Privacy Policy - Deep Cleaning Haringey

This Privacy Policy explains how Deep Cleaning Haringey collects, uses, stores, and protects personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to all Deep Cleaning Haringey customers in the area, including individuals who enquire about our services, request a quotation, book a service, or communicate with us in any way.

1. Who We Are

Deep Cleaning Haringey provides professional deep cleaning services to homes and businesses in the local area. For the purposes of data protection law, Deep Cleaning Haringey acts as the data controller when we decide why and how your personal data is processed. This means we are responsible for ensuring that your personal information is handled lawfully, fairly, and transparently.

2. Information We Collect

We only collect personal data that is necessary to provide our services, manage our relationship with you, and meet our legal obligations. The types of information we may collect include:

• Identity details such as your name and, where relevant, business name.
• Contact details such as email address, telephone number, and service address.
• Booking and service information such as property details, service preferences, cleaning requirements, access instructions, and appointment history.
• Communication records including messages, emails, notes from calls, and feedback.
• Payment-related details such as transaction records, invoicing information, and payment status.
• Technical information where applicable, such as basic website usage data or device details if you interact with our online systems.

We do not intentionally collect special category data unless it is strictly necessary and you have provided it voluntarily or another lawful basis applies. If such information is shared with us, we will process it only where permitted by law and with appropriate safeguards.

3. How We Use Your Data

We use personal data for the following purposes:

• To respond to enquiries and provide quotations.
• To arrange, manage, and deliver cleaning services.
• To communicate with you about bookings, service changes, and customer support.
• To issue invoices, process payments, and maintain accounting records.
• To maintain internal records and monitor service quality.
• To comply with legal, tax, and regulatory obligations.
• To resolve disputes, prevent fraud, and protect our business and customers.

We ensure that personal data is used only for legitimate purposes and not in ways that are incompatible with the reasons for which it was collected.

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for each type of processing. Deep Cleaning Haringey relies on one or more of the following lawful bases:

Contract

We process personal data where it is necessary to take steps at your request before entering into a contract or to perform a contract with you. This includes handling bookings, delivering services, and managing payments.

Legal Obligation

We process certain information to meet legal requirements, including tax, accounting, and record-keeping duties.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided that those interests are not overridden by your rights and freedoms. This may include improving services, preventing abuse, handling complaints, and maintaining secure business records.

Consent

In limited situations, we may rely on your consent, for example if we need permission to use certain optional information. Where consent is used, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

5. Data Sharing and Processors

We may share personal data with trusted third parties who support our operations. These organisations act as processors when they handle data on our instructions, or as independent controllers where they determine their own purposes. We only share information where necessary and always aim to minimise what is disclosed.

Examples of processors and service providers may include:

• Payment service providers that help process card or online payments.
• Accounting and bookkeeping services that support invoicing and compliance.
• IT and cloud storage providers that host data securely.
• Communication tools used to send emails, manage messages, or schedule services.
• Professional advisers such as lawyers, insurers, or auditors where necessary.

Where processors are used, they are required to protect your data, act only on our instructions, and follow appropriate confidentiality and security measures. We do not sell personal data.

6. International Transfers

If any of our processors store or access data outside the UK, we will ensure appropriate safeguards are in place. These may include adequacy regulations or approved contractual protections to keep your data secure and protected to the standard required by law.

7. Data Retention

We keep personal data only for as long as necessary for the purpose it was collected, including to satisfy legal, accounting, or reporting requirements. Retention periods may vary depending on the type of information and the context in which it was provided.

• Enquiry data may be retained for a limited period if no booking follows, so we can respond to follow-up questions or manage future requests.
• Customer and service records are kept for the duration of the service relationship and for a reasonable period afterwards.
• Financial and tax records are retained for the period required by law.

When data is no longer needed, we securely delete, anonymise, or destroy it. We apply a retention approach that is proportionate and consistent with our obligations under data protection law.

8. How We Protect Your Data

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These measures may include access controls, secure storage, staff confidentiality obligations, and limited data sharing on a need-to-know basis. While no system can be guaranteed to be completely secure, we are committed to maintaining a high standard of protection.

9. Your Rights

As a data subject under UK GDPR, you have important rights in relation to your personal data. These rights may be exercised subject to legal conditions and exemptions. They include:

• Right of access – to request a copy of the personal data we hold about you.
• Right to rectification – to ask us to correct inaccurate or incomplete data.
• Right to erasure – to request deletion of your data in certain circumstances.
• Right to restrict processing – to ask us to limit how we use your data in certain cases.
• Right to object – to object to processing based on legitimate interests or direct marketing.
• Right to data portability – to receive certain data in a structured, commonly used format where applicable.
• Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

If you believe your rights have not been respected, you may also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

10. Children’s Data

Our services are intended for adults and business customers. We do not knowingly collect personal data from children except where necessary in the context of a property booking or other lawful business interaction, and only in compliance with data protection law.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practices, or the way we handle personal data. Any updated version will apply from the date it is published. We encourage customers to review the policy periodically so they remain informed about how their information is used.

12. Summary of Our Commitment

Deep Cleaning Haringey is committed to processing personal data responsibly, transparently, and securely. We collect only the information we need, use it for clear and lawful purposes, share it only with trusted processors where necessary, and keep it only for as long as required. We respect your rights and aim to handle all personal data in a way that maintains trust and complies with the law.