Privacy Policy - Oven Cleaning Richmond

This Privacy Policy explains how Oven Cleaning Richmond collects, uses, stores, shares, and protects personal data when providing oven cleaning and related services. It applies to all Oven Cleaning Richmond customers in the area, including prospective customers, current customers, and anyone who contacts us to request a quote, make a booking, or enquire about our services.

We are committed to handling personal data in a lawful, fair, and transparent way in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Please read this policy carefully to understand how your information is managed.

1. Information We Collect

We collect only the personal data that is necessary to provide our services, manage our business, and meet our legal obligations. The types of information we may collect include:

Identity details such as your name and title.
Contact details such as your phone number and email address.
Service details such as your address, booking preferences, property access notes, and information relevant to the oven cleaning service.
Payment information such as transaction records and payment confirmation, although we do not usually store full card details.
Communication records such as enquiries, messages, complaints, and feedback.
Technical information if you interact with us electronically, such as basic device or usage data collected through standard website or system logs.

We do not intentionally collect special category data unless it is provided by you and is strictly necessary for a service-related reason, such as access needs or instructions that help us complete the work safely. Where such data is provided, we handle it with additional care and only for the purpose for which it was shared.

2. How We Use Your Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To arrange, confirm, and deliver oven cleaning services.
To manage appointments and customer records.
To process payments and maintain financial records.
To handle complaints, disputes, and service follow-up.
To meet legal, tax, and regulatory obligations.
To protect against fraud, misuse, or unlawful activity.
To improve our service quality and customer experience.

We only use your data for clear and legitimate purposes. Your privacy matters to us, and we aim to keep our use of information proportionate to the service you receive.

3. Lawful Basis for Processing

Under UK GDPR, we must have a lawful basis for using personal data. Depending on the activity, we rely on one or more of the following legal grounds:

Contract

We process your data when it is necessary to enter into or perform a contract with you. This includes handling bookings, service delivery, billing, and customer support.

Legal Obligation

We may process and retain certain information to comply with legal requirements, including accounting, tax, insurance, and record-keeping duties.

Legitimate Interests

We may use your information where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights. This can include maintaining customer records, improving services, preventing fraud, and managing internal administration. We always consider whether the processing is reasonable and whether it affects your privacy.

Consent

In limited situations, we may ask for your consent, for example where it is appropriate to use information for a specific optional purpose. Where consent is used, you can withdraw it at any time.

We do not rely on consent where another lawful basis is more appropriate.

4. Data Sharing and Processors

We may share personal data with trusted third parties where necessary to operate our business and deliver services. These third parties act as processors when they process data on our behalf, or as independent controllers where they use data for their own legal purposes.

Examples of processors may include:

Booking and scheduling software providers.
Payment service providers.
IT and cloud storage providers.
Email and communication service providers.
Accountants, bookkeepers, and professional advisers.
Customer management or administrative support services.

Where we use processors, we ensure that they are contractually required to protect personal data, use it only for authorised purposes, and implement appropriate security measures. We do not sell your personal data.

We may also disclose information if required by law, court order, or lawful request from a public authority, or where necessary to protect our rights, safety, customers, or property.

5. Retention of Personal Data

We keep personal data only for as long as necessary for the purpose it was collected, unless a longer retention period is required or permitted by law. Retention periods vary depending on the type of data and the reason we hold it.

Customer service records are typically kept for the duration of the service relationship and for a reasonable period afterwards.
Financial and tax records are kept for the period required by law.
Communication records may be retained for operational, dispute-resolution, or legal purposes.
Inactive enquiry data may be deleted after a reasonable time if no booking is made.

When data is no longer needed, we will delete it securely or anonymise it so that it can no longer identify you. Retention is reviewed periodically to ensure we keep information only where there is a valid reason to do so.

6. Data Security

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, password protection, and limiting access to staff or contractors who need the information to perform their work.

While no system can be guaranteed completely secure, we work to maintain a level of protection that is suitable for the nature of the data we process. If a personal data breach occurs and it is likely to result in a risk to your rights and freedoms, we will respond in accordance with our legal obligations.

7. Your Rights

As a data subject under UK GDPR, you have a number of rights in relation to your personal data. These rights may apply depending on the circumstances and any legal exceptions.

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete data.
Right to erasure – you can request deletion of your data where there is a legal basis to do so.
Right to restrict processing – you can ask us to limit how we use your data in certain situations.
Right to object – you can object to processing based on legitimate interests or direct marketing, where applicable.
Right to data portability – you can request a copy of certain data in a structured, commonly used format.
Right to withdraw consent – where we rely on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond within the time limits set by law, usually within one month. We may need to verify your identity before acting on your request.

8. International Transfers

Where any service provider stores or processes data outside the United Kingdom, we will ensure that appropriate safeguards are in place. These safeguards may include adequacy regulations, standard contractual clauses, or other lawful transfer mechanisms. We take steps to ensure your information remains protected to a standard that is consistent with UK data protection law.

9. Children’s Data

Our services are intended for adults and household customers. We do not knowingly collect personal data from children unless it is incidentally provided in connection with a household service and is necessary for service delivery. If we become aware that we have collected data unlawfully, we will take appropriate steps to delete it.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our business practices, or the way we process personal data. Any updated version will apply from the date it is made available. We encourage customers to review this policy periodically so they remain informed about how their information is used.

11. Summary of Our Commitment

We process personal data fairly, securely, and only where we have a lawful reason to do so. We collect the information needed to provide oven cleaning services, communicate with customers, manage administration, and comply with legal obligations. We keep data only for as long as necessary, use trusted processors where appropriate, and respect the rights of every customer in the Richmond area.

Privacy, transparency, and responsible data handling are central to how Oven Cleaning Richmond operates.