Privacy Policy - Cleaner Crystalpalace

This Privacy Policy explains how Cleaner Crystalpalace collects, uses, stores, shares, and protects personal data in connection with its cleaning services. It applies to all Cleaner Crystalpalace customers in the area, including individual household customers, landlords, tenants, and business clients who use our services. We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who we are and what this policy covers

Cleaner Crystalpalace provides cleaning services to customers in the local area. In the course of delivering these services, we may collect and process personal information relating to customers, service recipients, building managers, and other individuals whose details are necessary for booking, delivering, and managing our work. This policy explains what data we collect, why we collect it, the legal grounds on which we rely, how long we keep it, who may process it on our behalf, and what rights you have over your personal data.

2. Personal data we collect

We only collect personal data that is necessary for the operation of our services and the proper administration of our relationship with you. The types of information we may collect include:

Identity details such as your name and, where relevant, the name of an authorised representative.
Contact details including your postal address, email address, and phone number.
Service information such as booking details, cleaning preferences, property access instructions, special requests, and service history.
Payment information such as invoice records, payment status, and transaction references.
Communication records including emails, messages, feedback, complaints, and correspondence relating to our services.
Technical information if you interact with us online, such as device details, browser information, and limited usage data generated through our systems.

We do not seek to collect special category data unless it is strictly necessary and you have provided it voluntarily, or unless another lawful basis applies. Where such data is involved, we apply enhanced safeguards.

3. How we collect data

Cleaner Crystalpalace may collect personal data directly from you when you request a quote, make a booking, ask a question, provide instructions, or complete payment. We may also receive information from landlords, letting agents, property managers, or other authorised persons who arrange services on your behalf. In some cases, we may collect data from service partners or processors that help us manage scheduling, accounting, or communications.

4. Why we use your data

We use personal data for the following purposes:

To register and manage customer bookings.
To provide cleaning services at the correct time and location.
To process payments, issue invoices, and maintain financial records.
To communicate with you about appointments, access, service changes, and customer support matters.
To respond to complaints, service queries, or requests.
To improve service quality, manage our operations, and maintain internal records.
To comply with legal, tax, accounting, and regulatory obligations.
To protect our business, customers, staff, and property from fraud, misuse, or security risks.

We do not use personal data for purposes that are incompatible with those described above without informing you and, where required, obtaining a further lawful basis.

5. Lawful basis for processing

Under UK GDPR, we must have a lawful basis to process personal data. Cleaner Crystalpalace relies on the following lawful bases as appropriate:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes taking bookings, confirming appointments, delivering cleaning services, processing payments, and dealing with service-related communication.

Legal obligation

We process certain information to comply with legal duties, including tax, accounting, record-keeping, and other regulatory requirements.

Legitimate interests

We may process personal data where it is necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms. Examples include managing customer relationships, preventing fraud, maintaining security, improving services, and keeping internal business records.

Consent

In limited cases, we may rely on your consent, for example where this is required for optional communications or certain uses of information not covered by another lawful basis. Where we rely on consent, you may withdraw it at any time.

6. Sharing data and processors

We may share personal data with carefully selected third parties who help us operate our services. These parties act as processors when they process data on our behalf, and they are only permitted to use it in accordance with our instructions and applicable law. Processors may include:

Booking and scheduling system providers.
Payment service providers and invoicing tools.
Accounting, bookkeeping, and payroll software providers.
IT support, cloud storage, and data backup services.
Communication providers used for email, messaging, or customer notifications.

We may also disclose data to professional advisers, insurers, or public authorities where necessary and lawful. If a third party processes your data outside our direct control, we seek appropriate contractual safeguards and data protection measures. We do not sell personal data.

7. International transfers

If any processor stores or accesses data outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect your information. These may include adequacy regulations, standard contractual clauses, or equivalent legal mechanisms recognised under data protection law.

8. Data retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including service delivery, accounting, dispute resolution, and legal compliance. Retention periods depend on the type of information and the reason it is held. In general:

Customer booking and service records are kept for a period necessary to manage the relationship and address queries.
Financial and tax records are retained for the period required by law.
Communication records are kept for as long as needed to deal with service matters and then securely deleted or anonymised.
Information held for legal claims or complaints may be retained for longer where necessary.

When personal data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you. Our retention approach is designed to follow the principle of storage limitation, meaning data is not kept indefinitely without purpose.

9. Data security

Cleaner Crystalpalace takes appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These measures may include access controls, password protection, secure storage, limited staff access, and procedural safeguards. While we work hard to maintain strong security, no system can be guaranteed completely secure.

10. Your rights

Under data protection law, you have a number of rights in relation to your personal data. Subject to legal limits and exemptions, these rights include:

Right of access - to request a copy of the personal data we hold about you.
Right to rectification - to ask us to correct inaccurate or incomplete data.
Right to erasure - to request deletion of your data in certain circumstances.
Right to restriction - to ask us to limit processing in some situations.
Right to object - to object to processing based on legitimate interests or direct marketing.
Right to data portability - to receive certain data in a structured, commonly used format where applicable.
Right to withdraw consent - where processing is based on consent, you may withdraw it at any time.

To exercise your rights, you may make a request to us using the usual channels through which you communicate with Cleaner Crystalpalace. We may need to verify your identity before responding. We aim to deal with requests promptly and within the time limits set by law.

11. Complaints

If you have concerns about how we handle your personal data, you have the right to raise the matter with the relevant data protection authority. You may also bring the issue to our attention so that we can review and address it. We encourage customers to contact us first so we have the opportunity to resolve any concerns quickly and fairly.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or operational practices. Any updated version will apply from the date it is published or otherwise communicated. We recommend reviewing this policy periodically so that you remain informed about how we handle your data.

13. Summary of our commitments

Cleaner Crystalpalace is committed to processing personal data lawfully, transparently, and securely. We collect only what we need, use it for clear and legitimate purposes, keep it only for as long as necessary, and share it only with trusted processors or where required by law. We also recognise the importance of your rights and will respect them in line with applicable data protection legislation. This policy applies to all Cleaner Crystalpalace customers in area, and we aim to ensure that every customer’s information is handled with care, fairness, and accountability.