Cleaner Paddington Privacy Policy

This Privacy Policy explains how Cleaner Paddington collects, uses, stores, and protects personal data relating to customers and prospective customers within the Cleaner Paddington service area. It also describes your rights under the General Data Protection Regulation and how you can exercise them.

By using Cleaner Paddington services, requesting a quote, or otherwise interacting with us, you acknowledge that you have read and understood this Privacy Policy.

Scope of this Privacy Policy

This Privacy Policy applies to all Cleaner Paddington customers, former customers, and prospective customers located in the Cleaner Paddington service area. It covers personal data collected through our website, in person, by post, and through any other communication channels used to provide or market our services.

Data Controller

Cleaner Paddington is the data controller responsible for determining the purposes and means of processing your personal data. All references to we, us, or our in this Privacy Policy refer to Cleaner Paddington acting in its capacity as data controller.

Categories of Personal Data We Collect

We may collect and process the following categories of personal data, depending on how you engage with us and the services you request:

Identification and contact details, such as your name, postal address, service address, billing address, and other basic contact information you provide to us.

Communication details, such as your communication preferences, records of correspondence, service queries, complaints, and feedback that you send to us or that we generate when we interact with you.

Service and booking information, such as information about the cleaning services you request, dates and times of appointments, access instructions for the property, and notes required to provide the service safely and effectively.

Billing and transaction data, such as invoice details, amounts due, payment status, and limited payment-related information needed for accounting and reconciliation. We do not store full card numbers or full bank details when payments are processed through secure third-party payment processors.

Technical and usage data, such as information generated when you visit our website, including pages visited, device and browser type, and general diagnostic data. This information is typically collected using cookies or similar technologies, where permitted by law and subject to your choices.

Purposes and Lawful Bases for Processing

We only process your personal data where we have a lawful basis under the General Data Protection Regulation. Depending on the specific processing activity, we rely on one or more of the following lawful bases:

Performance of a contract. We process your identification, contact, and service information to provide cleaning services, manage bookings and appointments, issue invoices, collect payments, and respond to queries in connection with a contract for services or to take steps at your request prior to entering into a contract.

Compliance with legal obligations. We process certain billing and transaction data to comply with tax, accounting, and other regulatory obligations that require us to retain records of services and payments.

Legitimate interests. We may process your data where it is necessary for our legitimate business interests and where your interests and fundamental rights do not override those interests. This includes managing and improving our services, maintaining business records, preventing and detecting fraud or misuse of our services, training staff, and establishing or defending legal claims.

Consent. Where required by law, we rely on your consent to process your data for specific purposes, such as certain types of direct marketing or analytics that are not strictly necessary for the operation of our website or services. You can withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

How We Use Your Personal Data

We use personal data for the following purposes:

To provide, schedule, and manage cleaning services, including processing bookings, sending confirmations and reminders, and performing services at your property.

To communicate with you regarding your enquiries, bookings, service updates, changes to terms, and this Privacy Policy.

To manage billing, issue invoices, process payments through third-party payment processors, and maintain accurate financial and service records.

To address complaints, handle disputes, respond to legal requests, and protect our rights and the rights of others.

To manage and improve our business operations, for example by analysing aggregated service data, evaluating customer satisfaction, and training staff.

To send you marketing communications about Cleaner Paddington services where we are permitted to do so by law and where you have not opted out of receiving such communications.

Data Sharing and Processors

We do not sell your personal data. We may share personal data with the following categories of recipients, strictly for the purposes outlined above and only where appropriate safeguards are in place:

Service providers acting as data processors. These may include information technology providers, hosting providers, booking and customer management platforms, payment processors, accountants, and other administrative or professional service providers. These processors are only permitted to process your personal data in accordance with our instructions and are required to implement appropriate technical and organisational measures to protect your data.

Professional advisers, such as lawyers or auditors, where necessary to obtain professional advice, manage legal risks, or comply with regulatory obligations.

Public authorities and regulators, where required to comply with legal obligations, court orders, or lawful requests from governmental bodies.

In the event of a business reorganisation, transfer, or sale of all or part of Cleaner Paddington, personal data may be transferred to the new owner or successor entity, subject to continued protection in accordance with this Privacy Policy and applicable data protection laws.

International Data Transfers

Where any of our processors or service providers transfer or store your personal data outside the United Kingdom or the European Economic Area, we ensure that appropriate safeguards are in place. These safeguards may include the use of standard contractual clauses approved by the relevant data protection authorities or other legally recognised transfer mechanisms that ensure an adequate level of protection for your personal data.

Data Retention

We retain personal data for as long as necessary to fulfil the purposes for which it was collected, including satisfying any legal, accounting, or reporting requirements.

In general, we retain: basic customer and contract data for as long as you remain a customer and for a reasonable period thereafter to handle queries or disputes; billing and transaction records for the period required by tax and accounting laws; and communication records for as long as needed to manage our relationship and comply with legal obligations or legitimate interests such as dealing with complaints or legal claims.

When personal data is no longer required, we will securely delete or anonymise it so that it can no longer be associated with you.

Your Data Protection Rights

Under the General Data Protection Regulation, you have a number of rights in relation to your personal data, subject to certain conditions and limitations.

Right of access. You have the right to request confirmation as to whether we process your personal data and to obtain a copy of that data, along with information about how we process it.

Right to rectification. You have the right to request that we correct or complete any inaccurate or incomplete personal data we hold about you.

Right to erasure. In certain circumstances, you may request that we delete your personal data, for example where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent and there is no other legal basis for processing.

Right to restriction of processing. You may request that we restrict the processing of your personal data in specific situations, for example while we verify the accuracy of data you believe is inaccurate.

Right to data portability. In some cases, you have the right to receive personal data you have provided to us in a structured, commonly used, and machine readable format and to request that we transmit that data to another controller where technically feasible.

Right to object. You may object to processing based on our legitimate interests, including profiling, and we will cease processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or unless the processing is required for the establishment, exercise, or defence of legal claims. You also have the right to object at any time to processing of your personal data for direct marketing.

Right not to be subject to automated decision making. Cleaner Paddington does not make decisions about you based solely on automated processing that produce legal effects or similarly significant effects.

Exercising Your Rights

You can exercise your rights or raise questions about how we handle your personal data by contacting Cleaner Paddington using the contact details made available through our usual communication channels. When you make a request, we may need to verify your identity before responding. We aim to respond without undue delay and in any event within the time limits set by applicable data protection laws.

You also have the right to lodge a complaint with the data protection supervisory authority in your country of residence, place of work, or place of the alleged infringement if you believe your data protection rights have been violated.

Security of Your Personal Data

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These measures include access controls, secure storage, and limiting access to personal data to staff and processors who have a business need to know and are subject to confidentiality obligations.

Updates to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our processing activities, legal obligations, or best practices. Any updated version will be made available through our usual communication channels and will take effect from the date of publication. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.