Privacy Policy - Cleaners Crystalpalace

This Privacy Policy explains how Cleaners Crystalpalace collects, uses, shares, stores, and protects personal data when providing cleaning services to customers in the Crystal Palace area. It applies to all Cleaners Crystalpalace customers in area, including prospective clients, active customers, and anyone who communicates with us in connection with our services. We are committed to handling personal data in a lawful, fair, and transparent way in accordance with the UK GDPR and the Data Protection Act 2018.

1. Who We Are

Cleaners Crystalpalace provides residential and commercial cleaning services. In the course of arranging, delivering, and managing those services, we may process personal information about customers, household members, property managers, and other relevant contacts. For the purposes of data protection law, Cleaners Crystalpalace is the data controller for the personal data covered by this Policy, meaning we decide how and why your data is used.

2. Personal Data We Collect

We only collect information that is necessary for providing our services, managing our business, and meeting our legal obligations. Depending on your interactions with us, we may collect the following categories of data:

• Identity details such as your name and title;
• Contact details such as address, email address, telephone number, and preferred communication method;
• Service information such as property access instructions, cleaning preferences, scheduling notes, and service history;
• Billing and payment information such as invoice records, payment status, and transaction details;
• Communication records including emails, messages, call notes, complaints, and feedback;
• Technical information such as basic website or device data if you interact with our online systems, where applicable;
• Special category data only where necessary and with additional safeguards, for example if you voluntarily provide health or access-related information needed to deliver services safely.

We do not intentionally collect more information than is required. If you choose not to provide certain information, we may not be able to complete your booking or deliver some services properly.

3. How We Collect Your Data

We may collect personal data directly from you when you request a quote, make a booking, ask a question, submit feedback, or otherwise interact with us. We may also receive data from third parties who act on your behalf, such as property managers, letting agents, landlords, or family members arranging services for you. In some cases, limited data may be generated automatically through our systems, such as service logs or message records.

4. Purposes of Processing

We use personal data only for clear and legitimate purposes. These include:

• Providing cleaning services and managing appointments;
• Confirming bookings, instructions, and service availability;
• Communicating with customers about service delivery or changes;
• Preparing invoices, processing payments, and maintaining financial records;
• Handling complaints, service issues, and customer support requests;
• Improving our operations, service quality, and customer experience;
• Meeting legal, accounting, and tax obligations;
• Preventing fraud, misuse, or unauthorised access to our systems.

We do not use personal data for unrelated purposes that would be unexpected or incompatible with the original reason for collection.

5. Lawful Basis for Processing

Under GDPR, we must have a lawful basis to process personal data. Cleaners Crystalpalace relies on one or more of the following bases depending on the context:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes arranging services, carrying out cleaning work, managing bookings, and processing payments.

Legal Obligation

We process certain information where required by law, including tax, accounting, record-keeping, and compliance obligations.

Legitimate Interests

We may process personal data where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. Examples include improving our services, maintaining business records, responding to enquiries, and protecting against misuse or fraud.

Consent

Where we rely on consent, such as for optional communications or particular types of sensitive information, you may withdraw that consent at any time. Withdrawal does not affect processing that has already taken place lawfully.

6. Sharing Your Data and Processors

We may share personal data only where necessary and with appropriate safeguards. This may include trusted processors who act on our instructions and help us deliver services or operate our business. Processors may include:

• Payment service providers;
• Booking and scheduling systems;
• Invoice, accounting, and bookkeeping providers;
• IT and data storage providers;
• Customer communication tools;
• Professional advisers, where needed for legal or compliance purposes.

Where we use processors, we ensure they are bound by written contracts requiring them to protect your data, act only on our instructions, and implement suitable technical and organisational security measures.

We may also disclose information if required by law, court order, regulatory authority, or to protect our rights, customers, staff, or property.

7. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including satisfying legal, accounting, and reporting requirements. Retention periods vary depending on the type of data and the reason for processing.

As a general approach:

• Customer service records are kept for the duration of the relationship and for a reasonable period afterwards;
• Financial and tax records are retained for the period required by law;
• Communication records may be retained for a period needed to resolve disputes or support service history;
• Data no longer needed is securely deleted, anonymised, or archived in a restricted form.

We review retention regularly to make sure we do not hold data for longer than necessary. In some cases, we may need to keep records for longer where there is an ongoing legal claim or regulatory requirement.

8. Data Security

We take the security of personal data seriously. We use appropriate measures to protect information against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and limited access to personal data on a need-to-know basis.

Although no system can be guaranteed completely secure, we work to reduce risks and to maintain a level of protection appropriate to the nature of the data we process.

9. International Transfers

If any of our processors or service providers store or access data outside the UK, we will ensure that suitable safeguards are in place in line with applicable data protection law. These safeguards may include adequacy regulations, standard contractual clauses, or equivalent legal measures.

10. Your Rights

Under data protection law, you have rights in relation to your personal data. These rights may apply in full or in part depending on the circumstances and the lawful basis for processing.

• Right of access – you may request a copy of the personal data we hold about you;
• Right to rectification – you may ask us to correct inaccurate or incomplete data;
• Right to erasure – in certain cases, you may ask us to delete your data;
• Right to restriction – you may ask us to limit how we use your data in some circumstances;
• Right to object – you may object to processing based on legitimate interests or direct marketing;
• Right to data portability – where applicable, you may request certain data in a structured, commonly used format;
• Right to withdraw consent – where processing is based on consent, you can withdraw it at any time;
• Right to complain – you may raise concerns with the relevant data protection authority if you believe your rights have been infringed.

We will respond to valid requests within the time limits set by law and may need to verify your identity before acting on your request.

11. Children’s Data

Our services are intended for adults. We do not knowingly collect personal data from children except where it is necessary in a domestic context and provided by an adult customer, such as access-related information. If we become aware that we have collected data unlawfully from a child, we will take appropriate steps to delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this Policy periodically to stay informed about how we use personal data.

13. Summary of Our Commitment

Cleaners Crystalpalace is committed to processing personal data responsibly and transparently. We collect only what we need, use it for lawful and clearly defined purposes, share it only with trusted processors or where required by law, and retain it only for as long as necessary. We respect your rights and aim to handle all personal data in a way that supports trust, privacy, and compliance for every customer in the Crystal Palace area.