Privacy Policy - Oven Cleaning Edgware

This Privacy Policy explains how Oven Cleaning Edgware collects, uses, stores, shares, and protects personal data. It applies to all Oven Cleaning Edgware customers in the area, including anyone who requests a quote, books a service, receives a cleaning visit, or communicates with us in connection with our domestic or commercial oven cleaning services. We are committed to handling personal data in a fair, lawful, transparent, and secure way in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our services, you acknowledge that your personal information may be processed as described in this policy. We only collect data that is necessary for providing our services, managing customer relationships, meeting legal obligations, and improving service quality. We do not sell personal data.

1. Who This Policy Applies To

This policy applies to individuals in Edgware and surrounding areas who interact with Oven Cleaning Edgware in any capacity. That includes:

Customers who request quotations or information
Customers who book or receive cleaning services
Property owners, tenants, landlords, and agents arranging services
Individuals who communicate with us regarding complaints, scheduling, or service follow-up

Where personal data is provided about another person, for example a tenant or a third-party recipient of services, the person sharing the data should ensure they have permission to do so where required.

2. Personal Data We Collect

We collect only the information needed to operate our services effectively. The types of personal data we may collect include:

Identity details: name, title, and where relevant, business or property details
Contact details: address, email address, and telephone number
Booking information: service dates, appointment preferences, property access instructions, and service notes
Transaction details: payment status, invoicing records, and service history
Communication records: messages, call notes, complaints, and feedback
Technical information: basic website usage data if you visit our online pages, such as device type, browser information, and cookies where used

We generally do not seek special category data, such as health information, unless it is voluntarily provided and is genuinely necessary for service delivery or safety. If such data is shared, it will only be processed where a lawful basis applies and appropriate safeguards are in place.

3. How We Use Personal Data

We use personal data for the following purposes:

To provide quotes and manage bookings
To deliver oven cleaning and related services
To communicate about appointments, access, and service updates
To issue invoices, take payments, and manage account records
To handle complaints, feedback, and service-related disputes
To maintain internal records and ensure consistent service quality
To comply with legal and regulatory obligations
To protect our business, staff, and customers from fraud or misuse

We will only process personal data in ways that are compatible with the purpose for which it was collected, unless we reasonably believe another compatible purpose or legal obligation applies.

4. Lawful Basis for Processing

Under UK GDPR, we must identify a lawful basis before processing personal data. Oven Cleaning Edgware relies on the following bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes taking booking details, arranging service visits, completing the cleaning work, and managing payments.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. This may include customer service follow-up, record keeping, service improvement, fraud prevention, and business administration. When we rely on legitimate interests, we assess the impact on your privacy and keep the processing proportionate.

Legal Obligation

We may process and retain certain data to comply with legal requirements, such as tax records, accounting obligations, or requests from lawful authorities.

Consent

Where consent is required, for example for certain marketing communications or optional data uses, we will ask for clear and informed consent. You may withdraw consent at any time, and this will not affect processing already carried out before withdrawal.

Vital Interests and Public Interest

These bases are unlikely to apply in normal service situations, but may be used in exceptional circumstances where necessary to protect someone’s life or in relation to a legal function performed in the public interest.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purpose for which it was collected, including satisfying legal, accounting, and reporting requirements. Retention periods may vary depending on the type of information and the reason for processing.

Quotation and booking records are generally kept for a reasonable period to manage service history and follow-up
Invoice and payment records are kept for the period required by tax and accounting law
Complaint and correspondence records may be retained to resolve disputes or demonstrate service handling
Technical or cookie-related data is retained according to applicable settings and consent choices

When data is no longer needed, it is securely deleted, anonymised, or otherwise disposed of in a safe and appropriate manner.

6. Processors and Third Parties

We may share personal data with trusted third-party processors who help us operate our business. These processors act on our instructions and are required to handle data securely and lawfully. Examples may include:

Payment service providers
Booking or scheduling tools
Accounting and invoicing systems
IT support, cloud storage, and secure data hosting providers
Communication service providers used for email, telephone, or administrative messages

We may also disclose personal data where necessary to:

Comply with legal duties
Respond to lawful requests from public authorities
Protect our rights, property, staff, or customers
Support the establishment, exercise, or defence of legal claims

Where processors are used, we require appropriate contractual safeguards and only share the minimum information needed for the relevant task.

7. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure. These measures may include access restrictions, secure storage, confidentiality controls, password protection, and staff awareness procedures.

Although we work hard to secure all data, no method of transmission or storage is completely risk-free. If a data breach occurs that is likely to result in a risk to your rights and freedoms, we will take steps to investigate, limit the impact, and notify the relevant authorities and affected individuals where required by law.

8. Your Rights Under UK GDPR

You have important rights regarding your personal data. Subject to legal conditions and exemptions, you may have the right to:

Access the personal data we hold about you
Rectify inaccurate or incomplete information
Erase your data in certain circumstances
Restrict how we process your data in certain situations
Object to processing based on legitimate interests or direct marketing
Data portability for information you provided to us in a structured, commonly used format where applicable
Withdraw consent where processing is based on consent

You also have the right to complain to the Information Commissioner’s Office (ICO) if you believe your data has not been handled properly. We encourage you to raise concerns with us first so we can address them promptly and fairly.

9. Cookies and Website Usage

If you visit our online pages, we may use cookies or similar technologies for basic site functionality, analytics, and user experience improvement. Where consent is required, you will be given appropriate choices. You can manage cookie settings through your browser or device controls.

10. International Transfers

Where any service provider stores or processes data outside the UK, we will ensure appropriate safeguards are in place to protect the data in accordance with applicable law. These safeguards may include approved contractual protections or other lawful transfer mechanisms.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect legal, operational, or service changes. The latest version will apply to all customers in the area from the time it is made available. Please review this policy periodically so that you remain informed about how your data is handled.

12. Summary of Our Approach

At Oven Cleaning Edgware, we aim to process personal data in a way that is lawful, fair, transparent, and limited to what is necessary. We collect only the information needed to provide high-quality oven cleaning services, keep it only for as long as needed, and share it only with trusted processors or where the law requires. We respect your rights and are committed to handling your information with care and responsibility.