Streatham Cleaners Privacy Policy
This Privacy Policy explains how Streatham Cleaners collects, uses, stores and protects personal data relating to customers in our service area. It also explains your rights under the United Kingdom General Data Protection Regulation and related data protection laws. By using our cleaning services, visiting our website or otherwise interacting with us, you acknowledge that you have read and understood this Privacy Policy.
Scope and data controller
This Privacy Policy applies to all Streatham Cleaners customers and prospective customers in our service area, including individuals who make enquiries, bookings or receive our cleaning services at residential or commercial premises. Streatham Cleaners is the controller of the personal data described in this Privacy Policy, which means we determine how and why your personal data is processed.
Types of personal data we collect
We collect and process different categories of personal data depending on how you interact with us. This may include the following types of information.
Identification and contact details. This includes your name, address where services are provided, billing address if different, and contact details such as your preferred communication method.
Booking and service information. This includes details about your cleaning requirements, property type and size, access instructions, dates and times of bookings, frequency of services, notes you provide about your preferences, and information relating to the completion of work.
Payment and transaction information. This includes information relating to payments and invoices, such as amounts, payment dates and transaction references. We do not store full payment card numbers in our systems. Where card payments are taken, these are processed securely by our chosen payment processor.
Communications and correspondence. This includes emails, website enquiry forms, call notes, text messages and other communications you send to us or we send to you in relation to enquiries, bookings, complaints, feedback or support.
Technical information. When you visit our website, we may collect technical information such as IP address, browser type, device information and basic analytical information about how you use our site. This is generally collected through cookies or similar technologies where permitted by applicable law.
Employee and contractor information is covered by separate internal privacy notices and is not described in detail in this Privacy Policy.
How we collect personal data
We collect personal data in several ways, including when you contact us to request a quotation, make a booking, change or cancel a booking, request customer support, provide feedback or reviews, use our website, or otherwise interact with us in person, by telephone or through electronic communication channels.
We may also receive personal data about you from third parties where this is necessary to provide our services, for example from property managers, landlords or booking platforms that you have chosen to use. In such cases, we process the personal data in accordance with this Privacy Policy.
Lawful bases for processing
We only process your personal data when we have a lawful basis to do so under data protection laws. Depending on the circumstances, this may include the following bases.
Performance of a contract. We process personal data where it is necessary to enter into and perform a contract with you, for example to manage bookings, provide cleaning services, issue invoices and process payments.
Compliance with legal obligations. We may process personal data where necessary to comply with legal and regulatory requirements, such as record-keeping, tax and accounting obligations, and to respond to lawful requests from public authorities.
Legitimate interests. We may process personal data where this is necessary for our legitimate business interests, provided your interests and fundamental rights do not override those interests. This may include managing our relationship with you, improving our services, handling queries and complaints, preventing fraud and maintaining the security of our systems and premises.
Consent. In limited circumstances, we may rely on your consent as the lawful basis for processing, for example for certain types of direct marketing communications. Where we rely on consent, you have the right to withdraw it at any time.
Purposes for which we use personal data
We may use your personal data for the following purposes.
To provide and manage our cleaning services, including arranging and confirming bookings, allocating cleaners, and managing access and service delivery at your premises.
To communicate with you about your enquiries, bookings, changes to services, service updates and customer support matters.
To process payments, issue invoices and manage our accounts and financial records.
To manage our relationship with you, including handling complaints, resolving disputes and seeking feedback to improve our services.
To operate, maintain and improve our website, services and internal processes, including monitoring usage, troubleshooting and developing new features.
To protect the security and integrity of our systems, staff and customers, and to detect and prevent fraud, misuse or other unlawful activity.
To comply with our legal obligations and cooperate with regulators and law enforcement when required.
Data retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting or reporting requirements.
In general, customer records and booking information may be kept for a period of several years after your last interaction with us, in line with applicable limitation periods and statutory retention obligations. Financial and transaction records are typically retained for the period required under tax and accounting laws.
When personal data is no longer required, we will securely delete, anonymise or otherwise dispose of it in accordance with our data retention and deletion procedures.
Sharing personal data and use of processors
We do not sell your personal data. We may share your personal data with carefully selected third parties where necessary for the purposes described in this Privacy Policy.
Service providers and processors. We may share personal data with external companies that provide services to us, such as IT and hosting providers, payment processors, customer relationship management systems, communication tools, and professional advisers such as accountants. These third parties act as processors on our behalf and are contractually required to protect your personal data and only process it in accordance with our instructions.
Cleaning staff and contractors. Limited personal data such as your address, booking details and relevant notes may be shared with our employees or contractors who carry out the cleaning services at your premises. They are bound by confidentiality obligations and are only given the information necessary to perform their duties.
Legal and regulatory disclosures. We may disclose personal data where required to do so by law, regulation or court order, or when necessary to establish, exercise or defend legal claims or to protect the rights, property or safety of Streatham Cleaners, our customers or others.
In the event of a business reorganisation, merger or transfer, we may share personal data with relevant parties, subject to appropriate safeguards, so that the service to you can continue.
International transfers
Where we use service providers located outside the United Kingdom or the European Economic Area, your personal data may be transferred to countries that do not provide the same level of data protection. In such cases, we will ensure that appropriate safeguards are in place, such as standard contractual clauses or equivalent mechanisms, to protect your personal data in accordance with applicable law.
Security of your personal data
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or damage. These measures may include access controls, encryption, secure storage, staff training and regular review of our security practices. While we strive to protect your personal data, no system can be completely secure and we cannot guarantee absolute security.
Your data protection rights
Under data protection laws, you have certain rights in relation to the personal data we hold about you. These rights may be subject to conditions and exemptions.
Right of access. You can request confirmation of whether we process your personal data and obtain a copy of that data, together with certain information about how we process it.
Right to rectification. You can ask us to correct inaccurate or incomplete personal data we hold about you.
Right to erasure. In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected or where you withdraw consent and no other lawful basis for processing applies.
Right to restriction. You can request that we restrict the processing of your personal data in certain situations, such as while we are investigating a complaint about accuracy.
Right to data portability. Where the processing is based on consent or contract and carried out by automated means, you may request that we provide your personal data in a structured, commonly used and machine-readable format, or transmit it directly to another controller where technically feasible.
Right to object. You can object to processing that is based on our legitimate interests, including profiling, on grounds relating to your particular situation. We will stop the processing unless we can demonstrate compelling legitimate grounds that override your interests, rights and freedoms or the processing is required for legal claims.
Right to withdraw consent. Where we rely on your consent for processing, you may withdraw that consent at any time. This does not affect the lawfulness of processing carried out before withdrawal.
You also have the right to lodge a complaint with a supervisory authority if you believe that your data protection rights have been infringed. In the United Kingdom, the supervisory authority is the Information Commissioner.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or data protection practices. Any significant changes will be communicated by appropriate means. The date of the latest version will be indicated in the policy, and we encourage you to review it periodically to stay informed about how we handle your personal data.