Privacy Policy - Enfield Cleaner

Effective date: This Privacy Policy applies to all Enfield Cleaner customers in area and explains how we collect, use, store, share, and protect personal data in connection with our cleaning services.

1. Introduction

At Enfield Cleaner, we are committed to handling personal data in a lawful, fair, and transparent manner. This Privacy Policy explains what information we collect, why we collect it, how long we keep it, who we share it with, and what rights individuals have under the UK GDPR and the Data Protection Act 2018. We only process personal data that is necessary to provide our services, manage our business, and comply with legal obligations.

This policy applies to all customers in area who use our cleaning services, whether booked as one-off work or recurring appointments. It also applies to enquiries, quotations, and related service communications.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity data: name, title, and any details needed to identify you as a customer or authorised contact.
Contact data: address, email address, telephone number, and service location details.
Booking and service data: appointment history, service preferences, instructions, property access notes, and records of work completed.
Payment data: payment confirmation, billing records, and transaction references. We do not intentionally store full card details where payment is processed through secure third-party providers.
Communication data: messages, feedback, complaint details, and any correspondence relating to quotes, bookings, or service delivery.
Technical data: limited device or usage information if you interact with digital systems we use for scheduling, invoicing, or communication.
Special category data: we do not usually collect special category data. If such data is ever provided to us incidentally, for example in access instructions or health-related notes, we will only process it where permitted by law and where necessary for service delivery or safety.

We collect data directly from you when you make an enquiry, request a quotation, book a service, provide feedback, or communicate with us. We may also receive information from payment processors, scheduling systems, or third parties who help administer our services.

3. How We Use Personal Data

We use personal data for the following purposes:

to respond to enquiries and provide quotations;
to manage bookings, rescheduling, and cancellations;
to deliver cleaning services at the correct location and time;
to communicate service updates and confirm appointments;
to process payments and maintain business records;
to manage customer support, complaints, and service quality;
to comply with legal, tax, accounting, and regulatory obligations;
to protect our business, staff, customers, and property from misuse or fraud;
to improve service standards and operational efficiency.

We only use personal data where we have a valid reason to do so and we do not use it in ways that are incompatible with the original purpose for which it was collected.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each type of processing. Enfield Cleaner relies on the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes handling bookings, confirming appointments, carrying out cleaning work, and processing payments.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided these interests do not override your rights and freedoms. Examples include maintaining records, improving service delivery, preventing fraud, and managing customer communications. Where we rely on legitimate interests, we consider the impact on individuals and ensure that appropriate safeguards are in place.

Legal Obligation

We may process and retain certain information to comply with tax law, accounting rules, insurance requirements, and other legal duties. This can include invoices, payment records, and service-related documentation.

Consent

In limited cases, we may rely on your consent, for example where we use optional communications or process information that is not strictly necessary for the contract. Where consent is used, you may withdraw it at any time, and this will not affect the lawfulness of processing carried out before withdrawal.

5. Retention of Personal Data

We keep personal data only for as long as necessary to fulfil the purposes described in this policy, unless a longer retention period is required by law. Retention periods depend on the type of information and why it is held.

Customer and booking records: kept for the duration of the service relationship and for a reasonable period afterwards to manage follow-up issues, disputes, or repeat bookings.
Financial and tax records: retained for the period required by law, typically several years.
Complaint and communication records: retained for as long as needed to resolve the matter and maintain evidence of service handling.
Security or access-related notes: kept only as long as necessary for the relevant service and then deleted or anonymised where appropriate.

When personal data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you.

6. Sharing Personal Data and Processors

We do not sell personal data. However, we may share information with trusted third parties acting as processors or independent controllers where necessary to provide our services or comply with legal requirements.

Examples of processors may include:

Payment processors: to handle secure payment transactions.
Booking and scheduling providers: to manage appointment systems and service coordination.
Accounting and invoicing providers: to support financial administration and legal recordkeeping.
IT and cloud service providers: to host data, maintain systems, and support secure storage.
Customer communication tools: to send appointment confirmations or service-related messages.

We only use processors that provide sufficient guarantees about data protection and confidentiality. Where required, we put written contracts in place to ensure they process data only on our instructions and protect it appropriately.

We may also disclose personal data to professional advisers, insurers, regulators, law enforcement, or other authorities where necessary to comply with law or protect our legitimate interests.

7. Data Security

We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These measures may include access controls, secure systems, staff confidentiality obligations, and data minimisation practices. While no system can be guaranteed to be completely secure, we take appropriate steps to reduce risk and protect the information entrusted to us.

8. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may apply depending on the circumstances and the lawful basis for processing:

Right of access: you can request a copy of the personal data we hold about you.
Right to rectification: you can ask us to correct inaccurate or incomplete information.
Right to erasure: you may request deletion of your data in certain circumstances.
Right to restriction: you can ask us to limit how we use your data in certain cases.
Right to object: you can object to processing based on legitimate interests or direct marketing, where applicable.
Right to data portability: you may request a copy of certain data in a structured, commonly used format where technically feasible.
Right to withdraw consent: where processing is based on consent, you can withdraw it at any time.

If you believe your rights have been infringed, you also have the right to lodge a complaint with the relevant data protection authority. We encourage customers to raise concerns with us first so we can try to resolve them promptly and fairly.

9. Children’s Data

Our services are intended for adults. We do not knowingly collect personal data from children unless it is necessary in an exceptional service context and is provided by an adult with authority to do so. Where children’s data is processed, it will be handled with particular care and only where lawful.

10. International Transfers

If any processor or service provider stores or accesses data outside the UK, we will ensure appropriate safeguards are in place in line with applicable data protection law. These safeguards may include adequacy regulations, standard contractual clauses, or other legally recognised mechanisms designed to protect personal data.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data processing practices. The most current version will apply to all Enfield Cleaner customers in area. We encourage you to review this policy periodically so you remain informed about how we protect your personal data.

12. Final Statement

We are committed to processing personal data responsibly, transparently, and securely. By using our services, you acknowledge that your information may be handled in accordance with this Privacy Policy and applicable data protection laws. If we need to process your data for a new purpose, we will only do so where permitted by law and, where necessary, after informing you appropriately.