Privacy Policy - Oven Cleaning Chiswick

This Privacy Policy explains how Oven Cleaning Chiswick collects, uses, stores, shares, and protects personal data. It applies to all Oven Cleaning Chiswick customers in the area, including prospective customers, current customers, and anyone who contacts us for a quotation, service booking, or general enquiry. We are committed to handling personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

For the purposes of data protection law, Oven Cleaning Chiswick acts as the data controller for the personal information collected in connection with our services. This means we decide how and why your personal data is used. We only process personal data where we have a lawful basis to do so and only for purposes that are relevant to providing our services and managing our business responsibly.

2. Personal Data We Collect

We may collect and process the following types of personal information:

Identity data such as your name.
Contact data such as your phone number, email address, and service address.
Booking data such as preferred appointment times, service details, and notes relating to your request.
Transaction data such as records of payments made, invoices, and payment status.
Communication data such as messages, feedback, complaints, and service-related correspondence.
Technical data that may be collected automatically if you interact with online systems, such as device type, browser details, and usage information.
Service history such as previous cleaning appointments, preferences, and outcomes of completed services.

We do not intentionally collect special category data unless it is strictly necessary and you choose to provide it. If such information is ever required, we will ensure that an appropriate lawful basis and additional safeguards are in place.

3. How We Use Your Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To manage bookings and deliver oven cleaning services.
To communicate with customers about appointments, service updates, or follow-up matters.
To issue invoices, record payments, and manage accounting records.
To handle complaints, service issues, and customer support requests.
To maintain internal records and improve service quality.
To comply with legal and regulatory obligations.
To prevent fraud, misuse, or unauthorised activity.

We only use personal information where the purpose is legitimate, proportionate, and necessary for running our business or fulfilling our obligations to you.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for processing your personal data. We rely on the following bases:

Contract

We process data where it is necessary to enter into or perform a contract with you. This includes handling bookings, delivering oven cleaning services, taking payment, and communicating about the work to be carried out.

Legal Obligation

We may process data where required to comply with a legal obligation, such as maintaining tax records, accounting records, or other lawful business obligations.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided that those interests do not override your rights and freedoms. Examples include managing customer enquiries, improving our services, preventing fraud, and maintaining internal records. We carefully balance our interests against your privacy rights before relying on this basis.

Consent

In limited cases, we may rely on your consent, for example where it is needed for specific types of optional communication. If we rely on consent, you have the right to withdraw it at any time.

5. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected and to meet any legal, accounting, or reporting requirements. Retention periods may vary depending on the type of data and the reason it is held.

Customer service records are generally retained for the duration of our business relationship and for a reasonable period afterwards to manage any follow-up matters.
Financial and transaction records are retained in line with legal and tax obligations.
Communication records may be retained for the time needed to resolve service matters, handle complaints, or maintain accurate records.

When personal data is no longer required, it is deleted, anonymised, or securely destroyed. We apply retention practices that are proportionate and appropriate to the data concerned.

6. Processors and Data Sharing

We may share personal data with trusted third-party service providers who act as processors on our behalf. These processors only handle data according to our instructions and are required to keep it secure and confidential.

Examples of processors may include:

Administration and scheduling providers.
Accounting and bookkeeping services.
Payment processing providers.
IT support, cloud storage, or system maintenance providers.
Professional advisers where necessary for legal or regulatory purposes.

We may also disclose personal data where required by law, where necessary to protect our rights, or where needed to prevent fraud, abuse, or other unlawful activity. We do not sell personal data.

7. International Transfers

If any of our processors store or access data outside the UK, we will ensure that appropriate safeguards are in place, such as recognised transfer mechanisms or contractual protections, so that your data remains protected to the required standard.

8. Data Security

We take reasonable technical and organisational measures to protect personal data from accidental loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff awareness, and limited access to information on a need-to-know basis. While no system can be guaranteed completely secure, we aim to maintain a high standard of protection appropriate to the nature of the information we hold.

9. Your Rights

As a data subject under the UK GDPR, you have certain rights in relation to your personal data. These include:

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete data.
Right to erasure – in some circumstances, you may ask us to delete your personal data.
Right to restriction – you may ask us to limit how we use your data in certain situations.
Right to object – you may object to processing based on legitimate interests.
Right to data portability – where applicable, you may request that we provide your data in a structured format.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond in accordance with applicable law. We may need to verify your identity before acting on a request. In some cases, legal exceptions may apply, and we may not be able to fulfil every request in full.

10. Complaints

If you are concerned about how your personal data has been handled, you have the right to raise a complaint with the relevant data protection authority. We encourage you to contact us first so that we can review and address the matter promptly and fairly. We take privacy concerns seriously and aim to resolve issues in a transparent and respectful manner.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or how we process personal data. Any updated version will apply from the date it is issued. We recommend reviewing this policy periodically to stay informed about how your information is protected.

12. Summary of Our Approach

In summary, Oven Cleaning Chiswick collects only the personal data needed to provide services, manage bookings, process payments, and maintain lawful business records. We process data on the basis of contract, legal obligation, legitimate interests, and, where appropriate, consent. We retain data only as long as necessary, share it only with trusted processors or where required by law, and protect it using suitable security measures. Customers in the area can also exercise their rights under the UK GDPR at any time.