Privacy Policy - Oven Cleaning Canarywharf

This Privacy Policy explains how Oven Cleaning Canarywharf collects, uses, stores, shares, and protects personal data relating to its customers and prospective customers. It applies to all Oven Cleaning Canarywharf customers in area, including anyone who requests a quotation, books a service, receives a service, or communicates with us in connection with oven cleaning, appliance cleaning, or related domestic cleaning services.

We are committed to handling personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We aim to be clear, fair, and transparent about our data practices, and to respect the rights of every individual whose information we process.

1. Who We Are

Oven Cleaning Canarywharf provides professional oven cleaning services for residential and related customers in the Canary Wharf area. In this policy, references to “we,” “us,” and “our” mean Oven Cleaning Canarywharf. References to “you” mean the individual customer, prospective customer, or other person whose personal data we process.

For the purposes of data protection law, we are the data controller for the personal data we collect and use in the course of our business activities.

2. Information We Collect

We only collect personal data that is relevant and necessary for providing our services, managing our business, and meeting our legal obligations. The types of data we may collect include:

Identity details such as your name and title.
Contact details such as telephone number and email address.
Address information relating to the service location and billing or correspondence address.
Booking and service details including appointment dates, service requests, notes about access, and preferences.
Payment information such as transaction details, payment status, and limited billing records.
Communication records including emails, messages, complaints, queries, and feedback.
Technical information if you contact us through digital channels, such as basic device or message metadata.

We generally do not seek to collect special category data. However, if you provide information that may reveal health or access needs, we will process it only where necessary and with appropriate safeguards.

3. How We Use Personal Data

We use personal data to operate effectively and to provide a reliable service. This includes:

responding to enquiries and providing quotations;
arranging and managing bookings;
delivering oven cleaning and related services;
confirming appointments and service updates;
handling payments, invoices, and accounting records;
recording service history and customer preferences;
dealing with complaints, claims, or disputes;
meeting legal, tax, and regulatory requirements;
protecting our business against fraud or misuse;
improving our services, processes, and customer experience.

We will always use personal data in a way that is lawful, fair, and transparent. We do not sell personal data.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each type of processing. Depending on the circumstances, we rely on the following lawful bases:

Contract

We process personal data where it is necessary to perform a contract with you or to take steps at your request before entering into a contract. This includes handling enquiries, arranging visits, and delivering the cleaning service.

Legal Obligation

We may process personal data where required to comply with legal obligations, such as tax record keeping, accounting duties, or responding to lawful requests from authorities.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests and where your rights and freedoms do not override those interests. This may include maintaining customer records, preventing fraud, improving services, and managing internal administration.

Consent

In limited situations, we may rely on your consent, for example if we need to use certain optional information or contact you for specific purposes that require consent. Where we rely on consent, you may withdraw it at any time.

5. Sharing Your Information and Processors

We may share personal data with trusted third parties where necessary for our business operations. These parties act either as processors or, in some cases, as independent controllers. We only share information where there is a valid reason to do so and where appropriate safeguards are in place.

Examples of processors or service providers may include:

IT and cloud service providers used for email, storage, scheduling, or data backup;
payment service providers used to process transactions;
accounting and bookkeeping providers supporting financial administration;
customer management tools used to manage bookings and service records;
professional advisers such as accountants or legal advisers where needed;
public authorities where disclosure is required by law.

Where a processor handles personal data on our behalf, they are required to process it only in accordance with our instructions, to protect it appropriately, and to keep it confidential.

6. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including any legal, accounting, or reporting requirements. The retention period depends on the type of information and why it is held.

In general:

enquiry and quotation records may be kept for a limited period if no booking follows;
customer service and booking records may be retained for the duration of the service relationship and for a reasonable period afterwards;
financial and tax records are typically kept for the period required by law;
complaint or dispute records may be retained until the matter is resolved and for an appropriate further period;
data we no longer need is securely deleted or anonymised.

Where possible, we apply data minimisation and keep only the information that is necessary. Retention decisions are reviewed periodically to ensure we do not keep data longer than required.

7. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, or disclosure. These measures may include access restrictions, secure storage, password protection, and limited data sharing with trusted providers.

While no system can be guaranteed completely secure, we work to protect your information using safeguards that are appropriate to the nature of the data and the risks involved.

8. Your Rights

As a data subject, you have rights under UK data protection law. Subject to legal limits, these include the right to:

access the personal data we hold about you;
rectification of inaccurate or incomplete information;
erasure of your data in certain circumstances;
restrict how we process your data in certain situations;
object to processing based on legitimate interests or direct marketing;
data portability where processing is based on consent or contract and carried out by automated means;
withdraw consent where we rely on your consent;
lodge a complaint with the Information Commissioner’s Office (ICO) if you believe your rights have been infringed.

We may need to verify your identity before responding to a rights request. We will respond within the legal time limits and provide our reasoning if we are unable to comply fully with a request.

9. Automated Decision-Making

We do not generally use automated decision-making or profiling that produces legal or similarly significant effects. If this changes, we will update this policy and ensure appropriate safeguards are in place.

10. International Transfers

Where any service provider processes data outside the UK, we will take steps to ensure that appropriate safeguards are in place and that your data remains protected in line with applicable law.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. The latest version will apply to your use of our services from the date it is published or otherwise made available.

We encourage you to review this policy periodically so that you remain informed about how we handle personal data.

12. Summary of Our Approach

Oven Cleaning Canarywharf is committed to respecting privacy and using personal data responsibly. We collect only what we need, use it for clear and lawful purposes, retain it for no longer than necessary, and share it only with trusted processors or where the law requires it. We also recognise and support your rights over your personal data.

Last updated: This policy is intended to be current and GDPR-compliant for customers in the Canary Wharf area.