Oven Cleaning Merton Privacy Policy
This Privacy Policy explains how Oven Cleaning Merton collects, uses, stores and protects personal data relating to our customers and prospective customers within our service area. It has been prepared to comply with the UK General Data Protection Regulation and the Data Protection Act 2018. By using our services, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Oven Cleaning Merton customers, and to individuals who enquire about or use our oven cleaning services within our operating area. It covers personal data collected through telephone enquiries, written correspondence, online enquiries, bookings, in-person interactions and any other method by which you engage with us in relation to our services.
Personal Data We Collect
We may collect and process the following categories of personal data when you contact us, request a quote, make a booking, or receive our services:
Identification and contact details, such as your name and preferred contact method.
Address and access information, such as your service address and any relevant instructions needed for our team to attend your premises.
Booking and service information, including details of the services requested, dates and times of appointments, and any specific requirements related to your oven or property.
Payment-related information where necessary to process your payment, such as confirmation that a payment has been made. We seek to minimise direct handling of full payment card details, and where payment processors are used they handle card information on our behalf.
Communications and correspondence, including records of phone calls where necessary, notes of discussions, and any messages you send to us in relation to our services or your booking.
Technical and usage information relating to our online presence, such as general information about how you interact with our website or online forms. This may include IP address, browser type and pages visited, where this is collected for security, maintenance or analytics purposes.
How We Use Your Personal Data
We use your personal data only for purposes that are necessary and proportionate to delivering and managing our services, including:
To respond to your enquiries, provide quotations and discuss your service requirements.
To set up, confirm, rearrange and manage bookings for oven cleaning services at your premises.
To attend your property and deliver the oven cleaning services you have requested in a safe and efficient manner.
To handle payments, issue invoices and receipts, and maintain accurate accounting records.
To manage our relationship with you as a customer, including following up on work completed, dealing with any issues or complaints, and handling service feedback where provided.
To maintain business records necessary for tax, legal and regulatory compliance.
To improve our services and internal processes, including training, quality assurance and service planning.
Lawful Basis for Processing
We rely on the following lawful bases under the UK GDPR for processing your personal data:
Performance of a contract: We process personal data to provide quotes, accept bookings, deliver oven cleaning services and manage your account, as this is necessary to perform the contract between you and Oven Cleaning Merton or to take steps at your request before entering into a contract.
Legitimate interests: We process certain information for our legitimate business interests, such as maintaining service records, improving our services, managing our business operations, protecting our staff and property, and preventing or detecting fraud. We balance these interests against your rights and freedoms and process data only where our interests are not overridden.
Legal obligations: We process personal data to comply with legal and regulatory requirements, including obligations relating to tax, accounting, record-keeping and responding to lawful requests from regulatory or law enforcement authorities.
Consent: In limited cases, we may rely on your consent, for example where you choose to receive certain types of optional communications or marketing. Where we rely on consent, you have the right to withdraw it at any time, without affecting the lawfulness of processing before withdrawal.
Data Sharing and Processors
We do not sell your personal data. However, we may share your personal data with carefully selected third parties where necessary for the purposes described in this Privacy Policy.
Service providers and processors: We may use third-party providers to support our operations, such as IT service providers, payment processors, booking or customer management systems, accounting or bookkeeping providers and document storage services. These third parties act as data processors and only process personal data on our documented instructions. They are required to maintain appropriate security measures and confidentiality.
Professional advisers: We may share personal data with professional advisers such as accountants, auditors, or legal advisers where necessary for the provision of their services and compliance with legal or regulatory obligations.
Authorities and legal bodies: Where required by law, or where we believe it is necessary to protect our rights, property or safety, we may disclose personal data to law enforcement agencies, courts, regulatory bodies or other public authorities.
In all cases, we limit the data shared to what is necessary and proportionate for the specific purpose.
Data Retention
We keep personal data only for as long as is necessary for the purposes for which it was collected, including to meet legal, accounting or reporting requirements.
In general, we will retain customer and booking records for a period that allows us to respond to queries about past work, manage our relationship with you, and comply with applicable tax and accounting laws. After the relevant retention period has expired, personal data will be securely deleted, anonymised or otherwise put beyond use.
The exact retention period may vary depending on the type of record, the services provided and applicable legal requirements. Factors considered include the nature of the data, the purposes of processing, potential risks from unauthorised use or disclosure, and statutory limitation periods for legal claims.
Security of Your Personal Data
We take the security of personal data seriously and implement appropriate technical and organisational measures to protect it against unauthorised or unlawful processing, accidental loss, destruction or damage.
Measures may include controlled access to records, secure storage of paper and electronic information, restricted access for staff on a need-to-know basis, and procedures for handling, transferring and disposing of data. While we strive to protect your personal data, no system can be guaranteed as completely secure. We continually review and update our security measures in line with industry practice and legal requirements.
Your Data Protection Rights
Under the UK GDPR and related data protection laws, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These include:
Right of access: You can request confirmation that we process your personal data and obtain a copy of that data, together with information about how it is used.
Right to rectification: You can ask us to correct or complete any personal data that is inaccurate or incomplete.
Right to erasure: In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected, or where you withdraw consent and there is no other lawful basis for processing.
Right to restriction of processing: You can ask us to restrict the processing of your personal data in certain situations, for example while we are verifying its accuracy or assessing an objection you have raised.
Right to object: You can object to our processing of your personal data where we rely on legitimate interests as our lawful basis. We will stop processing unless we have compelling legitimate grounds that override your interests, rights and freedoms or where processing is required for legal claims.
Right to data portability: Where the processing is based on consent or contract and carried out by automated means, you may request that we provide your personal data in a structured, commonly used and machine-readable format, or transfer it to another controller where technically feasible.
Right to withdraw consent: Where we rely on your consent for processing, you may withdraw that consent at any time. This will not affect processing carried out before your withdrawal.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you believe your data protection rights have been infringed. We would, however, welcome the opportunity to address your concerns directly in the first instance.
International Transfers
Where we use service providers that process data outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your personal data, such as the use of standard contractual clauses or other mechanisms approved by data protection authorities.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, how we process personal data, or legal and regulatory developments. The updated version will apply from the date it is issued. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.
Contact and Queries
If you have any questions about this Privacy Policy, how we handle your personal data, or if you wish to exercise any of your data protection rights, you can contact Oven Cleaning Merton using the usual communication channels you use to arrange or discuss our services. Please clearly state that your query relates to data protection or this Privacy Policy to help us respond promptly.
