Cleaners Crystal Palace Privacy Policy
This Privacy Policy explains how Cleaners Crystal Palace collects, uses, stores and shares personal data in connection with our cleaning services. It applies to all Cleaners Crystal Palace customers and prospective customers in the Crystal Palace area, as well as any individuals who contact us about our services.
Who We Are
Cleaners Crystal Palace is a local cleaning services provider operating in and around the Crystal Palace area. For the purposes of applicable data protection laws, including the UK General Data Protection Regulation and the Data Protection Act 2018, Cleaners Crystal Palace is the controller of the personal data described in this Privacy Policy.
Personal Data We Collect
We may collect and process the following categories of personal data about you:
Identification and contact details: name, title, postal address, billing address, service address, and general location information relating to the property where services are provided.
Communication details: information you provide when you contact us by phone, post, or online contact forms, including any queries, feedback, or complaints.
Service information: details about the cleaning services you request or receive, such as type of service, frequency, preferred dates and times, access instructions for the property, and any relevant notes you provide about the premises.
Payment and billing data: information necessary to process payments and manage your account, including invoice details, payment status, and transaction records. We do not store full card details when payments are processed through secure payment processors.
Technical and usage information: limited technical data related to your interaction with our website, such as IP address, browser type, and pages visited. This may be collected through cookies or similar technologies where legally permitted.
Job application data: if you apply to work with us, we may collect information such as your name, contact information, work history, qualifications, and references.
How We Collect Your Data
We collect personal data directly from you when you contact us to request a quotation, book a service, make an enquiry, or otherwise communicate with us. We may also collect data during the performance of services at your property, where you or a representative provides information to our staff.
In some cases, we may receive personal data from third parties, such as comparison or referral websites, where you have requested that they pass your information to service providers like us. We only use such information in line with this Privacy Policy and applicable law.
Lawful Bases for Processing
We rely on the following lawful bases under data protection law to process your personal data:
Contract: where processing is necessary to enter into or perform a contract for cleaning services, including providing quotations, taking bookings, delivering services, managing your account, and handling payments.
Legal obligation: where we need to process personal data to comply with legal and regulatory requirements, such as tax and accounting obligations or to respond to lawful requests from authorities.
Legitimate interests: where processing is necessary for our legitimate business interests, provided your rights and interests do not override those interests. This includes managing and improving our services, responding to enquiries, ensuring the safety and security of our staff and customers, and maintaining business records.
Consent: in limited circumstances we may rely on your consent, for example for certain types of optional marketing communications or non-essential cookies. Where we rely on consent, you have the right to withdraw it at any time.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide quotations, accept bookings, and deliver cleaning services at your property.
To communicate with you about your bookings, including confirmations, changes, and reminders.
To process payments, issue invoices, and manage refunds or queries about charges.
To respond to your enquiries, requests and complaints and to provide customer support.
To manage our relationship with you, including record keeping and administration.
To improve our services, including training staff and reviewing customer feedback.
To send you service-related notices, updates, or important information about changes to our terms or policies.
To comply with legal obligations and to protect or defend our legal rights, including in connection with disputes or claims.
Data Sharing and Processors
We do not sell your personal data. We may share your personal data with carefully selected third parties where necessary for the purposes described in this Privacy Policy and in accordance with data protection law.
Service providers and processors: we may share personal data with third party companies that provide services to us, such as payment processors, IT and hosting providers, customer management systems, accountancy and bookkeeping services, and external cleaning contractors or subcontractors who help deliver our services. These organisations act as processors on our behalf and are only permitted to use your data in accordance with our instructions and for the relevant purpose.
Professional advisers: we may share data with professional advisers such as accountants, auditors, or legal advisers where necessary to obtain professional advice or to protect our legal rights.
Authorities and legal bodies: we may disclose personal data to law enforcement agencies, regulators, courts, or other public authorities where necessary to comply with legal obligations or to establish, exercise, or defend legal claims.
If any of our service providers are located outside the United Kingdom or the European Economic Area, we will take appropriate steps to ensure your personal data is protected through suitable safeguards in line with applicable data protection law.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including to provide services to you, meet legal, accounting, or reporting requirements, and resolve disputes.
In general, customer account and booking information is kept for as long as you remain a customer and for a reasonable period afterwards to respond to queries, manage our relationship, and maintain business records. Financial and transaction records are typically retained for a set period required by tax and accounting laws.
Where we process personal data on the basis of consent, we will stop processing when you withdraw your consent, unless we have another lawful basis to continue. When personal data is no longer required, we will securely delete or anonymise it.
Your Rights Under Data Protection Law
If you are located in the United Kingdom or the European Union, you have certain rights in relation to your personal data under the UK GDPR and EU GDPR. Subject to applicable conditions and exemptions, these rights include:
Right of access: the right to obtain confirmation as to whether we process your personal data, and to access and receive a copy of that data.
Right to rectification: the right to request correction of inaccurate or incomplete personal data we hold about you.
Right to erasure: the right to request deletion of your personal data in certain circumstances, for example where it is no longer needed for the purposes for which it was collected or where you withdraw consent and there is no other legal basis for processing.
Right to restriction: the right to request that we restrict the processing of your personal data in specific situations, such as while we verify its accuracy or assess an objection you have raised.
Right to data portability: the right to receive certain personal data in a structured, commonly used and machine-readable format, and to have that data transmitted to another controller where technically feasible.
Right to object: the right to object to our processing of your personal data where we rely on legitimate interests as our lawful basis. We will stop processing unless we have compelling legitimate grounds that override your interests or the processing is for legal claims. You also have the right to object at any time to direct marketing.
Rights related to consent: where we rely on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal.
You can exercise your rights by contacting us using the contact details provided in your service documentation or on our website. We may need to verify your identity before responding to some requests.
Security of Your Data
We take appropriate technical and organisational measures to protect your personal data from unauthorised access, loss, misuse, or disclosure. These measures include limiting access to personal data to those who need it for their role, using secure systems and passwords, and providing training to staff on data protection responsibilities. While we take steps to safeguard your data, no system can be guaranteed to be completely secure.
Use of Cookies and Similar Technologies
Our website may use cookies or similar technologies to enable core functionality, improve site performance, and help us understand how visitors use our website. Where required by law, we will obtain your consent before setting non-essential cookies. You can usually modify your browser settings to refuse cookies or alert you when cookies are being used, although this may affect how some parts of the website function.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. The latest version will always apply to the personal data we hold about you. Any significant changes will be communicated to you where appropriate, for example by a notice on our website or by direct communication.
Contact and Complaints
If you have any questions about this Privacy Policy or how we handle your personal data, or if you wish to exercise your data protection rights, you can contact us using the contact details provided in your service documentation or on our website.
You also have the right to lodge a complaint with the data protection supervisory authority in the country where you live or work, or where you consider that your rights may have been infringed. In the United Kingdom, this is the Information Commissioner's Office.