Privacy Policy - Deep Cleaning Lewisham

This Privacy Policy explains how Deep Cleaning Lewisham collects, uses, stores, shares, and protects personal data in connection with our cleaning services. It applies to all Deep Cleaning Lewisham customers in the area, including current, former, and prospective customers, as well as individuals who contact us on behalf of a business, landlord, tenant, or household. We are committed to handling personal data in a lawful, fair, and transparent way in accordance with the UK GDPR and the Data Protection Act 2018.

1. Who We Are

Deep Cleaning Lewisham provides professional cleaning services for homes and commercial premises. For the purposes of data protection law, we act as a data controller when we determine why and how personal data is processed. This policy describes the personal data we may collect, the reasons we use it, and the rights available to individuals whose data we process.

2. Personal Data We Collect

We only collect personal data that is necessary for providing our services, managing bookings, handling payments, and meeting legal and business obligations. The types of information we may collect include:

Identity details such as name, title, and, where needed, company name.
Contact details such as address, email address, and telephone number.
Service information such as property access instructions, cleaning preferences, booking history, and service notes.
Payment information such as payment status, transaction references, and invoice details.
Communication records such as enquiries, complaints, feedback, and correspondence relating to service delivery.
Technical data that may be collected if you interact with digital systems used to manage appointments or requests, such as IP address and device information.

We do not intentionally collect special category data unless it is relevant, necessary, and lawfully provided by you. If such data is ever disclosed to us, we will process it only where an appropriate lawful basis applies and additional safeguards are in place.

3. How We Use Personal Data

We use personal data for the following purposes:

To provide, schedule, and manage cleaning services.
To communicate with customers about bookings, service updates, and enquiries.
To issue invoices, process payments, and maintain financial records.
To record service preferences, access needs, and instructions.
To respond to complaints, concerns, and requests for support.
To improve our services, internal operations, and customer experience.
To comply with legal, tax, accounting, and regulatory requirements.
To prevent fraud, misuse, and unauthorised access to our systems.

We will only use your personal data in ways that are compatible with the purpose for which it was collected, unless we reasonably consider that we need to use it for another related purpose and that purpose is lawful.

4. Lawful Basis for Processing

Under the UK GDPR, we must have a lawful basis for every processing activity. Deep Cleaning Lewisham relies on one or more of the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes taking bookings, providing cleaning services, handling payments, and managing customer accounts or service requests.

Legal Obligation

We process certain data to comply with our legal obligations, such as tax records, accounting requirements, insurance obligations, and other applicable laws.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided that those interests are not overridden by your rights and freedoms. Examples include service administration, record-keeping, quality control, customer support, and business security. When we rely on legitimate interests, we consider the impact on individuals and apply appropriate safeguards.

Consent

In limited situations, we may rely on your consent, for example where we use data for certain optional communications or where required by law. If we rely on consent, you may withdraw it at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before consent was withdrawn.

5. Data Sharing and Processors

We may share personal data with trusted third parties that help us run our business and deliver our services. These third parties act as processors when they process personal data on our behalf and under our instructions. We only work with processors that provide appropriate guarantees regarding security, confidentiality, and compliance with data protection law.

Examples of processors may include:

Payment service providers that handle card or electronic payments.
Booking, scheduling, or customer management systems.
IT support, hosting, and cloud storage providers.
Accountants or bookkeeping services supporting financial administration.
Communication platforms used for business email, messaging, or notifications.

We may also disclose personal data where required to do so by law, regulation, court order, or to protect our rights, property, staff, customers, or the public. We do not sell personal data.

6. International Transfers

Where any service provider processes data outside the United Kingdom, we will take appropriate steps to ensure that personal data remains protected. This may include relying on adequacy regulations, standard contractual clauses, or equivalent safeguards recognised under data protection law.

7. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including for legal, accounting, or reporting requirements. Retention periods vary depending on the type of information and why we hold it.

Customer and booking records are retained for the period needed to manage services and resolve queries.
Financial and invoice records are retained for the period required by tax and accounting law.
Complaint or correspondence records are retained for a reasonable period to support service administration and evidence.
Technical logs are retained only as long as needed for security, troubleshooting, or system maintenance.

When personal data is no longer needed, we will securely delete, anonymise, or archive it in line with our retention practices.

8. Security of Personal Data

We use appropriate technical and organisational measures to protect personal data from unauthorised access, loss, alteration, misuse, or disclosure. These measures may include access controls, secure storage, password protection, staff confidentiality obligations, and limiting access to those who need the information for legitimate business purposes. While no system can be guaranteed to be completely secure, we work to reduce risk and respond promptly to potential incidents.

9. Your Rights

Individuals whose personal data we process have rights under data protection law. Subject to applicable conditions and exemptions, you may have the right to:

Access your personal data and receive a copy of it.
Rectify inaccurate or incomplete information.
Erase your data in certain circumstances.
Restrict how we process your data in certain situations.
Object to processing based on legitimate interests or direct marketing.
Data portability where processing is based on consent or contract and carried out by automated means.
Withdraw consent where processing relies on consent.

You also have the right to lodge a complaint with the Information Commissioner's Office if you believe your data protection rights have been infringed. We encourage you to raise concerns with us first so that we can try to resolve them directly.

10. Children’s Data

Our services are generally intended for adults. We do not knowingly collect personal data from children unless it is necessary in the context of providing services requested by a parent, guardian, or authorised adult. Where children’s data is involved, we take care to process it lawfully and securely.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, service arrangements, or data processing practices. The latest version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their personal data is handled.

12. Summary of Our Commitment

Deep Cleaning Lewisham is committed to respecting privacy, protecting personal data, and using information responsibly. We collect only what we need, use it for clear and lawful purposes, retain it for appropriate periods, and share it only with trusted processors or where required by law. We also ensure that all Deep Cleaning Lewisham customers in the area can exercise their rights and expect fair, transparent, and secure data handling at every stage of our service relationship.