or regulatory authorities where required by law.

All processors and service providers are required to handle personal data securely, use it only for our instructions, and meet appropriate data protection standards. We take care to work only with processors that can provide sufficient guarantees regarding confidentiality and security.

5. International Transfers

If any of our processors store or access personal data outside the United Kingdom, we ensure that appropriate safeguards are in place. These safeguards may include adequacy regulations, standard contractual clauses, or equivalent legal mechanisms designed to protect your data in line with UK GDPR requirements.

6. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including for legal, accounting, or reporting obligations. Retention periods depend on the type of information and the reason for holding it.

In general:

• customer service and booking records are retained for as long as needed to manage the relationship and resolve issues;
• invoice and payment records are retained for the period required by tax and accounting laws;
• complaint and correspondence records are kept long enough to respond properly and maintain service history;
• unused enquiry data is deleted after a reasonable period if no service relationship develops.

When data is no longer needed, we securely delete, anonymise, or destroy it. We review retained information periodically to ensure it is still necessary.

7. Data Security

We use appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, or alteration. These measures may include access controls, password protection, secure storage, staff confidentiality commitments, and restricted data access. While no system can be guaranteed completely secure, we take data protection seriously and work to reduce risks wherever possible.

8. Your Rights

Under UK GDPR, you have a number of rights regarding your personal data. These rights may apply depending on the circumstances and the lawful basis used for processing.

• Right of access: you can request a copy of the personal data we hold about you.
• Right to rectification: you can ask us to correct inaccurate or incomplete information.
• Right to erasure: you may ask us to delete your data in certain situations.
• Right to restrict processing: you may ask us to limit how we use your data in certain cases.
• Right to object: you can object to processing based on legitimate interests or direct marketing.
• Right to data portability: you may request certain data in a structured, commonly used format where applicable.
• Right to withdraw consent: if we rely on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office if you believe your data has been handled unlawfully. We encourage you to raise any concerns with us first so we can try to resolve them promptly.

9. Children’s Data

Our cleaning services are not directed at children, and we do not knowingly collect personal data from children unless it is incidental and necessary for service delivery, such as property access arrangements linked to a household. If we become aware that we have collected child-related data without a lawful basis, we will take steps to delete it securely.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, operational practices, or service arrangements. Any updated version will apply from the date it is issued. We recommend reviewing this policy periodically so you remain informed about how your personal data is handled.

11. Contact and Data Requests

This policy is intended to explain our data practices clearly and transparently. If you wish to exercise any of your rights, correct inaccurate information, or ask a question about how your data is handled, you may submit a request through our usual customer communication channels.

Edgware Cleaners will handle all legitimate privacy requests in accordance with applicable data protection law and aims to respond within the required legal timeframes. We may need to verify your identity before acting on a request to protect your privacy and prevent unauthorised disclosures.

Last updated: This policy is reviewed periodically to ensure ongoing GDPR compliance.