Privacy Policy - Oven Cleaning Bromley

This Privacy Policy explains how Oven Cleaning Bromley collects, uses, stores, shares, and protects personal data. It applies to all Oven Cleaning Bromley customers in the area, including prospective customers, current customers, and anyone who interacts with our services, bookings, quotations, or communications. We are committed to handling personal data in a lawful, fair, and transparent manner in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

For the purposes of data protection law, Oven Cleaning Bromley acts as the data controller for the personal data we collect and process in connection with our services. This means we decide why and how your personal data is used. We take privacy seriously and aim to keep the information we hold accurate, secure, and limited to what is necessary.

2. Personal Data We Collect

We may collect and process different types of personal data depending on how you use our services. The data we collect may include:

Identity details such as your name.
Contact details such as your address, email address, and telephone number.
Service details such as booking dates, property access instructions, service preferences, and notes relevant to the cleaning service.
Payment information necessary to process invoices, payments, and refunds, where applicable.
Communication records including emails, text messages, call notes, and enquiries.
Technical and usage data if you interact with our digital systems, such as IP address or device-related information, where applicable.
Customer history including previous bookings, complaints, feedback, and service outcomes.

We do not intentionally collect more information than is needed to provide and manage our services. If you provide data about another person, you must ensure you have permission to do so.

3. How We Use Your Data

We use personal data only where we have a valid reason to do so. Typical uses include:

Managing enquiries and providing quotes.
Scheduling, delivering, and managing oven cleaning services.
Processing payments and maintaining financial records.
Communicating about appointments, changes, and service updates.
Handling complaints, queries, and customer support.
Maintaining business records and service quality.
Meeting legal and regulatory obligations.
Preventing fraud, misuse, and security incidents.

We will only use your personal data for the purposes for which it was collected, unless we reasonably consider another purpose to be compatible with the original purpose and lawful under data protection rules.

4. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis to process personal data. Depending on the situation, Oven Cleaning Bromley may rely on one or more of the following lawful bases:

Contract

Contractual necessity applies when processing is needed to enter into or perform a contract with you. This includes taking bookings, delivering oven cleaning services, sending confirmations, and handling payments.

Legitimate Interests

We may process personal data where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. This may include responding to enquiries, improving services, keeping records, preventing misuse, and ensuring the proper running of the business.

Legal Obligation

Some processing is required to comply with legal obligations, such as accounting, tax, and record-keeping duties, or to respond to lawful requests from authorities.

Consent

In certain cases, we may rely on consent, for example where it is required for a specific communication or optional processing activity. If consent is used, you may withdraw it at any time, without affecting the lawfulness of processing carried out before withdrawal.

Vital Interests and Public Interest

These bases are unlikely to apply in most customer situations, but they may be used where necessary in exceptional circumstances.

5. Sharing Your Personal Data

We may share your personal data with trusted processors and service providers who help us operate our business and deliver services. These processors only act on our instructions and are required to handle data securely and lawfully.

Examples of processors may include:

Payment service providers.
Booking and scheduling software providers.
IT, cloud storage, and email service providers.
Accounting and record-management services.
Customer communication tools.

We may also share data where required by law, such as with tax authorities, regulators, law enforcement, or courts. We do not sell your personal data.

6. Data Retention

We keep personal data only for as long as necessary for the purpose it was collected, and in line with legal, accounting, and business requirements. Retention periods depend on the type of information and how it is used.

Customer booking and service records are normally kept for a period necessary to manage the business relationship and respond to any queries or disputes.
Financial and invoice records may be retained for the period required by tax and accounting law.
Communication records may be retained for a reasonable time to manage customer service and maintain evidence of instructions or agreements.
Where data is no longer needed, it will be securely deleted, anonymised, or archived in accordance with our retention practices.

We regularly review the information we hold to ensure it is not kept longer than necessary. If you would like more information about retention for a particular type of data, you may request it as part of your rights.

7. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, or disclosure. These measures may include access controls, secure systems, restricted permissions, and staff awareness of confidentiality. While we work hard to protect your data, no system can be guaranteed to be completely secure.

8. Your Rights

As a data subject under UK GDPR, you have several rights in relation to your personal data. These include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restrict processing – to limit how we use your data in certain situations.
Right to object – to object to processing based on legitimate interests or direct marketing, where applicable.
Right to data portability – to receive certain data in a structured, commonly used, machine-readable format.
Right to withdraw consent – where processing is based on consent, you can withdraw it at any time.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your data has been mishandled. We encourage you to raise any concerns with us first so we can try to resolve them promptly.

9. Children’s Data

Our services are not intended for children, and we do not knowingly collect personal data from children except where provided by an adult customer in connection with a service appointment or household arrangement. If we become aware that we have collected data from a child without appropriate authority, we will take steps to delete it where required.

10. International Transfers

Where personal data is transferred outside the UK, we will ensure appropriate safeguards are in place to protect the information in line with applicable data protection law. These safeguards may include adequacy regulations, contractual protections, or other lawful transfer mechanisms.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or operational practices. Any updated version will take effect when published or communicated appropriately. We encourage customers to review this policy periodically to stay informed about how we process personal data.

12. Summary of Our Commitments

In summary, Oven Cleaning Bromley only processes personal data where it is necessary, lawful, and proportionate. We collect limited information to deliver and manage oven cleaning services, retain it only as long as needed, share it only with trusted processors or where required by law, and respect your rights under data protection legislation. This policy applies to all Oven Cleaning Bromley customers in the area and reflects our commitment to privacy, transparency, and accountability.