Privacy Policy - Deep Cleaning Bloomsbury

This Privacy Policy explains how Deep Cleaning Bloomsbury collects, uses, stores, shares, and protects personal data. It applies to all Deep Cleaning Bloomsbury customers in the area, including prospective customers, current customers, and individuals who make enquiries about our services. We are committed to handling personal information in a lawful, fair, and transparent manner in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By engaging our services, making an enquiry, or otherwise interacting with Deep Cleaning Bloomsbury, you acknowledge that your personal data may be processed as described in this Privacy Policy.

1. Information We Collect

We collect only the information that is necessary for us to deliver our services, manage customer relationships, and comply with legal obligations. The types of information we may collect include:

Identity details such as your name.
Contact details such as your address, email address, and telephone number.
Service information such as booking details, service preferences, property access instructions, and cleaning requirements.
Payment-related information such as billing records and transaction details, where applicable.
Communication records such as enquiries, complaints, feedback, and correspondence.
Technical information such as IP address, browser type, and device information when you interact with our digital systems, if applicable.

We do not intentionally collect special category data unless it is necessary and lawful to do so. If such information is ever provided to us, we will handle it in accordance with applicable data protection law.

2. How We Use Your Data

We process personal data for the following purposes:

To provide, schedule, and deliver cleaning services.
To confirm bookings, manage appointments, and communicate service updates.
To issue invoices, record payments, and maintain financial records.
To respond to questions, requests, complaints, and feedback.
To improve our services, processes, and customer experience.
To meet legal, accounting, and regulatory obligations.
To protect our business against fraud, misuse, and security risks.

We only use personal data for the purpose for which it was collected, unless we reasonably determine that we need to use it for another compatible purpose and that such use is lawful.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each type of processing. Deep Cleaning Bloomsbury relies on the following lawful bases:

Contract

We process your personal data where it is necessary to enter into or perform a contract with you. This includes managing bookings, delivering cleaning services, handling payments, and supporting customer service requests related to those services.

Legal Obligation

We may process and retain certain data to comply with legal requirements, including tax, accounting, and record-keeping obligations.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided that those interests are not overridden by your rights and freedoms. This may include service improvement, internal administration, safeguarding our operations, and handling basic business analytics.

Consent

Where required by law, we will rely on your consent. If we ask for consent, you may withdraw it at any time. Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal.

Important: we do not rely on consent where another lawful basis is more appropriate and legally valid.

4. Sharing and Processors

We may share personal data with trusted third parties who assist us in operating our business. These third parties act as data processors or independent controllers, depending on the nature of the service provided.

Examples of processors may include:

Payment processors who handle card or electronic payments.
IT and cloud service providers who support data storage, email, and system functionality.
Administrative service providers who help manage scheduling, communication, or document processing.
Professional advisers such as accountants or legal advisers where needed for compliance and business management.

We ensure that any processor we use is subject to appropriate contractual obligations and is required to protect personal data, process it only on our instructions, and implement suitable security measures.

We may also disclose personal data if required to do so by law, regulation, court order, or a competent authority, or where disclosure is necessary to protect our legal rights or the rights of others.

We do not sell your personal data.

5. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, accounting, reporting, or contractual requirements. Retention periods may vary depending on the type of data and the context in which it is processed.

Customer and booking records are generally retained for as long as needed to manage the service relationship and any follow-up issues.
Financial and transaction records are retained for the period required by applicable tax and accounting laws.
Communication records may be retained to support service history, complaint handling, and internal quality review.

When personal data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you. In some cases, we may retain limited information for legal defence or compliance purposes.

6. Data Security

We use reasonable technical and organisational measures to protect personal data against accidental loss, unauthorised access, misuse, alteration, or disclosure. These measures may include access controls, restricted permissions, secure storage, and staff confidentiality obligations.

While we take appropriate steps to safeguard data, no method of transmission or storage is completely secure. If we become aware of a data breach affecting your personal data, we will assess the situation and take action in accordance with applicable law.

7. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may be subject to conditions and legal exceptions.

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete information.
Right to erasure – you can request deletion of your personal data in certain circumstances.
Right to restriction – you can ask us to limit how we use your data in certain cases.
Right to data portability – you can request certain data in a structured, commonly used format where applicable.
Right to object – you can object to processing based on legitimate interests and to direct marketing where applicable.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will take reasonable steps to respond in line with legal requirements. We may need to verify your identity before responding to a request.

8. Children’s Data

Our services are not directed at children, and we do not knowingly collect personal data from individuals under the age of 16 without appropriate authority or consent where required. If we become aware that we have collected such data unlawfully, we will take appropriate steps to delete it.

9. International Transfers

Where personal data is transferred outside the UK, we will take steps to ensure that appropriate safeguards are in place and that the transfer is carried out in compliance with data protection law. This may include the use of adequacy regulations or approved contractual protections.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any updated version will apply from the date it is made available. We encourage customers to review this policy periodically to stay informed about how we protect personal data.

11. Summary of Key Principles

Deep Cleaning Bloomsbury processes personal data only when necessary, uses it for clear and legitimate purposes, stores it securely, and retains it only for as long as needed. We work with processors under appropriate safeguards and respect your rights under UK data protection law.

In short: your privacy matters to us, and we are committed to treating your information with care, lawfulness, and respect.