Privacy Policy - Crystalpalace Cleaner

Crystalpalace Cleaner is committed to protecting the privacy and personal data of its customers, service users, and website visitors. This Privacy Policy explains how we collect, use, store, share, and protect personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to all Crystalpalace Cleaner customers in area and to anyone who receives, requests, or inquires about our cleaning services.

We take privacy seriously and aim to handle personal information fairly, lawfully, and transparently. This policy should be read carefully so you understand what data we collect, why we collect it, how long we keep it, and what rights you have in relation to your personal data.

1. Personal Data We Collect

Crystalpalace Cleaner may collect and process different types of personal data depending on how you interact with us and the services we provide. The information we collect may include:

Identity information such as your name, title, and any relevant account or booking details.
Contact information such as your address, email address, and telephone number.
Service information such as cleaning preferences, access instructions, service history, appointment details, and feedback.
Payment information such as billing records, transaction references, and limited financial details needed to process payments or refunds.
Communication records such as messages, complaints, requests, and notes related to customer support.
Technical data such as IP address, browser type, and device information where applicable through online contact or booking systems.

We only collect data that is necessary for legitimate business purposes and to provide services effectively. We do not intentionally collect more information than we need.

2. How We Use Personal Data

We use personal data for the following purposes:

To respond to enquiries and provide quotes or information about our services.
To manage bookings, appointments, and service delivery.
To process payments, invoices, and related administrative tasks.
To keep accurate customer records and maintain service quality.
To handle complaints, disputes, and service-related queries.
To meet legal, regulatory, tax, and accounting obligations.
To improve our services, customer experience, and internal processes.
To prevent fraud, misuse, or other unlawful activity.

We use your data only for specified and legitimate purposes and will not use it in a way that is incompatible with the reasons it was originally collected.

3. Lawful Basis for Processing

Crystalpalace Cleaner processes personal data only where we have a lawful basis under the UK GDPR. Depending on the circumstances, we may rely on one or more of the following bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes managing cleaning bookings, delivering services, handling payments, and communicating about your service.

Legal Obligation

We may process data where required to comply with legal duties, such as accounting records, tax obligations, insurance requirements, or other regulatory responsibilities.

Legitimate Interests

We may use personal data for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. These interests may include managing customer relationships, improving services, maintaining internal records, and protecting the security of our business.

Consent

Where required, we may rely on your consent, for example for certain optional communications or specific uses of information. If we rely on consent, you may withdraw it at any time. Withdrawing consent will not affect the lawfulness of processing carried out before withdrawal.

4. Data Sharing and Processors

We may share personal data with trusted third parties who help us run our business. These third parties act as data processors when they process data on our behalf and only under our instructions. Examples may include:

Payment service providers.
Accounting and bookkeeping providers.
IT, software, and cloud storage providers.
Communication and customer management systems.
Professional advisers such as legal or insurance advisers where necessary.

We require processors to protect personal data through appropriate technical and organisational measures. They are not permitted to use your data for their own purposes unless separately authorised by law. We may also disclose data if required by law, court order, or lawful request from a public authority.

We do not sell personal data.

5. International Transfers

In some cases, data may be processed or stored outside the UK if our service providers use systems located in other countries. Where this happens, we take steps to ensure that appropriate safeguards are in place, such as approved contractual protections or adequacy arrangements, so that your personal data remains protected to a standard consistent with applicable law.

6. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Retention periods vary depending on the type of information and the reason it is held.

Customer and booking records are kept for the duration of the service relationship and for a reasonable period afterward.
Financial and tax records are kept for the period required by law.
Communication records may be retained for as long as needed to resolve queries, support customer care, or protect against disputes.
Technical and security logs are kept for limited periods to support system security and troubleshooting.

When data is no longer needed, it is securely deleted, anonymised, or destroyed in line with our retention practices. We review retention regularly to avoid keeping data longer than necessary.

7. Data Security

We use appropriate administrative, technical, and physical safeguards to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, confidentiality obligations, and regular review of our data handling practices.

Although we take reasonable steps to protect your information, no system is completely secure. If a personal data breach occurs and is likely to result in a risk to your rights and freedoms, we will take the steps required by law, which may include notifying the relevant authority and affected individuals where appropriate.

8. Your Rights

Under data protection law, you have a number of rights in relation to your personal data. These may include:

Right of access – to request a copy of the personal data we hold about you.
Right to rectification – to ask us to correct inaccurate or incomplete information.
Right to erasure – to request deletion of your data in certain circumstances.
Right to restriction – to ask us to limit how we use your data in certain situations.
Right to object – to object to processing based on legitimate interests or direct marketing.
Right to data portability – to request a copy of certain data in a structured, commonly used format.
Right to withdraw consent – where processing is based on consent.

These rights are not absolute and may be subject to legal exceptions. If you exercise one of your rights, we will review your request and respond within the time required by law. We may ask for information to verify your identity before responding.

9. Children’s Data

Crystalpalace Cleaner does not knowingly collect personal data from children for marketing or service purposes. Our services are intended for adults or for individuals acting on behalf of households, businesses, or property owners. If we become aware that we have collected data from a child without appropriate authority, we will take steps to delete it where required.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or operational needs. Any updated version will apply from the date it is made available. We encourage you to review this policy periodically so you remain informed about how we protect your personal data.

11. Complaints and Further Information

If you are concerned about how your personal data has been handled, you have the right to raise a complaint with the relevant data protection authority. We also encourage you to contact us through the appropriate customer service channels so we can address any concerns directly and promptly.

Crystalpalace Cleaner values trust, privacy, and accountability. We are committed to processing personal data in a lawful, fair, and transparent manner for all Crystalpalace Cleaner customers in area.