Privacy Policy

Brompton Cleaner Privacy Policy

This Privacy Policy explains how Brompton Cleaner collects, uses, stores, and protects personal data relating to customers within our service area. It also describes your rights under the UK General Data Protection Regulation and related data protection laws. By using Brompton Cleaner services, you acknowledge that you have read and understood this Privacy Policy.

Scope of this Privacy Policy

This Privacy Policy applies to all Brompton Cleaner customers in our service area who use our cleaning and related services, whether the services are booked online, by message, or in person. It covers personal data that we collect directly from you, that arises from providing our services, and that we receive from certain third parties acting on our behalf as processors.

Data Controller

Brompton Cleaner is the controller of the personal data described in this Privacy Policy. As controller, we determine the purposes and means of processing personal data in connection with the provision of our services to customers in our service area.

Types of Personal Data We Collect

We may collect and process the following categories of personal data about you:

Identification and contact details: name, title, postal address, and general contact details you choose to provide to us, such as messaging handles or other contact identifiers.

Service and booking information: details of the services you request, property type and access instructions that you provide, appointment dates and times, frequency of service, information about specific cleaning preferences, and notes relevant to carrying out the service safely and effectively.

Payment and transaction information: information about payments and transactions, such as payment amount, date, time, and method. We do not store full payment card numbers. Where we use payment processors, they may process your payment details on our behalf.

Communications: records of communications between you and Brompton Cleaner, including messages, feedback, complaints, and any other information you choose to provide when you contact us.

Technical and usage information: limited technical data related to your interaction with our online presence, such as basic device and browser information, dates and times of access, and information about how you navigate our booking or contact forms, to the extent necessary to operate and secure our services.

How We Collect Personal Data

We collect personal data directly from you when you contact us, request a quote, make a booking, or communicate with us about our services. We may also receive limited personal data about you from third parties who help us to process payments, manage bookings, or deliver messages.

Lawful Bases for Processing

We only process your personal data where a lawful basis under the GDPR applies. Depending on the specific processing activity, we rely on the following lawful bases:

Performance of a contract: to set up, manage, and fulfil the cleaning services you request from us, including taking bookings, delivering services, managing payments, and handling your queries about those services.

Legal obligations: to comply with legal and regulatory requirements, including record-keeping, tax, accounting, and responding to lawful requests from competent authorities.

Legitimate interests: to operate, improve, and protect our business and services, for example to manage our relationship with you, handle customer support, monitor service quality, prevent fraud and misuse, and keep appropriate business records. When relying on legitimate interests, we assess and balance those interests against your rights and freedoms.

Consent: in limited cases where the law requires your consent, such as for certain direct marketing communications or optional cookies and similar technologies, we will process your personal data only where you have given your consent. Where processing is based on consent, you can withdraw your consent at any time.

Purposes for Which We Use Personal Data

We use your personal data for the following purposes:

To provide and manage the cleaning services you book, including arranging appointments, accessing your premises as instructed, carrying out the requested work, and following up where necessary.

To manage bookings and customer accounts, including confirming or adjusting appointments, sending service-related messages, and maintaining records of services provided.

To process payments, issue receipts, manage invoicing, and maintain financial records.

To respond to your questions, feedback, or complaints, and to provide customer support.

To improve and develop our services, including by reviewing service outcomes, training staff, and analysing aggregated service data to understand demand and enhance efficiency.

To protect our business, our staff, and our customers, including through fraud prevention, dispute resolution, and the enforcement of our terms and conditions.

To comply with legal requirements, including record-keeping, tax, and audit obligations.

Data Retention

We keep your personal data for as long as is necessary to fulfil the purposes for which it was collected and to meet our legal and regulatory obligations. In determining appropriate retention periods, we consider the type of personal data, the potential risk of harm from unauthorised use or disclosure, the purposes for which we process it, and applicable legal requirements.

In general, we retain core customer and service records for as long as you remain an active customer, and for a period after our last interaction with you to respond to queries, manage any disputes, and satisfy legal and accounting requirements. Financial and transaction records may be retained for longer periods as required by tax and accounting rules. When personal data is no longer required, we will securely delete or anonymise it.

Data Processors and Third-Party Recipients

We may share your personal data with trusted third parties who act as processors on our behalf. These processors only process your personal data according to our instructions and are bound by contractual obligations to protect your data and to comply with applicable data protection laws.

Categories of processors and recipients may include:

Payment service providers who process payments and manage related financial transactions.

IT and cloud service providers who host data, provide software tools, store backups, and support our business systems.

Communication and messaging service providers that help us send service-related notifications and manage customer communications.

Professional advisers, such as accountants or legal advisers, where this is necessary for the operation of our business.

We may also disclose personal data where required to comply with legal obligations, to respond to lawful requests from public authorities, or to establish, exercise, or defend legal claims.

International Transfers

Where any of our processors or service providers are located outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your personal data, in accordance with data protection laws. These safeguards may include the use of standard contractual clauses or other lawful transfer mechanisms approved by relevant authorities.

Security of Your Personal Data

We take appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include access controls, secure storage arrangements, and internal policies and training designed to protect personal data. While we take care to protect your personal data, no system can be guaranteed to be completely secure.

Your Data Protection Rights

As a data subject, you have a number of rights in relation to your personal data under the GDPR, subject to certain conditions and exemptions:

Right of access: you have the right to obtain confirmation as to whether we process your personal data and to request a copy of that data.

Right to rectification: you have the right to request correction of inaccurate or incomplete personal data.

Right to erasure: in certain circumstances, you have the right to request the deletion of your personal data.

Right to restriction of processing: you have the right to request that we restrict the processing of your personal data in specific situations.

Right to data portability: where processing is based on consent or contract and carried out by automated means, you may have the right to receive the personal data you provided to us in a structured, commonly used, and machine-readable format and to transmit it to another controller.

Right to object: you have the right to object to the processing of your personal data where we rely on legitimate interests, including profiling based on those interests, and we will stop processing unless we can demonstrate compelling legitimate grounds or the processing is required for legal claims.

Right to withdraw consent: where we process your personal data based on your consent, you have the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

You also have the right to lodge a complaint with a supervisory authority if you believe that your data protection rights have been infringed.

Children

Our services are intended for adult customers. We do not knowingly collect personal data relating to children. If we become aware that personal data relating to a child has been collected inadvertently, we will take appropriate steps to delete that data.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other factors. When we make changes, we will revise the date of the latest version and, where appropriate, inform you through our usual communication channels. We encourage you to review this Privacy Policy periodically to stay informed about how we process your personal data.