Crystal Palace Cleaners Privacy Policy
This Privacy Policy explains how Crystal Palace Cleaners collects, uses, stores, and protects personal data about customers and prospective customers within our service area. It also explains the rights individuals have under applicable data protection laws, including the UK General Data Protection Regulation and the Data Protection Act 2018.
This Privacy Policy applies to all Crystal Palace Cleaners customers and prospective customers in our service area, regardless of how services are requested or provided, including in person, by telephone, or through any online or digital means operated by Crystal Palace Cleaners.
Who We Are and Scope of This Policy
Crystal Palace Cleaners is a cleaning services business providing domestic and commercial cleaning within its defined service area. For the purposes of data protection law, Crystal Palace Cleaners is the data controller for the personal data described in this Privacy Policy. This means we decide how and why personal data is used in connection with our services.
This Privacy Policy covers personal data relating to customers, prospective customers, and individuals acting on behalf of business customers within the Crystal Palace Cleaners service area.
Types of Personal Data We Collect
Crystal Palace Cleaners may collect and process the following categories of personal data, depending on how you interact with us and which services you use:
Identity and contact details, such as name, title, address, and preferred contact details.
Service and booking information, such as property access instructions, cleaning preferences, dates and times of bookings, records of services provided, and related notes necessary to deliver services safely and effectively.
Account and billing information, such as billing address and payment related records. Payment card details are handled by secure payment processors and are not stored by Crystal Palace Cleaners beyond what is necessary to confirm that payment has been made.
Communication records, such as enquiries, feedback, complaints, and any correspondence with us by any communication method we make available.
Technical and usage data, where applicable, such as device and usage information generated when you interact with any online or digital services operated by Crystal Palace Cleaners. This may include log data, basic device identifiers, and basic analytics used to understand how our services are accessed.
How We Collect Personal Data
We collect personal data in a number of ways, including:
Directly from you when you request a quote, make a booking, communicate with us, provide feedback, or enter into a contract for our cleaning services.
From third parties acting on your behalf, such as letting agents, landlords, property managers, or employers who arrange cleaning services for you or your premises.
Automatically when you interact with any online pages, forms, or digital tools we operate, through basic usage or analytics tools that help us maintain and improve our services.
Lawful Bases for Processing Personal Data
Crystal Palace Cleaners will only process personal data when there is a lawful basis to do so under data protection law. Depending on the context, we may rely on the following lawful bases:
Performance of a contract, where processing is necessary to provide our cleaning services, manage bookings, respond to requests, and fulfil our contractual obligations to you.
Compliance with legal obligations, where processing is required to meet legal, regulatory, tax, accounting, or insurance obligations, or to respond to lawful requests from public authorities.
Legitimate interests, where processing is necessary for our legitimate business interests or those of a third party, and those interests are not overridden by your data protection rights. This may include managing and improving our services, maintaining business records, handling customer queries, and protecting our business from fraud and misuse.
Consent, where we rely on your explicit consent for a particular purpose. When we rely on consent, you may withdraw it at any time, and we will explain how to do this at the time consent is obtained.
How We Use Personal Data
We use personal data for the following purposes:
To provide cleaning services, including managing bookings, arranging access to premises, tailoring services to your requirements, and communicating about service delivery.
To manage our customer relationships, including handling queries, feedback, and complaints, and providing information about changes to our services or terms.
To manage payments and billing, including issuing invoices, confirming payment, and maintaining appropriate financial and accounting records.
To improve and develop our services, including reviewing how customers use our services, monitoring service quality, and developing new offerings.
To protect our business and comply with law, including ensuring the security of our operations, preventing fraud or misuse, and meeting regulatory and legal requirements.
Data Retention and Storage
Crystal Palace Cleaners retains personal data only for as long as is necessary to fulfill the purposes for which it was collected, or as required by law or regulation.
We apply the following general retention guidelines:
Customer and service records are kept while you are an active customer and for a period after the last service to handle any queries, disputes, or legal obligations, including tax and accounting requirements.
Financial and billing records are retained for the period required by applicable tax and accounting laws.
Communication records may be kept for a period necessary to respond to enquiries, improve our services, and manage our relationship with you.
When personal data is no longer needed for these purposes, we will securely delete it or anonymise it so that it can no longer be associated with an identifiable individual.
Use of Data Processors and Third Parties
Crystal Palace Cleaners may engage carefully selected third party service providers to process personal data on our behalf. These third parties act as data processors and are only permitted to use personal data in accordance with our documented instructions and for the purposes set out in this Privacy Policy.
Examples of third party processors and partners may include:
Payment processing providers who handle card or electronic payments on our behalf.
IT and systems providers who host or support our booking, communication, or data storage systems.
Professional advisers, such as accountants or legal advisers, to the extent necessary to provide their services and meet legal or regulatory obligations.
Where processors are used, Crystal Palace Cleaners implements appropriate contractual and technical measures to help ensure that personal data is protected and processed lawfully.
We do not sell personal data to third parties. We will only disclose personal data to other third parties, such as law enforcement or regulatory bodies, where required by law or where it is necessary to protect our rights, property, or safety, or the rights, property, or safety of others.
International Data Transfers
Where personal data is processed or stored outside the United Kingdom or the European Economic Area, Crystal Palace Cleaners will ensure that appropriate safeguards are in place to protect that data, in accordance with data protection law. These safeguards may include standard contractual clauses or other legally recognised mechanisms designed to ensure that personal data remains adequately protected.
Security of Personal Data
Crystal Palace Cleaners takes reasonable and appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or damage. These measures include limiting access to personal data to personnel and service providers who need it to perform their duties, using secure systems and processes, and regularly reviewing our security arrangements.
While we take these steps to safeguard personal data, no system can be completely secure. Individuals should also take care to protect their own information when communicating with us or providing access to their premises.
Your Data Protection Rights
Under data protection law, individuals whose personal data we process have a number of rights. These rights apply to all Crystal Palace Cleaners customers and prospective customers in our service area, subject to certain legal limitations and exemptions.
Right of access: You may request confirmation of whether we process your personal data and obtain a copy of that data, together with certain information about how it is used.
Right to rectification: You may request that we correct or complete any inaccurate or incomplete personal data we hold about you.
Right to erasure: In certain circumstances, you may request that we delete your personal data. This right may not apply where we need to retain data to meet legal obligations or to establish, exercise, or defend legal claims.
Right to restriction of processing: You may request that we restrict the use of your personal data in certain situations, for example while we are considering a request to rectify or erase your data.
Right to data portability: In certain cases, you may request a copy of your personal data in a structured, commonly used, and machine readable format, and you may ask us to transfer that data to another controller where technically feasible.
Right to object: You may object to our processing of your personal data where we rely on legitimate interests as our lawful basis. We will stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is required for legal claims.
Right to withdraw consent: Where we rely on your consent to process personal data, you may withdraw that consent at any time. Withdrawal will not affect the lawfulness of processing that took place before consent was withdrawn.
Exercising Your Rights and Complaints
If you wish to exercise any of your data protection rights in relation to personal data held by Crystal Palace Cleaners, you can contact us using the usual communication methods you use to interact with our business. We may need to verify your identity before responding to a request, to ensure that personal data is not disclosed to the wrong person.
You also have the right to lodge a complaint with the relevant data protection supervisory authority if you are concerned about how your personal data is being handled. We encourage you to contact us first so that we have an opportunity to address your concerns.
Changes to This Privacy Policy
Crystal Palace Cleaners may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or how we process personal data. Any updated version will apply from the date it is made available. We recommend that customers and prospective customers within our service area review this Privacy Policy periodically to stay informed about how we protect personal data.
