Privacy Policy

Cleaner Crystal Palace Privacy Policy

This Privacy Policy explains how Cleaner Crystal Palace collects, uses, stores and protects personal data relating to its customers in the Cleaner Crystal Palace service area. It also explains your rights under applicable data protection laws, including the UK General Data Protection Regulation and the Data Protection Act 2018. By engaging Cleaner Crystal Palace for cleaning services, you acknowledge that you have read and understood this Privacy Policy.

Scope of this Privacy Policy

This Privacy Policy applies to all Cleaner Crystal Palace customers located in the Cleaner Crystal Palace service area who enquire about, purchase, or use our cleaning services, whether as a one-off or on a recurring basis. It covers personal data collected through our website, by phone, in person, in writing and through any other communication channels we use to provide our services.

Personal Data We Collect

Cleaner Crystal Palace collects and processes different types of personal data depending on how you interact with us and what services you request. This may include:

Identification and contact details, such as your name, home or business address, billing address, and any other address where services are provided. We also collect contact details that you choose to share with us to communicate about bookings, such as email address or other communication identifiers.

Service and booking information, such as details of the cleaning services requested, dates and times of appointments, access instructions, property type and size, special cleaning requests, and records of changes or cancellations.

Payment and billing information, such as payment status, amounts charged, refunds issued, and billing history. We do not store full payment card details if you pay using a card; those details are processed and stored by our payment service provider.

Communication records, such as messages and correspondence relating to enquiries, quotes, complaints, feedback, or other service-related discussions.

Operational and site information, such as notes recorded by our staff to perform services safely and effectively, including details about cleaning materials, health and safety considerations, or access arrangements.

Purposes and Lawful Bases for Processing

We only process personal data where we have a lawful basis under data protection law. The main purposes and lawful bases are:

To provide cleaning services. We process your personal data to create and manage bookings, deliver services at your property, issue invoices, and manage payments. The lawful basis is performance of a contract or taking steps at your request before entering into a contract.

To manage customer relationships. We use your information to respond to enquiries, handle complaints, manage changes to services, and provide customer support. The lawful basis is performance of a contract and, for some communications, our legitimate interests in operating and improving our business.

To send service-related communications. We may contact you about upcoming appointments, service updates, or important changes to our terms or policies. The lawful basis is performance of a contract and our legitimate interests in keeping you informed about services you use.

To comply with legal obligations. We may process and retain some information to comply with tax, accounting, and other legal requirements. The lawful basis is compliance with legal obligations.

To protect our business and prevent misuse. We may process personal data to prevent fraud, misuse of our services, or to protect our rights. The lawful basis is our legitimate interests in safeguarding our operations and complying with applicable laws.

Marketing communications. If we engage in direct marketing to existing customers, we do so on the basis of our legitimate interests in promoting our services, and we respect your right to object at any time. We will not send electronic marketing communications where consent is required unless you have given valid consent.

Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, to meet legal and regulatory requirements, and to resolve disputes or enforce our agreements.

In general, we retain customer account and booking information for a period that allows us to manage ongoing or repeat services and to respond to any questions about past work. Financial and invoicing records are typically kept for the period required by tax and accounting laws. Communication records may be retained for an appropriate time to address queries, complaints or claims.

When personal data is no longer needed for the purposes for which it was collected, and we have no legal or regulatory requirement to keep it, we securely delete or anonymise it.

Data Processors and Third Parties

Cleaner Crystal Palace may use trusted third parties to help us provide our services and manage our business. These third parties act as data processors on our behalf and only process personal data in accordance with our instructions and applicable data protection laws.

Examples of such processors may include payment service providers that process customer payments securely, accounting and bookkeeping service providers that help us maintain accurate financial records, and IT and cloud service providers that host our systems or provide tools used to manage bookings and communications.

Where we use processors, we ensure that appropriate data processing agreements are in place to protect your personal data, including requirements for security, confidentiality, and data deletion at the end of the service relationship.

We may also share personal data with professional advisers, such as accountants or legal advisers, where necessary for legitimate business purposes or to comply with legal obligations. In some circumstances, we may be required to share personal data with public authorities or law enforcement if required by law or to protect our legal rights.

We do not sell your personal data and we do not share it with third parties for their independent marketing purposes.

International Transfers

Where any of our service providers or systems are located outside the United Kingdom, or where data is stored or accessed from another country, we take steps to ensure that appropriate safeguards are in place. These safeguards may include using countries that have been recognised as providing an adequate level of protection or using standard contractual clauses or equivalent mechanisms approved by relevant data protection authorities.

Data Security

Cleaner Crystal Palace takes the security of your personal data seriously. We implement appropriate technical and organisational measures intended to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.

These measures may include access controls so that only those who need to know your information for work purposes can access it, secure storage and secure disposal or anonymisation when data is no longer required, and the use of reputable, security-conscious service providers.

While we take reasonable steps to protect your personal data, no system can be guaranteed to be completely secure. We therefore encourage you to take care when transmitting personal information and to notify us if you suspect any misuse of your data in connection with our services.

Your Data Protection Rights

As a customer of Cleaner Crystal Palace in our service area, you have a number of rights under data protection law in relation to your personal data. These rights may be subject to legal conditions and exemptions.

Right of access. You have the right to request confirmation of whether we process your personal data and, if we do, to request a copy of that data, together with certain information about how we use it.

Right to rectification. You have the right to request that inaccurate or incomplete personal data about you is corrected or updated.

Right to erasure. In certain circumstances, you have the right to request that we delete your personal data. This right is not absolute and may not apply where we need the data to comply with legal obligations or to establish, exercise, or defend legal claims.

Right to restriction. You may have the right to request that we restrict the processing of your personal data in certain situations, for example while we verify its accuracy or consider an objection you have raised.

Right to data portability. In some cases, you have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and to transmit it to another controller where technically feasible.

Right to object. You have the right to object to certain types of processing, including processing based on our legitimate interests and any direct marketing. If you object to direct marketing, we will stop processing your personal data for that purpose.

Right to withdraw consent. Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe that your data protection rights have been infringed.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, how we process personal data, or changes in law. Any updates will be made available through our usual communication channels. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.