Barnet Cleaner Privacy Policy and Data Practices

This Privacy Policy explains how Barnet Cleaner collects, uses, stores and protects personal data of its customers and prospective customers in the Barnet area. It also explains your rights under the UK General Data Protection Regulation and related data protection laws. By using our cleaning services or contacting us to enquire about our services, you acknowledge that you have read and understood this Privacy Policy.

Scope of this Privacy Policy

This Privacy Policy applies to all Barnet Cleaner customers and prospective customers within our service area in and around Barnet. It covers personal data collected when you contact us, request a quote, make a booking, enter into a contract for services, visit our website, or otherwise interact with Barnet Cleaner in relation to our cleaning services.

Identity of the Data Controller

For the purposes of applicable data protection law, Barnet Cleaner is the data controller of the personal data described in this Privacy Policy. As data controller, Barnet Cleaner determines the purposes and means of processing your personal data and is responsible for ensuring that such processing complies with the UK GDPR.

Categories of Personal Data We Collect

We may collect and process the following categories of personal data about you:

Identification and contact details, such as your name, residential address or business address, billing address, and any contact details you choose to provide, for example an email address or other communication details.

Service and contract information, such as details of the cleaning services you request, property access instructions you choose to provide to us, dates and times of bookings, records of services performed, invoices, payments, and any communications relating to your contract or potential contract with us.

Communication records, such as enquiries, complaints, feedback, or other correspondence you have with us, including notes of telephone conversations and logs of messages received through any communication tools we use.

Technical and usage information, such as basic information about how you use our website or digital tools, including dates and times of access, pages viewed and general device information, where this is collected through necessary cookies or similar technologies. We do not seek to identify you from this information unless this is necessary for security, fraud prevention, or to comply with legal obligations.

Employee and contractor details are governed by separate privacy information provided directly to those individuals and are not covered in detail in this customer-facing Privacy Policy.

Lawful Bases for Processing Your Personal Data

We only process your personal data when we have a lawful basis to do so under the UK GDPR. Depending on the specific processing activity, we rely on the following lawful bases:

Performance of a contract. We process your personal data to enter into and perform our contract with you, or to take steps at your request before entering into a contract. This includes managing bookings, providing cleaning services, handling payments, and communicating with you about the services you receive.

Compliance with legal obligations. We may process your personal data where this is necessary to comply with legal and regulatory obligations, for example in relation to tax, accounting, record-keeping, and responding to lawful requests from public authorities.

Legitimate interests. We may process your personal data for our legitimate business interests, provided that your interests and fundamental rights do not override those interests. This includes managing and improving our services, handling customer enquiries, protecting our business from fraud or misuse, and maintaining appropriate business records.

Consent. Where we rely on your consent, we will clearly explain what you are consenting to and how you can withdraw that consent at any time. For example, we may seek your consent to send you certain types of marketing or promotional messages that are not based on our legitimate interests.

Purposes for Which We Use Personal Data

We use your personal data for the following purposes:

To provide cleaning services, including processing enquiries and bookings, arranging access to your property, performing agreed services, and managing any follow up required.

To manage our relationship with you, including responding to your questions, handling complaints, managing changes to bookings, and notifying you about important changes to our terms or policies.

To administer our business, including invoicing, processing payments, accounting, auditing, and maintaining appropriate business and financial records.

To maintain security and prevent misuse, including verifying identities where appropriate, preventing and detecting fraud, and safeguarding our staff when they attend your premises.

To improve our services, including monitoring service quality, gathering feedback, and using anonymised or aggregated information to help us understand how our services are used and how we can enhance them.

To send marketing and service updates, where permitted by law. You can object to or opt out of marketing communications at any time, and we will respect your choice.

Data Sharing and Use of Processors

We may share your personal data with trusted third parties who act as data processors on our behalf. These processors only process your personal data in accordance with our documented instructions, under a written contract, and with appropriate technical and organisational security measures in place. Categories of processors may include:

IT and hosting providers, who host our systems or provide support and maintenance for our technology and communications infrastructure.

Payment and accounting service providers, who assist with secure processing of payments and with financial record-keeping and accounting services.

Communication and scheduling service providers, who facilitate our appointment management, notifications, messaging tools, and customer service systems.

Where we use third-party processors located outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your personal data, in accordance with applicable data protection law.

We may also share your personal data with professional advisers, such as lawyers, auditors or insurers, where this is necessary for the establishment, exercise or defence of legal claims, for audit purposes, or to obtain professional advice. In limited circumstances we may need to share your personal data with law enforcement or other public authorities where we are legally required to do so.

Data Retention

We retain your personal data only for as long as is reasonably necessary for the purposes set out in this Privacy Policy, and to comply with our legal, accounting and reporting obligations.

Customer contract and billing records are typically kept for the duration of your relationship with us, and for a reasonable period afterwards to deal with any queries, complaints or legal claims. Financial records and invoices are generally kept for a fixed period as required by tax and accounting regulation.

Enquiry and communication records are kept for a period that allows us to manage our customer relationship, respond to follow-up requests, and demonstrate how we have handled communications, after which they will be securely deleted or anonymised.

When we have no ongoing legitimate need to process your personal data, we will either delete it or anonymise it so that it can no longer be associated with you.

Your Data Protection Rights

Under the UK GDPR, you have various rights in relation to the personal data we hold about you. These rights are subject to certain conditions and legal exemptions. Your rights include:

Right of access. You can request confirmation as to whether we process your personal data and, if so, receive a copy of that data together with information about how we process it.

Right to rectification. You can ask us to correct or complete personal data that is inaccurate or incomplete.

Right to erasure. In certain circumstances, you can request that we delete your personal data, for example where the data is no longer needed for the purposes for which it was collected, or where you withdraw consent and we have no other lawful basis to continue processing.

Right to restriction. You can request that we restrict the processing of your personal data in certain situations, such as while we verify the accuracy of data or assess an objection you have raised.

Right to object. You can object to processing based on our legitimate interests, including profiling based on those interests. We will stop processing the data unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or where processing is required for legal claims. You have an absolute right to object to direct marketing.

Right to data portability. Where processing is based on your consent or on a contract and is carried out by automated means, you can request that we provide your personal data in a structured, commonly used and machine-readable format, and that we transmit it to another controller where technically feasible.

Right to withdraw consent. Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

You also have the right to lodge a complaint with a data protection supervisory authority if you believe that your data protection rights have been infringed.

Security of Your Personal Data

We take appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. These measures include access controls, secure storage systems, staff training, and procedures for handling data protection incidents. While we take reasonable steps to safeguard your personal data, no system can be completely secure, and we cannot guarantee absolute security of data transmitted to or by us.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or data protection practices. Any updates will be made available through our usual communication channels. We encourage you to review this Privacy Policy periodically to stay informed about how we process and protect your personal data.