Cleaners Mayfair Privacy Policy
This Privacy Policy explains how Cleaners Mayfair collects, uses, stores, and protects personal data relating to our domestic and commercial cleaning services. It applies to all existing and prospective customers located in the Mayfair area who engage with our services, whether by phone, online enquiry, written communication, or in person. We are committed to complying with the UK General Data Protection Regulation and all applicable data protection laws.
Data Controller
Cleaners Mayfair is the data controller for the personal data described in this Privacy Policy. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing is carried out in a lawful, fair, and transparent manner.
Personal Data We Collect
We collect and process different types of personal data depending on how you interact with us and which services you request. The categories of data we may collect include:
Identification and contact details such as name, postal address, service address, billing address, and preferred contact details.
Service details such as type of cleaning service requested, frequency of visits, property type and size, access instructions, and any specific requirements or notes you provide.
Booking and transaction data such as dates and times of bookings, booking history, payment status, invoices, and related financial records. Payment card details may be collected by our payment processor and are not stored by us directly.
Communication data such as enquiries, feedback, complaints, and any correspondence you send to us by post, email, web form, or other communication channels.
Technical and usage data such as information relating to how you access and use our online booking tools or website, including device information and usage logs, where applicable.
How We Collect Your Data
We collect personal data directly from you when you request a quote, place a booking, communicate with us, or provide information during the delivery of cleaning services. We may also receive data indirectly from third party platforms where you have made an enquiry or booking that is then forwarded to us as part of our service relationship with that platform.
Lawful Bases for Processing
We rely on several lawful bases under the UK General Data Protection Regulation to process your personal data, depending on the specific context:
Contractual necessity. We process your personal data to enter into and perform a contract for cleaning services, including handling enquiries, providing quotes, managing bookings, delivering services, issuing invoices, and dealing with any requests or issues arising from the contract.
Legitimate interests. We process certain data where it is necessary for our legitimate business interests and where those interests are not overridden by your rights and freedoms. This includes managing our business operations, improving our services, maintaining accurate records, and responding to customer queries.
Legal obligations. We process personal data where necessary to comply with legal and regulatory requirements, including accounting, taxation, and record keeping obligations.
Consent. In limited cases, we may rely on your consent, for example when you ask us to retain certain details for future bookings. Where processing is based on consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.
How We Use Your Personal Data
We use your personal data for the following purposes:
To provide cleaning services, including handling enquiries, scheduling visits, managing on-site access, and tailoring services to your preferences.
To administer bookings and payments, including issuing confirmations, reminders, invoices, and processing refunds where applicable.
To communicate with you, respond to your questions and feedback, handle complaints, and keep you informed about service-related matters such as changes to appointments or terms.
To manage our business operations, including internal administration, quality control, staff training, and service improvement.
To comply with legal and regulatory obligations, including maintaining appropriate business and financial records.
Data Sharing and Processors
We do not sell your personal data. We may share your personal data with carefully selected third parties who act as data processors on our behalf. These processors are only permitted to process your data in accordance with our instructions and are required to implement appropriate security measures.
Categories of processors we may use include booking and scheduling providers, customer relationship or database service providers, payment processing providers, information technology and hosting providers, and professional advisers such as accountants where necessary for lawful business operations.
Where processors are based or store data outside the United Kingdom or European Economic Area, we will take steps to ensure appropriate safeguards are in place to protect your personal data in accordance with applicable data protection laws.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.
In practice, this means:
Customer and booking records are typically retained for a period necessary to manage our relationship with you and to meet our legal obligations, often for up to six years after the end of the relevant financial year in which your last transaction took place.
Communication records such as enquiries and complaints may be retained for a period necessary to respond to you, resolve any issues, and demonstrate compliance.
If we no longer need personal data for the purposes described in this Privacy Policy, we will delete or anonymise it, unless we are required by law to retain it for a longer period.
Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures include restricted access to personal data, staff training on data protection responsibilities, secure systems and storage, and regular review of our data protection practices. While we take reasonable precautions, no method of transmission or storage can be guaranteed as completely secure.
Your Rights Under GDPR
As a data subject under the UK General Data Protection Regulation, you have a number of rights in relation to your personal data, subject to certain conditions and exemptions. These rights include:
Right of access. You have the right to request confirmation as to whether we process your personal data and to obtain a copy of the personal data we hold about you, together with related information.
Right to rectification. You have the right to request that inaccurate or incomplete personal data we hold about you be corrected or updated.
Right to erasure. You have the right to request the deletion of your personal data where there is no longer a lawful basis for us to retain it, for example where the data is no longer necessary for the purposes for which it was collected or where you withdraw consent and there is no other lawful basis for processing.
Right to restriction of processing. You have the right to request that we restrict the processing of your personal data in certain circumstances, for example while we verify its accuracy or consider an objection you have raised.
Right to data portability. You have the right, in certain circumstances, to receive the personal data you have provided to us in a structured, commonly used, and machine readable format and to request that we transmit such data to another controller where technically feasible.
Right to object. You have the right to object to the processing of your personal data where we rely on legitimate interests as our lawful basis, including profiling based on those interests. We will stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is required for legal claims.
Right to withdraw consent. Where we rely on your consent to process your personal data, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
Exercising Your Rights
If you wish to exercise any of your rights, or if you have questions about how we handle your personal data, you can contact us using the contact details provided on our main customer communication channels. We may need to verify your identity before responding to certain requests to protect your data and the data of others. We aim to respond to all legitimate requests within one month, or within any extended period permitted by law where requests are complex or numerous.
Complaints
If you have concerns about how we process your personal data, we encourage you to contact us first so that we can try to resolve the issue. You also have the right to lodge a complaint with the relevant data protection supervisory authority in the United Kingdom if you believe your rights have been infringed.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal or regulatory developments, or service updates. Any revised version will apply to all personal data that we hold at the time of the update. We recommend that you review this Privacy Policy periodically to stay informed about how we protect your personal data.