Privacy Policy - Oven Cleaning Bow

This Privacy Policy explains how Oven Cleaning Bow collects, uses, stores, shares, and protects personal data when providing services to customers in the Bow area. It applies to all Oven Cleaning Bow customers in area, including people who enquire about services, receive quotations, book appointments, make payments, or otherwise interact with us in connection with our oven cleaning services.

We are committed to handling personal data in a lawful, fair, and transparent manner in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. We only collect the information needed to deliver our services, manage customer relationships, comply with legal obligations, and improve the quality of our work.

1. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity details such as your name and title.
Contact details such as your address, email address, and telephone number.
Service details such as your booking preferences, property access information, cleaning instructions, and service history.
Payment information such as payment status, billing records, and limited transaction details.
Communication records such as emails, messages, complaint details, and notes from phone conversations.
Technical and usage data if you interact with our digital systems, including basic device or browser information and records of website use where applicable.
Operational data such as appointment schedules, staff notes, and records needed to complete a service safely and efficiently.

We do not intentionally collect special category data unless you choose to provide it to us and it is necessary for a specific service-related reason, for example access arrangements or health and safety information. If such data is provided, we will handle it with appropriate care and only where lawful to do so.

2. How We Use Personal Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To manage bookings, arrivals, cancellations, and service delivery.
To communicate with customers about appointments, instructions, or service updates.
To process payments, issue records, and maintain accounts.
To handle complaints, queries, and after-service support.
To maintain internal records and service quality standards.
To comply with legal, tax, accounting, and insurance obligations.
To protect our business, staff, and customers from fraud, misuse, or unsafe practices.

We only use personal data where necessary and appropriate. We do not sell personal data and we do not use customer data for unrelated purposes without a lawful basis.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each processing activity. We rely on the following lawful bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes taking bookings, arranging access, delivering cleaning services, managing invoicing, and handling customer support connected to a service you have requested.

Legitimate Interests

We may process personal data where it is necessary for our legitimate interests and where your rights and freedoms do not override those interests. This may include managing our business operations, keeping service records, improving customer experience, preventing fraud, and protecting our staff and property.

Legal Obligation

We may need to process and retain certain information to comply with legal obligations, including tax rules, accounting requirements, health and safety obligations, and record-keeping duties.

Consent

In limited situations, we may rely on your consent, for example where we need to use optional information or send certain types of marketing communication. Where consent is used, you may withdraw it at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before it was withdrawn.

4. How We Share Personal Data

We may share personal data with trusted third parties only where necessary and only for legitimate business purposes. These may include:

Payment providers who help process transactions securely.
Accountants and bookkeepers who assist with financial records and compliance.
IT and cloud service providers who support secure storage, communication, or system management.
Scheduling and administrative tools used to organise bookings and customer records.
Insurance providers, legal advisers, or regulators where disclosure is needed to protect legal rights or meet obligations.
Subcontractors or workers who need access to limited customer details in order to perform a service on our behalf.

All processors and service providers are required to handle personal data securely, act only on our instructions, and implement appropriate technical and organisational measures to protect it.

5. Data Processors

A data processor is a third party that processes personal data on our behalf. We use processors only where they provide adequate guarantees of confidentiality, security, and compliance with data protection laws. Examples of processor activities may include:

Hosting customer records in secure systems.
Providing email, scheduling, or communications tools.
Processing payments on our behalf.
Supporting bookkeeping, invoicing, or document storage.

We remain responsible for ensuring that any processor used by us handles data properly and only for the agreed purpose. Where required, we put contractual protections in place to safeguard personal data.

6. Data Retention

We keep personal data only for as long as necessary for the purpose it was collected, or for as long as required by law. Retention periods vary depending on the type of data and the reason for processing.

Quotation and enquiry records are generally kept for a limited period so we can respond to follow-up questions or manage potential future bookings.
Customer service and booking records may be retained for the duration of the service relationship and for a reasonable period afterwards.
Financial and tax records are kept for the period required by accounting and legal rules.
Complaint or dispute records may be kept longer where necessary to defend legal claims or resolve issues.

When personal data is no longer needed, it is securely deleted, anonymised, or otherwise disposed of in a safe and appropriate manner.

7. Data Security

We take reasonable technical and organisational steps to protect personal data against accidental loss, unlawful access, misuse, alteration, or disclosure. These measures may include access controls, password protection, secure storage, limited staff access, and careful management of paper and digital records. However, no system can be guaranteed to be completely secure, so we cannot promise absolute security.

8. International Transfers

Where personal data is transferred outside the United Kingdom, we will only do so where appropriate safeguards are in place and the transfer is permitted under data protection law. These safeguards may include adequacy regulations or approved contractual protections.

9. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These rights may apply depending on the circumstances:

Right of access - to request a copy of the personal data we hold about you.
Right to rectification - to ask us to correct inaccurate or incomplete information.
Right to erasure - to ask us to delete personal data in certain situations.
Right to restriction - to ask us to limit the way we use your data in certain circumstances.
Right to data portability - to request that data you provided be transferred in a structured, commonly used format where applicable.
Right to object - to object to processing based on legitimate interests, and in some cases to direct marketing.
Right to withdraw consent - where we rely on consent, you may withdraw it at any time.

If you exercise one of these rights, we may need to verify your identity before responding. We will consider each request in accordance with applicable law.

10. Children’s Data

Our services are intended for adult customers. We do not knowingly collect personal data from children unless it is necessary for a service-related reason and provided by an adult with authority to do so. If we become aware that data has been collected improperly, we will take appropriate steps to delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or operational practices. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how personal data is handled.

12. Summary of Our Commitment

Oven Cleaning Bow is committed to using personal data responsibly, securely, and lawfully. We collect only the information needed to deliver our oven cleaning services in the Bow area, rely on appropriate lawful bases for processing, retain data only as long as necessary, and use trusted processors under proper safeguards. Customers have clear rights over their personal data, and we aim to respect those rights at all times.