Oven Cleaning Highbury Privacy Policy
This Privacy Policy explains how Oven Cleaning Highbury collects, uses, stores, and protects personal data relating to our customers in the Highbury area. It also explains your rights under the UK General Data Protection Regulation and the Data Protection Act 2018. This Privacy Policy applies to all Oven Cleaning Highbury customers in the Highbury area, including individuals booking services directly and those who contact us to make enquiries.
Who We Are and Scope of This Policy
Oven Cleaning Highbury provides oven cleaning and related services to customers in the Highbury area. For the purposes of applicable data protection laws, we act as the data controller in relation to the personal data we collect and use about our customers and prospective customers.
This Privacy Policy applies whenever you provide personal data to us, whether by telephone, in person, through online enquiries, or through third parties who help us provide our services. It applies to data relating to private individuals, and to contact details of individuals acting on behalf of businesses.
Personal Data We Collect
We collect and process different types of personal data depending on how you interact with us and which services you use. The categories of personal data we may collect include:
Identification and contact details: your name, address, and other contact information required to arrange and provide our services.
Service and booking information: details of the services you request or receive, booking dates and times, property access information you choose to share, and any special instructions related to the service.
Payment and transaction information: details of payments made for our services and related transaction records. We do not store full payment card details when payments are processed through secure payment providers.
Communication data: information contained in enquiries, emails, calls, text messages, or other communications you send to us, including any feedback or complaints.
Technical and usage information: limited technical information may be collected when you interact with our online booking tools or website, such as device type and basic usage data, to help us improve our services.
Marketing preferences: your preferences about whether and how you wish to receive marketing or service updates from us.
How We Use Your Personal Data
We use the personal data we collect for the following purposes:
To provide oven cleaning and related services, including confirming bookings, arranging visits, and carrying out the requested work.
To manage our relationship with you as a customer, including handling enquiries, rescheduling or cancelling appointments, and addressing any questions, feedback, or complaints.
To process payments and maintain accurate financial and accounting records.
To communicate with you about your bookings, service updates, terms and conditions, and changes to this Privacy Policy.
To send you marketing communications about our services where permitted by law and in line with your communication preferences. You can opt out of marketing at any time.
To improve, manage, and protect our business, including quality control, staff training, and maintaining the security of our systems and premises.
To comply with legal obligations, respond to lawful requests from authorities, and establish, exercise, or defend legal claims.
Lawful Bases for Processing
We rely on one or more of the following lawful bases under the UK GDPR to process your personal data:
Contract: processing is necessary to enter into or perform a contract with you, for example to provide oven cleaning services you have requested, manage bookings, and handle payments.
Legal obligation: processing is necessary for us to comply with legal requirements, such as tax, accounting, and health and safety obligations.
Legitimate interests: we may process personal data where it is necessary for our legitimate business interests or those of a third party, and where your interests and fundamental rights do not override those interests. This may include managing our customer relationships, improving services, ensuring security, preventing fraud, and conducting limited direct marketing to existing customers.
Consent: in some cases, we may rely on your consent, for example for certain marketing activities that are not covered by legitimate interests. Where we rely on consent, you have the right to withdraw it at any time.
Data Retention
We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including to meet legal, accounting, or reporting requirements.
In general, we retain customer records and related booking and transaction information for a period that allows us to respond to queries, handle any potential disputes, and comply with tax and accounting laws. After this period, data will be securely deleted, anonymised, or archived where continued retention is required by law.
Communication records and service-related notes are kept for as long as they are relevant to our ongoing relationship with you and our legal obligations. Where we rely on consent for marketing, we will keep your contact details for marketing purposes until you opt out or withdraw your consent, after which we will retain only the information necessary to ensure we respect your preferences.
Data Sharing and Processors
We do not sell your personal data. We may share your personal data with carefully selected third parties where necessary for the operation of our business and the provision of our services, including:
Service providers and contractors who help us deliver our services, such as booking and scheduling tools, payment processors, and administrative or IT support providers.
Professional advisers, including accountants, insurers, and legal advisers, where necessary for the management and protection of our business.
Authorities, regulators, law enforcement bodies, or courts where we are required to do so by law or in order to protect our rights or the rights of others.
When we use third-party service providers as data processors, they may only process your personal data on our instructions and are required to take appropriate security measures to protect it. We ensure that suitable contracts and safeguards are in place with all processors who handle personal data on our behalf.
International Transfers
In some cases, the service providers we use may process personal data outside the United Kingdom. Where this occurs, we take steps to ensure that your personal data receives an adequate level of protection, for example by using standard data protection clauses approved by the relevant authorities or by ensuring that other appropriate safeguards are in place.
Data Security
We take the security of your personal data seriously. We use appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access.
These measures include access controls, secure systems, staff training, and procedures to deal with any suspected data breach. If we are legally required to notify you of a data breach affecting your personal data, we will do so in line with applicable law.
Your Data Protection Rights
Under the UK GDPR, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These rights include:
Right of access: you can request confirmation of whether we process your personal data and obtain a copy of that data, together with certain information about how it is used.
Right to rectification: you can ask us to correct or complete your personal data if it is inaccurate or incomplete.
Right to erasure: in certain circumstances, you can ask us to delete your personal data, for example where it is no longer needed for the purposes for which it was collected and we have no legal obligation to retain it.
Right to restriction: you can ask us to restrict the processing of your personal data in certain situations, for example while we verify its accuracy or where you have objected to our use of it.
Right to object: you can object to our processing of your personal data where we rely on legitimate interests. You also have the absolute right to object at any time to the use of your personal data for direct marketing.
Right to data portability: where processing is based on your consent or on a contract and carried out by automated means, you may have the right to receive your personal data in a structured, commonly used, machine-readable format and to request that it is transmitted to another controller where technically feasible.
Right to withdraw consent: where we rely on your consent to process personal data, you can withdraw that consent at any time. This will not affect the lawfulness of processing based on consent before it was withdrawn.
Exercising Your Rights and Complaints
If you wish to exercise any of your data protection rights, or if you have questions about this Privacy Policy or how we handle your personal data, you can contact us using the contact details provided on our website or service materials.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you are concerned about how we handle your personal data. We encourage you to contact us first so we can try to resolve your concerns directly.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data protection practices. Any updated version will be made available through our usual communication channels. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data as an Oven Cleaning Highbury customer in the Highbury area.
