Privacy Policy - Oven Cleaning Lewisham

This Privacy Policy explains how Oven Cleaning Lewisham collects, uses, stores, shares, and protects personal data relating to its customers in the Lewisham area. It applies to all Oven Cleaning Lewisham customers in area, including individuals who request a quote, make a booking, receive cleaning services, or otherwise interact with our business.

We are committed to handling personal information in a lawful, fair, and transparent way in accordance with the UK GDPR and the Data Protection Act 2018. This policy is designed to help you understand what information we collect, why we use it, the legal basis for processing, how long we keep it, who may process it on our behalf, and what rights you have over your data.

1. Data We Collect

We collect only the personal data that is necessary to provide our services, manage our business, and meet legal or regulatory obligations. The type of information we collect may include:

Identity details such as your name and, where relevant, the name of your household or business.
Contact details such as your address, telephone number, and email address.
Service information such as the type of oven cleaning requested, appointment dates, access notes, and service preferences.
Payment and billing details such as transaction records, invoices, and payment confirmation. We do not store full card details unless a secure third-party payment processor is used.
Communication records including enquiries, messages, complaints, feedback, and notes from customer interactions.
Technical data if you interact with us electronically, such as basic device or usage information where relevant for security, analytics, or website functionality.

We may also receive information from third parties where necessary for service delivery, such as booking platforms, payment providers, or referral partners. We do not intentionally collect special category data unless it is required for a legitimate reason and you have provided it voluntarily, for example where access arrangements relate to health, mobility, or safety considerations. Any such information will be treated with extra care and only used where appropriate and lawful.

2. How We Use Your Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To schedule, deliver, and manage oven cleaning services.
To process payments, issue invoices, and keep accounting records.
To communicate with customers about bookings, service updates, or follow-up matters.
To handle complaints, service issues, and customer support requests.
To improve our services, operations, and customer experience.
To comply with legal obligations, including tax, accounting, and record-keeping requirements.
To protect against fraud, misuse, or unlawful activity.

We will only use your personal data for the purposes for which it was collected, unless we reasonably consider that we need to use it for another compatible purpose. If we need to use your data in a materially different way, we will notify you where required.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each processing activity. Depending on the context, we rely on the following lawful bases:

Contract

We process your personal data when it is necessary to enter into or perform a contract with you. This includes providing quotes, confirming bookings, carrying out oven cleaning services, and taking payment for services delivered.

Legitimate Interests

We may process data where it is necessary for our legitimate interests and where your interests and fundamental rights do not override those interests. This may include managing customer communications, improving service quality, preventing fraud, maintaining records, and operating our business efficiently. We always consider whether the processing is proportionate and privacy-friendly.

Legal Obligation

We may process and retain certain information to comply with legal obligations, including accounting, tax, insurance, and business record requirements.

Consent

In limited circumstances, we may rely on your consent, for example if you choose to receive certain marketing communications or provide optional sensitive information. Where consent is used, you can withdraw it at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before it was withdrawn.

4. How We Share Personal Data

We do not sell your personal data. We may share it only when necessary and only with trusted third parties who support our operations. These may include:

Service processors such as booking software providers, customer management systems, and secure data storage providers.
Payment processors that handle card or electronic payments on our behalf.
Accounting and invoicing providers used to manage financial records.
IT and security providers that help maintain our systems and protect data.
Professional advisers such as accountants, insurers, or legal advisers where required.
Public authorities where we are legally required to disclose information.

Where we use processors, they are only permitted to act on our instructions and must keep your data secure. We seek appropriate contractual safeguards and only share the minimum information required for the relevant service.

5. Retention of Personal Data

We keep personal data only for as long as necessary for the purpose it was collected, unless a longer retention period is required by law. Retention periods may vary depending on the type of information and the reason for processing.

Customer and booking records are generally retained for a period needed to manage service history, resolve disputes, and maintain business records.
Financial and invoicing records are retained for the period required by tax and accounting laws.
Communication records may be kept for a reasonable period to support customer service, complaint handling, and quality assurance.
Security and technical logs are kept only as long as necessary for operational and security purposes.

When data is no longer required, we will securely delete, destroy, or anonymise it. We review our retention practices periodically to ensure information is not kept longer than needed. This helps us comply with the principle of storage limitation.

6. Data Security

We take appropriate technical and organisational measures to protect personal data from loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, encryption where appropriate, staff training, and restricted access to sensitive records.

Although we take reasonable steps to protect your information, no system can be guaranteed as completely secure. If a personal data breach occurs that is likely to result in a risk to your rights and freedoms, we will handle it in accordance with applicable legal obligations.

7. Your Rights

As a data subject, you have a number of rights under data protection law. These rights may apply depending on the circumstances and the lawful basis relied upon. They include:

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete information.
Right to erasure – in some cases, you can ask us to delete your personal data.
Right to restriction – you can ask us to limit how we use your data in certain situations.
Right to object – you can object to processing based on legitimate interests or direct marketing.
Right to data portability – where applicable, you can request your data in a structured, commonly used format.
Right to withdraw consent – where processing is based on consent, you can withdraw it at any time.

You also have the right to raise a concern with the Information Commissioner’s Office if you believe your data has not been handled properly. We encourage you to contact us first so we can try to resolve any issue promptly and fairly. We will not charge a fee for responding to most requests unless a request is manifestly unfounded or excessive.

8. Marketing Preferences

If we send marketing communications, we will do so only where permitted by law. You may opt out of marketing at any time. If you object to marketing, we will stop using your data for that purpose. Service-related communications, such as appointment reminders or booking confirmations, are not marketing and may still be sent where necessary to deliver the service.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, business practices, or the way we process personal data. The latest version will apply to all customers in the Lewisham area. Where changes are material, we will take reasonable steps to make them known.

10. Scope of This Policy

This Privacy Policy applies to all Oven Cleaning Lewisham customers in area, including current, prospective, and former customers, as well as anyone who contacts us in relation to oven cleaning services. By engaging our services, you acknowledge that your personal data may be processed in line with this policy and applicable law.

We value your privacy and aim to handle your information responsibly, transparently, and with respect. Our commitment is to use personal data only where necessary, keep it secure, and process it in a way that is lawful and fair.