Privacy Policy - Crystal Palace Cleaners

This Privacy Policy explains how Crystal Palace Cleaners collects, uses, stores, shares, and protects personal data. It applies to all Crystal Palace Cleaners customers in the area, including current, former, and prospective customers who request services, receive quotes, make bookings, or otherwise interact with us.

We are committed to handling personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy is written to help you understand what information we collect, why we collect it, how long we keep it, and the rights you have in relation to your personal data.

1. Data We Collect

We collect only the information needed to provide cleaning services, manage customer relationships, and operate our business effectively. The types of personal data we may collect include:

Identity details such as your name and title.
Contact information such as your address, email address, and telephone number.
Service details such as property type, cleaning requirements, access notes, preferred service times, and instructions relevant to the cleaning service.
Billing information such as invoices, payment records, and transaction references.
Communication records including emails, messages, complaints, feedback, and notes relating to customer support.
Technical data such as basic website or device information if you submit an online enquiry, where applicable.
Marketing preferences where you have agreed to receive updates or promotional information.

We generally do not seek to collect special category data, such as health information, religious beliefs, or political opinions. If such information is ever provided to us accidentally or because it is necessary for a service arrangement, we will handle it with additional care and only where there is a lawful basis to do so.

2. How We Use Your Data

We use personal data for the following purposes:

To provide cleaning services and fulfil bookings.
To prepare quotes, invoices, receipts, and payment records.
To communicate with you about appointments, changes, or service queries.
To manage customer accounts and service history.
To respond to complaints, feedback, and support requests.
To maintain safety, security, and quality standards.
To comply with legal and regulatory obligations.
To improve our services, operations, and customer experience.
To send marketing communications where lawful and appropriate.

We only process personal data for specified, explicit, and legitimate purposes. We do not use your data in ways that are incompatible with those purposes.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each use of your personal data. Crystal Palace Cleaners relies on the following lawful bases:

Contract

We process data where it is necessary to enter into or perform a contract with you. This includes managing bookings, delivering cleaning services, and handling payment arrangements.

Legal Obligation

We process personal data where required to comply with legal duties, including accounting, tax, record-keeping, fraud prevention, and other regulatory requirements.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This may include service improvement, internal administration, security, business continuity, and responding to customer queries.

Consent

Where required, we will rely on your consent, particularly for direct marketing communications or certain optional processing activities. You may withdraw consent at any time, and this will not affect the lawfulness of processing carried out before withdrawal.

Vital Interests

In rare cases, we may process data to protect someone’s vital interests, for example in an emergency where safety is at risk.

4. Sharing Your Data and Processors

We may share personal data with trusted third parties, known as processors, who act on our instructions and help us deliver services. These may include:

Payment service providers who process card or online payments.
Accounting and bookkeeping providers who assist with financial records and tax compliance.
IT and cloud service providers who support data storage, email, and secure systems.
Scheduling or customer management software providers where used to manage bookings and service records.
Professional advisers such as legal or insurance advisers when necessary.
Regulators, law enforcement, or public authorities where disclosure is required by law.

We ensure that any processor handling personal data on our behalf is bound by appropriate contractual obligations to keep your data secure, confidential, and only used for the purposes we specify. We do not sell your personal data.

Where personal data is transferred outside the UK, we will take appropriate steps to ensure that it is protected in line with data protection law, such as using approved safeguards.

5. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including any legal, accounting, or reporting requirements. Retention periods may vary depending on the type of data and the reason we hold it.

Customer and service records are typically kept for the period necessary to deliver the service and manage any follow-up issues.
Financial and tax records are kept for the period required by law.
Communications and complaints may be retained for a reasonable period to resolve issues, improve service, or defend legal claims.
Marketing records are retained until you withdraw consent or opt out, or until they are no longer needed.

When data is no longer needed, we will securely delete, anonymise, or archive it as appropriate. Retention decisions are based on legal requirements, business needs, and the principle of data minimisation.

6. How We Protect Your Data

We use appropriate technical and organisational measures to protect your personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and restricted use of information on a need-to-know basis.

Although we take reasonable steps to safeguard information, no system can be guaranteed to be completely secure. Where a personal data breach occurs and we are required to do so, we will act in accordance with applicable law.

7. Your Rights

As a data subject under UK GDPR, you have a number of rights in relation to your personal data. Subject to legal conditions and exemptions, these include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete data.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restrict processing – to ask us to limit how we use your data in certain situations.
Right to data portability – to receive certain data in a structured, commonly used format where applicable.
Right to object – to object to processing based on legitimate interests or to direct marketing.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

You also have the right to raise concerns about how we handle your data. If you believe your rights have been infringed, you may lodge a complaint with the relevant data protection authority. In the UK, this is the Information Commissioner’s Office (ICO).

8. Children’s Data

Our services are intended for adult customers and property-related service arrangements. We do not knowingly collect personal data from children unless it is necessary and lawful to do so in a limited context. Where we become aware that data has been collected from a child without appropriate authority, we will take steps to delete or appropriately secure that information.

9. Marketing Preferences

Where permitted by law, we may send you service updates or promotional messages. You can choose not to receive marketing communications at any time. If you opt out, we will stop using your details for direct marketing, although we may still contact you for service, administrative, or legal reasons.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. Any revised version will apply from the date it is published. We encourage customers to review this policy periodically to remain informed about how we protect personal data.

11. Summary of Our Commitment

Crystal Palace Cleaners is committed to processing personal data lawfully, fairly, and transparently. We collect only the data we need, use it for clear and legitimate purposes, keep it no longer than necessary, and share it only with trusted processors or where required by law. We respect your rights and will take reasonable steps to ensure your information is handled securely and responsibly.

By using our services, requesting a quotation, or otherwise providing your personal data to us, you acknowledge that this Privacy Policy applies to you as a customer in the area served by Crystal Palace Cleaners.