Deep Deep Cleaning Privacy Policy

This Privacy Policy explains how Deep Deep Cleaning collects, uses, stores and protects personal data relating to our customers and prospective customers. It applies to all Deep Deep Cleaning customers in our service area who make enquiries, request quotations, or use our cleaning services in any capacity.

We are committed to processing personal data fairly, transparently and in accordance with the UK General Data Protection Regulation and any applicable local data protection laws. This Privacy Policy describes the categories of data we process, the purposes for which we use it, the lawful bases that apply, and the rights that individuals have in relation to their personal data.

Personal Data We Collect

We may collect and process the following categories of personal data when you contact us, request a quote, book a service or otherwise interact with Deep Deep Cleaning:

Identification and contact details, such as your name, postal address, property address for the cleaning service, and any alternative contact details you choose to provide. Service information, such as details about the type of property, areas to be cleaned, frequency of cleaning, special instructions or access details that you provide to enable us to carry out our services safely and effectively. Communication records, including information contained in enquiries, messages and feedback you send to us, as well as notes we make about our interactions with you for customer service purposes. Billing and payment information, such as details necessary to issue invoices, record payments and maintain financial records. We do not store full payment card details in our own systems. Usage and preference information that may be generated when you interact with our website or digital communications, such as details about the pages you view and how you interact with our content, where such data is collected in accordance with applicable law. Limited technical data, such as the date and time of contact or interaction and general information about the device or browser used, where relevant for security or diagnostics.

We generally obtain personal data directly from you, for example when you provide information by phone, in person, in writing, through online forms or via other communication channels. In some cases we may receive information from third parties who introduce you to us, such as partners or referral sources, but only where this is carried out lawfully.

Purposes and Lawful Bases for Processing

We only process personal data when we have a valid lawful basis under data protection law. Depending on the context, we may process your data for the following purposes and on the following bases:

To provide quotations and respond to enquiries. When you contact us to request information or a quote for cleaning services, we process your contact and service information to respond. The lawful basis is that this processing is necessary to take steps at your request prior to entering into a contract. To perform a contract. When you book Deep Deep Cleaning services, we process your personal data to manage and deliver the agreed services, arrange appointments, access the premises, and communicate with you about your booking. The lawful basis is that the processing is necessary for the performance of a contract with you. To manage billing and accounts. We use your data to issue invoices, process payments, manage our accounts, and maintain financial and tax records. The lawful basis is the performance of a contract and our legitimate interests in running our business, as well as compliance with legal obligations relating to record keeping. To provide customer support. We may process your information to handle queries, complaints, rescheduling requests and feedback. The lawful basis is our legitimate interests in providing an effective and high quality service to our customers and maintaining customer relationships. For service improvement and business management. We may use non excessive personal data to monitor service quality, train staff, plan resources, and improve our processes. The lawful basis is our legitimate interests in developing and managing our services. For marketing with your consent or legitimate interests. We may use your contact details to send you information about our services, offers or updates. Where required by law, we will only send such communications if you have given your consent, which you can withdraw at any time. In other cases, we may rely on our legitimate interests in promoting our services, while always providing you with a clear opportunity to opt out. To comply with legal obligations. We may process personal data where necessary to comply with laws and regulations, respond to lawful requests from authorities, or establish, exercise or defend legal claims. The lawful basis is compliance with a legal obligation or our legitimate interests in protecting our rights.

Data Retention

We will not keep personal data for longer than is reasonably necessary for the purposes set out in this Privacy Policy.

The length of time we retain data will depend on several factors, including the nature of the data, the reason it was collected, and any legal or regulatory obligations to retain it. In general, we will retain customer records for a period that allows us to respond to queries about past services, fulfil our contractual commitments, and meet accounting and tax requirements. After the relevant retention period expires, we will either securely delete or anonymise personal data so that it can no longer be linked to an identifiable individual.

Where we rely on your consent for specific processing, such as certain types of marketing, we will keep the relevant personal data for as long as you remain opted in and will delete or suppress it within a reasonable period after you withdraw consent or opt out, unless there is another lawful basis that requires us to keep the data for a longer period.

Data Processors and Sharing

We may engage carefully selected third party service providers to act as data processors on our behalf. These providers help us operate and manage our business, and may include companies that provide administrative support, secure data storage, invoicing and accounting tools, and communication platforms.

Where we use data processors, they will only process personal data on our documented instructions, for the specific purposes we have authorised, and subject to appropriate contractual terms and security measures. They are not permitted to use your data for their own independent purposes.

We may also share personal data with other third parties where this is necessary and lawful, for example with professional advisers, insurers, or relevant authorities where required by law or needed to protect our rights, property or safety. We do not sell personal data to third parties.

If we transfer personal data outside the United Kingdom or European Economic Area, we will ensure that appropriate safeguards are in place to protect your information in accordance with data protection law, such as ensuring that the recipient is located in a country with adequate data protection laws or that suitable contractual protections are used.

Security of Personal Data

We take appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction or damage. These measures may include access controls, secure storage, limited retention and staff training on data protection responsibilities.

While no system can be guaranteed to be completely secure, we regularly review our security arrangements and aim to ensure that any personal data we handle is protected to a level that is appropriate to the risks associated with its processing.

Your Data Protection Rights

Under data protection law, individuals have a number of rights in relation to their personal data. Subject to certain conditions and exemptions, you may have the right to:

Access your personal data and obtain a copy of the information we hold about you, together with information about how we use it. Request correction of inaccurate or incomplete personal data that we hold about you. Request erasure of your personal data where there is no longer a lawful basis for us to continue processing it, for example where it is no longer needed for the original purpose and no legal obligation requires us to keep it. Request restriction of processing in certain circumstances, such as where you contest the accuracy of the data or object to its processing and we are considering your request. Object to processing of your personal data where we rely on legitimate interests as our lawful basis, including profiling based on those interests, and we will assess whether our interests override your rights and freedoms. Object at any time to the use of your personal data for direct marketing purposes, and we will stop processing your data for that purpose. Request data portability, which in certain cases allows you to receive personal data you have provided to us in a structured, commonly used and machine readable format, and to transmit that data to another controller where technically feasible.

Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. Withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.

If you wish to exercise any of these rights, you can contact us using the details provided in our general contact information. We may need to verify your identity to protect your privacy and security before acting on your request.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time in order to reflect changes in our services, changes in applicable law, or improvements in the way we handle personal data. When we make significant changes, we will take reasonable steps to inform our customers. The most current version of this Privacy Policy will always apply to the personal data we hold and process about you.

By continuing to use Deep Deep Cleaning services after any updates to this Privacy Policy take effect, you acknowledge that you have read and understood the updated terms relating to our processing of your personal data.