Privacy Policy - Docklands Cleaners

This Privacy Policy explains how Docklands Cleaners collects, uses, stores, and protects personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It applies to all Docklands Cleaners customers in the area, including individuals who enquire about our services, request a quotation, book cleaning services, receive services at a property, or otherwise interact with us in connection with our cleaning work.

We are committed to handling personal data lawfully, fairly, and transparently. We only collect personal information that is necessary for providing our services, managing our business, meeting legal obligations, and improving service quality. This policy should be read carefully so you understand how your information is used and what rights you have.

1. Data Collection

We may collect and process personal data directly from you, from third parties acting on your behalf, or automatically when you communicate with us. The types of information we may collect include:

Identity details such as your name and title.
Contact information such as your phone number, email address, and service address.
Service details such as booking history, service preferences, access instructions, and cleaning requirements.
Billing and payment information such as payment status, invoices, and transaction records.
Communications including emails, messages, notes from calls, complaints, and feedback.
Technical information if you interact with our digital systems, such as IP address, device information, or browser data.
Special categories of data only where necessary and with appropriate safeguards, for example where you voluntarily provide information about allergies, health-related sensitivities, or other access needs relevant to cleaning.

We do not intentionally collect more information than we need. If you choose not to provide certain data, we may not be able to deliver some services or respond to your request fully.

2. How We Use Personal Data

We use personal data for the following purposes:

To respond to enquiries and provide quotations.
To schedule, confirm, and deliver cleaning services.
To manage customer accounts, bookings, and service notes.
To process payments, issue invoices, and maintain financial records.
To communicate with customers about appointments, changes, and service-related matters.
To handle complaints, resolve disputes, and improve service quality.
To maintain internal records and ensure operational efficiency.
To comply with legal, tax, accounting, and regulatory requirements.
To protect our business, staff, customers, and property against fraud, abuse, or misuse.

We may also use aggregated or anonymised information for reporting and business analysis. Where information has been anonymised so that it no longer identifies an individual, it is no longer considered personal data under data protection law.

3. Lawful Basis for Processing

We only process personal data where we have a lawful basis under UK GDPR. Depending on the specific activity, our lawful bases may include:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes arranging quotations, managing bookings, carrying out cleaning services, and handling payments.

Legal Obligation

We process some information where we are required to do so by law, such as for tax, accounting, insurance, or regulatory record-keeping purposes.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided your rights and interests do not override those interests. Examples include managing our customer relationships, improving our services, preventing fraud, securing our systems, and maintaining accurate records.

Consent

Where required, we rely on your consent. For example, if you provide optional health-related information or agree to certain types of communication not strictly necessary for service delivery, we will only process that information on the basis of your consent. You may withdraw consent at any time, although this will not affect processing already carried out before withdrawal.

Vital Interests

In rare situations, we may process data to protect someone’s vital interests, such as where urgent safety information is necessary.

4. Retention of Personal Data

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including meeting legal, accounting, and reporting requirements. The exact retention period depends on the type of data and the reason it is held.

Customer and booking records are generally kept for as long as needed to manage the service relationship and for a reasonable period afterwards in case of queries or disputes.
Financial and tax records are retained for the period required by law.
Communications and complaint records may be kept for a period needed to resolve issues, demonstrate service quality, or support legal claims.
Consent-based data is retained only while consent remains valid or until it is no longer needed.

When personal data is no longer required, we will securely delete, destroy, or anonymise it. Where deletion is not immediately possible due to backup systems or technical constraints, the data will be isolated and protected until removal is completed.

5. Processors and Third Parties

We may share personal data with trusted third parties who act as data processors on our behalf, or in limited cases as independent controllers. These parties are only permitted to process personal data for specified purposes and under appropriate contractual safeguards.

Examples of processors may include:

Payment service providers who handle transactions securely.
Accounting or bookkeeping providers who assist with invoicing and financial administration.
IT and cloud service providers who support data storage, communication systems, or business software.
Scheduling or customer management systems used to organise bookings and service records.
Professional advisers such as legal, tax, insurance, or audit advisers where necessary.

We require processors to implement appropriate technical and organisational measures to protect your personal data. We do not allow processors to use your information for their own purposes unless they are independently acting as a controller and have a lawful basis to do so.

We may also disclose data where required by law, court order, or a competent public authority, or where necessary to establish, exercise, or defend legal claims.

6. Data Security

We take the security of personal data seriously and use measures designed to protect it from unauthorised access, loss, misuse, alteration, or disclosure. These measures may include access controls, password protection, staff confidentiality obligations, secure storage practices, and limited access to information on a need-to-know basis.

Although we make reasonable efforts to safeguard data, no system can be guaranteed to be completely secure. If a personal data breach occurs and we are legally required to do so, we will notify affected individuals and the relevant supervisory authority.

7. Your Rights

Under data protection law, you have several rights in relation to your personal data. These rights may be subject to conditions and exemptions, but we will always respond appropriately and within the required timeframe.

Right of access – you may request a copy of the personal data we hold about you.
Right to rectification – you may ask us to correct inaccurate or incomplete data.
Right to erasure – you may request deletion of your data in certain circumstances.
Right to restrict processing – you may ask us to limit how we use your data in certain situations.
Right to object – you may object to processing based on legitimate interests, including direct marketing where applicable.
Right to data portability – you may request that certain data be provided to you or another organisation in a structured, commonly used format.
Right to withdraw consent – where we rely on consent, you may withdraw it at any time.
Right to complain – you may raise concerns with the relevant data protection authority if you believe your rights have been infringed.

If you wish to exercise any of these rights, we may need to verify your identity before responding. This is to protect your information from unauthorised access.

8. Children’s Data

Our services are intended for adult customers and property occupants as part of cleaning arrangements. We do not intentionally collect personal data from children unless it is necessary and provided by an adult with appropriate authority. If we become aware that we have collected data from a child without proper authorisation, we will take steps to address it promptly.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or operational requirements. Any updated version will apply from the date it is issued. We encourage customers to review this policy periodically so they remain informed about how we protect personal data.

10. Summary of Our Commitment

Docklands Cleaners is committed to processing personal data in a lawful, fair, and transparent manner. We collect only the information needed to provide reliable cleaning services, maintain accurate records, meet our legal obligations, and support customer service. We use appropriate safeguards, work only with trusted processors, and respect the rights of individuals whose data we process. This policy applies to all Docklands Cleaners customers in area and is designed to ensure that your personal information is handled with care and respect.

By using our services, you acknowledge that your personal data may be processed in accordance with this Privacy Policy.