Privacy Policy - Oven Cleaning Bayswater

This Privacy Policy explains how Oven Cleaning Bayswater collects, uses, stores, shares, and protects personal data. It applies to all Oven Cleaning Bayswater customers in the area, including prospective customers, current customers, and anyone who communicates with us about our services. We are committed to handling personal information in a lawful, fair, and transparent way, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our services, making an enquiry, or otherwise providing us with personal data, you acknowledge that we may process your information as described in this policy. We only collect and use personal data where we have a valid legal reason to do so and only for purposes that are necessary for providing our cleaning services, managing our business, and meeting legal obligations.

1. Information We Collect

We collect only the data that is needed to deliver our services, manage bookings, and maintain our records. The types of personal data we may collect include:

Identity details such as your name.
Contact details such as your phone number, email address, and service address.
Booking information such as service dates, service preferences, access instructions, and notes about the work requested.
Payment-related information such as billing details and transaction records. We do not store unnecessary payment card details where payment is handled by a secure payment processor.
Communication records including emails, messages, call notes, complaints, and feedback.
Service history including the type of oven cleaning carried out, appointment records, and any follow-up actions.
Technical data that may be collected when you interact with digital systems used to manage our business, such as device information or log data.

We generally do not collect special category personal data unless it is volunteered by you and is relevant to an enquiry or service issue. Where such information is not necessary, please do not provide it.

2. How We Use Your Personal Data

We use personal data for the following purposes:

To respond to enquiries and provide quotes.
To schedule, confirm, and complete cleaning appointments.
To manage customer accounts and records.
To process payments and issue invoices or receipts.
To communicate with you about your booking, service updates, or aftercare.
To deal with complaints, queries, and customer support requests.
To improve our services, training, and operational processes.
To meet legal, tax, accounting, and regulatory obligations.
To prevent fraud, misuse, or security incidents.

We only use your information for the specific and legitimate purposes set out above. We do not sell personal data, and we do not use it in ways that are incompatible with the reasons it was collected.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each type of processing activity. Depending on the circumstances, we rely on the following lawful bases:

Contract

We process your personal data where it is necessary to enter into or perform a contract with you. This includes handling bookings, providing oven cleaning services, sending confirmations, and managing payments.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include maintaining service records, improving operations, handling customer queries, and protecting our business from fraud or misuse.

Legal Obligation

We may process data where required to comply with legal obligations, such as tax, accounting, insurance, or record-keeping requirements.

Consent

In limited cases, we may rely on your consent, for example for optional communications or certain forms of marketing. Where consent is used, you can withdraw it at any time.

We will always seek to identify the most appropriate lawful basis before processing your data and will only process information where permitted by law.

4. How We Share Personal Data

We may share personal data with trusted third parties when necessary to run our business and provide services. These parties act as processors or independent controllers depending on the service they provide. We ensure that appropriate data protection safeguards are in place before sharing information.

Processors and service providers may include:

Booking and administrative systems used to manage appointments and customer records.
Payment processors that securely handle card or electronic payments.
Accounting and bookkeeping providers that assist with financial administration and tax compliance.
Communication providers used for email, messaging, or customer contact management.
IT and cloud storage providers that support data hosting, security, and business continuity.

We may also disclose data if required by law, court order, or request from a lawful authority. If a business transfer, merger, or restructuring occurs, personal data may be transferred as part of that transaction, subject to suitable protections.

5. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. Retention periods may vary depending on the type of record and the reason it is held.

Customer booking and service records are usually retained for a reasonable period after service completion to handle follow-up queries, disputes, and service history.
Financial and tax records are retained for the period required by law.
Communication records may be retained for as long as needed to manage customer service, complaints, or legal claims.
Consent records may be retained to demonstrate compliance with data protection obligations.

When personal data is no longer needed, we will securely delete, anonymise, or archive it in accordance with our retention practices. This helps ensure that data is not kept longer than necessary.

6. Security of Your Data

We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures may include restricted access controls, secure storage, staff awareness practices, and data minimisation.

While we take reasonable steps to protect information, no method of transmission or storage is completely secure. In the unlikely event of a personal data breach, we will respond in accordance with our legal obligations and take appropriate steps to minimise any risk.

7. Your Rights

As a data subject under UK data protection law, you have a number of rights in relation to your personal data. These rights may be subject to conditions or exemptions depending on the circumstances.

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete information.
Right to erasure – in certain cases, you can ask us to delete your personal data.
Right to restrict processing – you can request that we limit how we use your data in certain situations.
Right to object – you can object to processing based on legitimate interests, including some types of direct marketing.
Right to data portability – you may request that certain data be provided to you or another organisation in a portable format.
Right to withdraw consent – where processing is based on consent, you can withdraw it at any time.

Exercising your rights is free of charge in most cases, although we may charge a reasonable fee or refuse repeated or unfounded requests where permitted by law. We may need to verify your identity before acting on a request.

8. Marketing and Communications

If we send you optional marketing messages, we will only do so where the law allows it. You can opt out of marketing at any time. Even if you opt out, we may still send important service-related messages, such as booking confirmations, invoice information, or operational updates connected to a service you have requested.

9. Third-Party Processors and International Transfers

Where we use third-party processors, they are required to protect your data and to act only on our instructions unless they are independently responsible for their own processing. If any personal data is transferred outside the UK, we will ensure appropriate safeguards are in place, such as adequacy regulations, standard contractual clauses, or equivalent protections where required.

We review the providers we use to help make sure they uphold data protection standards appropriate to the nature of the information they process.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or operational practices. Any updates will take effect when published. We encourage customers to review this policy periodically to stay informed about how personal data is handled.

11. Summary of Our Approach

Oven Cleaning Bayswater is committed to responsible data handling. We collect only what is needed, use it for clear and lawful purposes, retain it for appropriate periods, and protect it through suitable safeguards. We also respect your rights and aim to make our data practices transparent and fair for every customer in the area.