Knightsbridge Cleaners Privacy Policy

This Privacy Policy explains how Knightsbridge Cleaners collects, uses and protects personal data relating to our customers. It applies to all Knightsbridge Cleaners customers within our service area, whether you contact us online, by post, or in person, and whether you are a regular or one-off customer.

We are committed to handling your personal data in accordance with the UK General Data Protection Regulation and any other applicable data protection laws. This Privacy Policy is intended to provide clear and transparent information about our processing of your personal data.

Personal Data We Collect

We collect and process different categories of personal data depending on how you interact with us and the services you request. This may include:

Identification and contact details such as your name, postal address, billing address, service address, and any other address you provide, as well as information such as your preferred contact method.

Account and service information such as details of the cleaning services you request, frequency of service, property type, access instructions you choose to provide, booking history, and communications relating to your bookings.

Payment and transaction data such as payment method details processed through our chosen payment processors, transaction dates, amounts, and invoices. We do not store full payment card details; these are handled by our payment service providers.

Communication records such as enquiries, complaints, feedback and any correspondence you send to us, including notes made by our staff when handling your requests.

Technical and usage data such as basic technical information when you visit our website, including your approximate location, device type, and pages accessed. This may involve cookies or similar technologies, where permitted by law and your browser settings.

Sensitive or special category data is not intentionally collected. We ask that you do not provide health or other special category information. If you choose to share such information, it will be processed only where strictly necessary and lawful, for example to take account of allergies relevant to cleaning products used in your premises.

Purposes and Lawful Basis for Processing

We process your personal data for specified, explicit and legitimate purposes. For each purpose, we rely on one or more lawful bases under the UK GDPR.

To provide and manage cleaning services including creating and managing your customer account, processing bookings, arranging access to premises, performing the cleaning service and handling payments. The lawful basis is performance of a contract, and where you act on behalf of a business, our legitimate interests in providing services.

To communicate with you about your bookings including confirming appointments, notifying you of changes, responding to your enquiries, and dealing with complaints or service issues. The lawful basis is performance of a contract and our legitimate interests in efficient customer service and service quality.

To manage our business operations including accounting, invoicing, debt recovery, record keeping, staff training and quality control. The lawful basis is our legitimate interests in running and improving our business and compliance with legal obligations relating to tax and accounting.

To send service related messages such as important updates about our terms, privacy policy or changes to our services. The lawful basis is compliance with legal obligations and our legitimate interests in keeping you informed about material changes.

To send marketing communications about our services where permitted by law. The lawful basis is consent when you have opted in, or our legitimate interests in promoting our services to existing customers, subject to your right to object at any time.

To ensure security and prevent misuse including detecting and preventing fraud, misuse of our services or website, and ensuring the safety of our staff and customers. The lawful basis is our legitimate interests in protecting our business and others from harm.

Data Sharing and Processors

We do not sell your personal data. We may share your data with selected third parties where necessary for the purposes described in this Privacy Policy.

Service providers acting as data processors may process personal data on our behalf. These may include providers of payment processing, customer relationship management, cloud hosting, email and messaging tools, accounting systems, and information technology support. We ensure that such processors are subject to contractual obligations that require them to protect your data and use it only according to our instructions and applicable law.

Professional advisers such as accountants, auditors, or legal advisers may have access to relevant data where this is necessary to provide professional services and fulfil their legal or regulatory duties.

Public authorities and regulators may receive personal data where we are legally required to disclose it. This could include law enforcement, tax authorities, or other government bodies.

In the event of a business restructuring, merger, or transfer, we may share data with potential or actual buyers or partners, subject to appropriate confidentiality safeguards and in accordance with data protection law.

International Data Transfers

Where any of our service providers or their systems are located outside the United Kingdom or the European Economic Area, we will take appropriate steps to ensure that your personal data is afforded an equivalent level of protection. This may include the use of standard contractual clauses or other safeguards approved by data protection authorities.

Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, or to meet legal, accounting, or reporting requirements.

Customer account and booking information is generally retained for the duration of your relationship with us and for a reasonable period afterwards, typically up to six years, in order to answer queries, handle complaints, maintain business records and comply with tax and accounting obligations.

Payment and transaction records are retained for periods required by law, usually up to six years after the relevant financial year.

Marketing data is retained for as long as you remain subscribed or until you object to or withdraw consent for receiving marketing communications. We will delete or anonymise your data when it is no longer required for the purposes for which it was collected.

In determining appropriate retention periods, we consider the nature and sensitivity of the data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it and whether those purposes can be achieved by other means.

Your Data Protection Rights

You have rights in respect of the personal data we hold about you. These rights may be subject to certain conditions and exemptions under applicable law.

Right of access You can request confirmation as to whether we process your personal data and obtain a copy of that data together with information about how it is processed.

Right to rectification You can request that inaccurate or incomplete personal data is corrected or updated.

Right to erasure You can request deletion of your personal data where there is no longer a valid reason for us to keep it, for example where the data is no longer needed for the original purpose, you withdraw consent where consent was the lawful basis, or you successfully object to our processing. We may retain certain data where necessary to comply with legal obligations or to establish, exercise or defend legal claims.

Right to restrict processing You can request that we temporarily limit the use of your data in certain situations, for example while we are considering an objection or reviewing the accuracy of the data.

Right to object You can object at any time to processing based on our legitimate interests, including direct marketing. If you object to direct marketing, we will stop sending it. For other legitimate interest processing, we will stop unless we have compelling legitimate grounds that override your interests or the processing is required for legal claims.

Right to data portability Where processing is based on your consent or on a contract and carried out by automated means, you can request that we provide your personal data in a structured, commonly used and machine readable format, or that we transmit it to another controller where technically feasible.

Right to withdraw consent Where we rely on your consent, you may withdraw that consent at any time. This will not affect the lawfulness of processing carried out before consent was withdrawn, but we will stop the relevant processing going forward.

You also have the right to lodge a complaint with a data protection supervisory authority if you believe that your data protection rights have been infringed.

Changes To This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, legal requirements or how we process personal data. When we make changes, we will revise the date of the latest version and take reasonable steps to inform customers where the changes are significant. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your personal data.