Privacy Policy - Oven Cleaning Barnes

This Privacy Policy explains how Oven Cleaning Barnes collects, uses, stores, shares, and protects personal data. It applies to all Oven Cleaning Barnes customers in the area, including prospective customers, existing customers, and anyone who enquires about our services. We are committed to handling personal information in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Oven Cleaning Barnes provides professional oven cleaning services to domestic and commercial customers. In providing these services, we may process personal data relating to customers, property occupants, authorised representatives, and other individuals connected to the service booking or delivery. We act as a data controller for the personal data we determine the purposes and means of processing.

2. Information We Collect

We collect only the personal data necessary for service delivery, administration, legal compliance, and customer support. The categories of information we may collect include:

Identity details: name and title.
Contact details: address, email address, and telephone number.
Booking and service details: appointment dates, service instructions, access notes, property type, and any preferences relevant to the cleaning service.
Payment information: billing details and transaction records. Payment card data is normally processed by secure payment providers rather than stored directly by us.
Communication records: messages, notes, feedback, complaints, and records of correspondence.
Technical data: limited information such as IP address, browser type, or device information if you interact with our digital systems or forms.
Operational records: service history, attendance logs, and internal notes created during the course of providing our services.

We do not intentionally collect special category data unless it is voluntarily provided and necessary for a specific reason. If you choose to share such information with us, we will handle it with additional care and only where a lawful basis applies.

3. How We Use Your Data

We use personal data for the following purposes:

to manage enquiries and bookings;
to provide oven cleaning and related services;
to communicate with you about appointments, changes, or service updates;
to process payments, invoices, and refunds where applicable;
to handle customer service requests, feedback, and complaints;
to maintain records for accounting, tax, and legal purposes;
to improve our services, processes, and customer experience;
to protect our business, staff, and customers from fraud, misuse, or security incidents;
to comply with legal and regulatory obligations.

We will only process your data when we have a valid lawful basis. This means your information is used fairly, transparently, and only for legitimate purposes.

4. Lawful Basis for Processing

Under data protection law, we rely on one or more of the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes arranging bookings, delivering cleaning services, handling payments, and managing service-related communications.

Legal Obligation

We may process and retain information where we are required to do so by law, including accounting, tax, and business recordkeeping obligations.

Legitimate Interests

We may process data where it is necessary for our legitimate interests, provided these interests are not overridden by your rights and freedoms. Examples include maintaining operational records, preventing fraud, improving customer service, and safeguarding our business.

Consent

In limited circumstances, we may rely on your consent, for example where you choose to receive optional marketing communications. Where consent is used, you may withdraw it at any time.

Vital Interests

In rare cases, we may process personal data to protect someone’s vital interests, such as in an emergency.

5. Sharing Your Information

We do not sell your personal data. However, we may share it with trusted third parties where necessary to operate our services. These recipients may include:

Payment processors who securely handle card or transaction payments;
Accounting or bookkeeping providers who assist with financial records and tax compliance;
IT and cloud service providers who store or support our business systems;
Customer communication tools used to manage messages or bookings;
Legal, insurance, or professional advisers where advice or claim handling is required;
Public authorities or regulators where disclosure is legally required.

Where third parties process data on our behalf, they act as processors and are required to protect your information, use it only as instructed, and follow appropriate security measures.

6. Processors

We may use external service providers to support our operations. These processors may handle personal data only for specified purposes and under written or equivalent contractual obligations. Common processor functions may include:

secure payment handling;
appointment scheduling and booking administration;
email, messaging, or customer relationship support;
website hosting, data storage, and system maintenance;
accounting and invoicing support;
data backup and cybersecurity services.

All processors are required to implement appropriate technical and organisational measures to protect personal data and may not use it for their own independent purposes.

7. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Retention periods depend on the type of information and the reason it is held.

Booking and service records: retained for a reasonable period to manage service history, disputes, and follow-up needs.
Financial and tax records: retained for the period required by law.
Correspondence and complaint records: retained for as long as needed to resolve the matter and maintain business records.
Marketing data: retained until you unsubscribe, object, or the data is no longer needed.

When data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you. Retention decisions are reviewed periodically to ensure we do not keep information longer than necessary.

8. International Transfers

If any processor or service provider stores or accesses data outside the United Kingdom, we will take steps to ensure appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or equivalent protections approved under applicable law.

9. Data Security

We use reasonable technical and organisational measures to protect personal data from loss, unauthorised access, misuse, alteration, or disclosure. These may include access controls, secure storage, encryption where appropriate, staff confidentiality measures, and supplier oversight. While no system can be guaranteed completely secure, we work to reduce risk and respond promptly to incidents.

10. Your Rights

Under data protection law, you have rights regarding your personal data. These rights may apply in full or in part depending on the circumstances and the lawful basis for processing.

Right of access: you may request a copy of the personal data we hold about you.
Right to rectification: you may ask us to correct inaccurate or incomplete information.
Right to erasure: you may ask us to delete your data in certain situations.
Right to restriction: you may ask us to limit how we use your data in certain circumstances.
Right to object: you may object to processing based on legitimate interests or direct marketing.
Right to data portability: you may request certain data in a structured, commonly used format where applicable.
Right to withdraw consent: where we rely on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond in accordance with data protection law. We may need to verify your identity before acting on your request.

11. Children’s Data

Our services are intended for adults. We do not knowingly collect personal data from children unless it is incidental to arranging or delivering a service and there is a lawful basis for doing so. If we become aware that we have collected data unlawfully, we will take steps to delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our operations, or the way we handle data. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers in the area to review this policy periodically.

13. Contact and Complaints

If you have concerns about how your data is handled, you may raise them with us so we can address the issue. You also have the right to lodge a complaint with the UK Information Commissioner’s Office if you believe your data protection rights have been infringed.

14. Summary of Key Points

Oven Cleaning Barnes collects only the information needed to provide and manage services, relies on clear lawful bases, uses processors under contractual safeguards, and retains data only for as long as necessary. We respect your rights and aim to handle all personal data fairly, securely, and transparently.

This policy applies to all Oven Cleaning Barnes customers in the area.