Privacy Policy - Enfield Cleaners

This Privacy Policy explains how Enfield Cleaners collects, uses, stores, shares, and protects personal data. It applies to all Enfield Cleaners customers in the area, including individuals who request cleaning services, receive quotations, make bookings, or otherwise interact with us in connection with our services.

We are committed to handling personal data in a way that is lawful, fair, transparent, and consistent with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy is designed to help you understand what information we collect, why we collect it, how long we keep it, who may process it on our behalf, and what rights you have.

1. Data We Collect

We only collect personal data that is necessary to provide our services, manage our business, and meet our legal obligations. The types of personal data we may collect include the following:

Identity details such as your name and, where relevant, the name of your business or household.
Contact details such as your address, email address, and telephone number.
Service information such as property details, cleaning preferences, appointment dates, service instructions, and notes needed to complete a booking.
Payment information such as billing details and transaction records. We do not store full card details where payment is handled through a secure third-party payment provider.
Communication records including emails, messages, call notes, and complaints or feedback you provide.
Technical information such as IP address, browser type, and device information if you interact with our digital systems. This may be collected through standard website or system logs where applicable.
Special instructions that may be necessary to access a property or carry out a service safely and effectively.

We do not intentionally collect sensitive personal data unless it is strictly necessary and you have provided it, or it is otherwise required for a lawful reason. If such data is ever processed, we will apply appropriate safeguards.

2. How We Use Your Data

We use personal data for the following purposes:

To provide cleaning services and manage bookings.
To respond to enquiries and deliver customer support.
To issue quotations, invoices, and payment records.
To communicate appointment updates, service changes, or important notices.
To maintain business records and service history.
To handle complaints, disputes, and insurance-related matters.
To comply with legal, tax, accounting, and regulatory requirements.
To improve service quality, training, and internal operations.

We only use personal data for purposes that are compatible with the reason it was originally collected, unless we have a lawful basis to do otherwise.

3. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis to process personal data. Depending on the context, Enfield Cleaners may rely on one or more of the following lawful bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes taking bookings, carrying out cleaning services, processing payments, and managing service-related communication.

Legal Obligation

We process certain information to comply with legal obligations, including accounting, tax, business recordkeeping, and responding to lawful requests from public authorities where required.

Legitimate Interests

We may process personal data where it is necessary for our legitimate interests, provided your rights and freedoms do not override those interests. Examples include managing our business operations, improving services, preventing fraud, maintaining security, and keeping accurate internal records. When relying on legitimate interests, we consider the potential impact on you and ensure appropriate safeguards are in place.

Consent

In limited situations, we may rely on your consent, for example where you have expressly agreed to optional communications or non-essential processing. Where consent is used, you may withdraw it at any time.

4. Retention of Personal Data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including any legal, accounting, or reporting requirements. The retention period may vary depending on the type of information and the reason it is held.

Customer and booking records are generally kept for the duration of our relationship and for a reasonable period afterwards to manage queries, disputes, or service history.
Financial and invoice records are retained for the period required by tax and accounting law.
Communication records may be retained for as long as needed to resolve issues, support service continuity, or defend legal claims.
Marketing-related data, where applicable, is kept until you withdraw consent or object where we rely on legitimate interests.

When personal data is no longer required, we will securely delete it, anonymise it, or otherwise dispose of it in a safe manner.

5. Processors and Data Sharing

We may share personal data with third parties who act as processors on our behalf, meaning they only process data according to our instructions and must keep it secure. These may include:

Payment service providers who handle card or online payment processing.
Accounting and bookkeeping providers who assist with financial records and compliance.
IT and cloud storage providers who support secure data storage, email services, or business systems.
Customer management or scheduling tools used to organise bookings and service communications.
Professional advisers such as accountants, insurers, or legal advisers where necessary.

We may also disclose personal data where required by law, for example to law enforcement, regulators, courts, or other authorities. We do not sell your personal data.

6. International Transfers

Where a processor or service provider stores or accesses data outside the United Kingdom, we will ensure appropriate safeguards are in place. These may include adequacy regulations, standard contractual clauses, or other legally recognised transfer mechanisms.

7. Security of Personal Data

We use reasonable technical and organisational measures to protect personal data against unauthorised access, accidental loss, misuse, disclosure, or alteration. These measures may include access controls, secure storage, password protection, and internal policies limiting access to those who need it.

While we take appropriate steps to protect data, no system can be guaranteed to be completely secure. We therefore encourage customers to contact us promptly if they believe their information may have been compromised.

8. Your Rights Under GDPR

You have several rights in relation to your personal data. These rights may be subject to legal limits and exceptions, but we will always respond appropriately and within the required timeframe.

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete data.
Right to erasure – you may request deletion of your data in certain circumstances.
Right to restriction – you can ask us to limit how we use your data in certain situations.
Right to object – you may object to processing based on legitimate interests.
Right to data portability – you can request that certain data be provided in a structured, commonly used format.
Right to withdraw consent – if we rely on consent, you can withdraw it at any time.

You also have the right to raise concerns with the relevant data protection authority if you believe your rights have been infringed. We encourage you to contact us first so we can try to resolve any concern directly and promptly.

9. Children’s Data

Our services are intended for adults and business customers. We do not knowingly collect personal data from children unless it is incidentally provided in the course of service delivery and only where necessary. If we become aware that we have collected data from a child without appropriate basis, we will take steps to delete it.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. Any updated version will apply from the date it is made available. We recommend reviewing this policy periodically to remain informed about how we protect your personal data.

Summary of Commitment: Enfield Cleaners processes customer data lawfully, securely, and transparently. We collect only what is necessary, use it for clear business purposes, retain it for defined periods, rely on appropriate legal bases, and respect your data protection rights.