Cleaners Highbury Privacy Policy
This Privacy Policy explains how Cleaners Highbury collects, uses, stores and shares personal data relating to customers and prospective customers in the Highbury area. It also sets out your rights under the UK General Data Protection Regulation and related data protection laws. This Privacy Policy applies to all customers and service users located in the Highbury area who engage with our cleaning services, whether by telephone, online, or in person.
Who We Are
Cleaners Highbury is a local cleaning service provider operating in the Highbury area. In relation to the personal data we process for our own business purposes, we act as a data controller. This means we decide how and why your personal data is used, in line with applicable data protection laws.
Personal Data We Collect
We collect and process different categories of personal data depending on how you interact with us and which services you use. The information we may collect includes:
Identity and contact details such as your name, title, address, and preferred contact details you choose to share with us when you make an enquiry or booking.
Service details such as property type, size of the premises, access instructions, preferred cleaning schedule, any information about pets, and special cleaning requirements.
Booking and transaction information such as dates and times of your bookings, services provided, billing records, invoices issued and basic payment status information. We do not store full payment card details when you pay using a card; these are handled securely by our payment processors.
Communication records such as enquiries, complaints, feedback and other correspondence with you, including notes of telephone calls and details you provide when you ask questions about our services.
Technical and usage information such as limited data generated when you visit our website or use our online booking tools, including approximate location, device and browser type, and pages viewed, where this is necessary to operate and secure our services.
Sensitive or special category data is not intentionally collected. We ask that you do not provide medical or other sensitive information unless it is essential for us to carry out our services safely, for example allergy information relevant to cleaning products used in your property.
How We Collect Your Data
We collect personal data directly from you when you contact us, request a quote, make a booking, or communicate with us before or after a visit. We may also receive limited personal data from third party platforms where you have requested a service listing or referral, and from payment processors that confirm the status of payments you make for our services.
Purposes and Lawful Bases for Processing
We process your personal data only where we have a lawful basis under data protection law. The main purposes and lawful bases are:
To provide and manage our cleaning services. We use your identity, contact and service details to provide quotes, arrange and deliver cleaning appointments, manage access to your property and handle rescheduling or cancellations. The lawful basis is performance of a contract or taking steps at your request before entering into a contract.
To manage billing and payments. We use your booking and transaction information to issue invoices, confirm that payments have been made and maintain accurate financial records. The lawful basis is performance of a contract and compliance with legal obligations relating to accounting and taxation.
To communicate with you. We use your contact details and communication records to respond to enquiries, provide service updates, handle any complaints or claims and request feedback on our services. The lawful basis is performance of a contract and our legitimate interests in running and improving our business.
To improve and secure our services. We may use limited technical and usage information to monitor website performance, maintain security and develop our services. The lawful basis is our legitimate interests in operating, safeguarding and developing our services.
To comply with legal and regulatory requirements. We may use any relevant information required to meet obligations under applicable laws, respond to lawful requests from authorities, and defend or establish legal claims. The lawful basis is compliance with legal obligations and our legitimate interests in protecting our business.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes set out in this Privacy Policy and to meet legal and regulatory requirements.
Customer and booking records are generally kept for up to seven years after the end of our relationship with you, to comply with accounting, tax and record keeping obligations and to support the resolution of any disputes or claims.
Enquiry records where no service is taken up are usually retained for a shorter period, typically up to two years, unless a longer period is required by law or is necessary to deal with ongoing issues.
Technical and website usage data is retained for a shorter period where possible, and may be anonymised or aggregated so that it no longer identifies you.
When retention periods expire, we either securely delete or irreversibly anonymise the data so that you can no longer be identified from it.
Data Processors and Third Party Recipients
We may share your personal data with carefully selected third party service providers who act as data processors on our behalf. These organisations only process your data under our instructions and are required to keep your data secure and confidential. They may include:
Information technology and hosting providers who support our booking systems, customer databases and secure storage of electronic records.
Payment processing providers who handle card and online payments for our services and provide us with payment confirmation.
Professional advisers such as accountants or legal advisers who may need access to limited information to provide services to us.
In some cases we may also share your personal data with independent controllers, for example:
Public authorities or regulators where disclosure is required by law, court order or to protect our legal rights.
Insurance providers and legal advisers in connection with the management or defence of legal claims.
We do not sell your personal data to third parties. Where data is transferred outside the United Kingdom or European Economic Area by one of our processors, we require them to ensure that appropriate safeguards are in place to protect your data in accordance with applicable law.
Your Data Protection Rights
As a data subject under the UK General Data Protection Regulation and related laws, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions.
Right of access. You can request confirmation of whether we process your personal data and obtain a copy of your data and information about how we use it.
Right to rectification. You can ask us to correct inaccurate or incomplete personal data that we hold about you.
Right to erasure. In certain circumstances you can request that we delete your personal data, for example where it is no longer needed for the purpose for which it was collected or where you withdraw consent and there is no other lawful basis for processing.
Right to restriction of processing. In some cases you can ask us to restrict the use of your personal data, for example while we verify its accuracy or consider an objection you have raised.
Right to object. You can object to our processing of your personal data where we rely on legitimate interests as our lawful basis. We will stop processing unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms or where processing is required for legal claims.
Right to data portability. Where processing is based on your consent or on a contract and is carried out by automated means, you may have the right to receive your personal data in a structured, commonly used and machine-readable format and to request that we transmit it to another controller, where technically feasible.
Right to withdraw consent. Where we rely on your consent for any processing, you can withdraw that consent at any time. This will not affect the lawfulness of processing carried out before consent was withdrawn.
You also have the right to lodge a complaint with the relevant supervisory authority if you are concerned about how we handle your personal data. However, we encourage you to contact us in the first instance so we can try to resolve any concerns directly.
Security of Your Personal Data
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, disclosure or destruction. These measures include access controls, secure storage, staff training and procedures to handle any suspected data breach. While we take reasonable steps to safeguard your data, no system can be completely secure and you should take care when transmitting information to us.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations or how we process personal data. Any updated version will apply to all customers and service users in the Highbury area from the date it is made available. We encourage you to review this Privacy Policy periodically to stay informed about how we use your personal data.