Kennington Cleaners Customer Privacy Policy
This Privacy Policy explains how Kennington Cleaners collects, uses, stores and shares personal data relating to customers in our service area, and sets out your rights under the UK General Data Protection Regulation and other applicable data protection laws. It applies to all Kennington Cleaners customers, including regular and one-off domestic or commercial clients.
Who we are and scope of this policy
Kennington Cleaners provides professional cleaning services to customers in our operating area. In the course of providing these services, we act as a data controller for the personal data we collect about you. This Privacy Policy applies to all personal data we process about existing and prospective customers in connection with enquiries, bookings, service delivery and related customer support activities.
Personal data we collect
We may collect and process the following categories of personal data about you:
Contact details, such as your name, billing address, service address, and any alternative contact person you provide to us.
Communication details, such as your preferred method of contact and the content of communications you send to us, including enquiries, feedback and complaints.
Service-related information, such as details of the cleaning services you request, property access instructions, security arrangements you choose to share, and notes relevant to delivering services safely and effectively.
Booking and transaction data, such as dates and times of bookings, records of services performed, prices, invoices, payment status and methods of payment. Where payment is taken via a payment processor, we may receive confirmation that payment has been made, but we do not store full card details.
Technical information, where you interact with us via our website or online services, such as your IP address, basic device and browser information, and information about how you use our site. This may be collected through cookies or similar technologies where applicable and permitted by law.
Preference and marketing data, such as your consent choices and preferences about receiving updates or offers from us.
How we collect your data
We mainly collect personal data directly from you when you contact us to request information, ask for a quotation, make a booking, or when you communicate with us about ongoing services.
We may also receive personal data indirectly in limited circumstances, for example if another person books cleaning services for you and provides your details, or where a commercial client shares contact details of on-site contacts or keyholders to enable service delivery.
Lawful basis for processing
We rely on the following lawful bases under data protection law for processing your personal data:
Contract: We process your personal data where it is necessary to enter into or perform a contract with you, for example to handle your booking, deliver cleaning services, manage payments, and provide customer support.
Legal obligation: We may process data where necessary to comply with legal obligations, such as tax, accounting and audit requirements, and to respond to lawful requests from public authorities.
Legitimate interests: We may process data based on our legitimate business interests, provided these are not overridden by your rights and freedoms. This may include managing and improving our services, keeping records of customer interactions, preventing fraud or misuse of our services, and defending or establishing legal claims.
Consent: In some cases we rely on your consent, for example for certain types of direct marketing that are not based on legitimate interests, or for the use of non-essential cookies where applicable. When we rely on consent, you can withdraw it at any time by contacting us or using any provided opt-out method.
How we use your personal data
We use your personal data to:
Respond to enquiries, provide quotations, and manage bookings and rescheduling.
Deliver cleaning services, including planning visits, accessing the premises as agreed, and tailoring services to your requirements.
Manage billing and payments, issue invoices and receipts, and maintain accurate financial records.
Handle customer service matters, including feedback, complaints, and service quality issues.
Operate, maintain and improve our business, services and customer experience.
Send you important service-related information, such as appointment confirmations and changes to our terms or policies.
Where allowed and appropriate, send you marketing communications about our services, offers or updates, in accordance with applicable law and your preferences.
Protect our business and our customers, including for the detection and prevention of fraud and other unlawful activities.
Data processors and third-party recipients
We may share your personal data with trusted third parties who act as data processors on our behalf. These service providers are only permitted to process your personal data in accordance with our instructions, for specified purposes, and are required to implement appropriate security measures.
Examples of such processors may include:
IT and hosting providers who support our business systems and data storage.
Customer relationship management and scheduling tools used to organise bookings and customer records.
Payment processing providers who facilitate secure payments for our services.
Professional advisers such as accountants or legal advisers where necessary for our legitimate business purposes and legal obligations.
In addition, we may disclose personal data where required by law, for example to law enforcement authorities or regulators, or in connection with legal proceedings, enforcement of our contractual rights, or the protection of our business and customers.
International transfers
If we use service providers located outside the United Kingdom or European Economic Area, we will take steps to ensure that any international transfers of personal data are carried out in compliance with applicable data protection laws. This may include using appropriate safeguards such as standard contractual clauses or ensuring that the destination country has been recognised as providing an adequate level of protection for personal data.
Data retention
We retain your personal data only for as long as is necessary for the purposes for which it was collected, and to comply with legal, accounting or reporting requirements.
In general, customer and booking records are kept for a period that allows us to manage ongoing relationships, address any queries or disputes, and meet our legal obligations. After the relevant retention period has expired, data will be securely deleted or anonymised so that it can no longer be associated with you.
Security of your data
We take appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction or damage. These measures may include access controls, encryption or pseudonymisation where appropriate, secure storage, staff training, and regular review of our security practices.
While we work hard to protect your information, no system can be guaranteed as completely secure. You are also responsible for taking reasonable steps to protect your own information when communicating with us or providing access details for your property.
Your data protection rights
Under data protection laws, you have a number of rights in relation to your personal data. These may include:
The right of access: You can request a copy of the personal data we hold about you, together with information about how it is used.
The right to rectification: You can ask us to correct inaccurate or incomplete personal data.
The right to erasure: In certain circumstances, you can request that we delete your personal data, for example where it is no longer needed for the original purpose and we have no lawful reason to continue processing it.
The right to restrict processing: You can ask us to limit the way we use your data in certain situations, such as while we are considering a request to rectify or erase your data.
The right to data portability: Where processing is based on your consent or on a contract and carried out by automated means, you may have the right to receive the personal data you provided to us in a structured, commonly used and machine-readable format, and to have it transmitted to another controller where technically feasible.
The right to object: You can object at any time to processing of your personal data that is based on our legitimate interests, including profiling related to those interests. You also have an absolute right to object to direct marketing.
The right to withdraw consent: Where we rely on your consent to process your data, you may withdraw that consent at any time. This will not affect the lawfulness of processing carried out before consent was withdrawn.
To exercise any of these rights, or if you have questions about how we handle your personal data, you can contact us using the details provided through our usual customer communication channels.
Complaints and contact
If you are concerned about how we handle your personal data, please contact us in the first instance so that we can try to resolve your concerns. You also have the right to lodge a complaint with the relevant supervisory authority responsible for data protection in your jurisdiction.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or other factors. When we make material changes, we will take appropriate steps to bring them to your attention, such as updating the date of the policy and, where appropriate, providing a more prominent notice. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.