Privacy Policy - Deep Cleaning Canarywharf

Last updated: 11 June 2026

This Privacy Policy explains how Deep Cleaning Canarywharf collects, uses, stores, shares, and protects personal data. It applies to all Deep Cleaning Canarywharf customers in the Canary Wharf area, including residential and commercial clients who use our deep cleaning services. We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK GDPR and the Data Protection Act 2018.

Please read this policy carefully to understand your rights and how your information is used.

1. Who We Are

Deep Cleaning Canarywharf provides professional deep cleaning services to customers in Canary Wharf and the surrounding area. In this policy, “we”, “us”, and “our” refer to Deep Cleaning Canarywharf. For the purposes of data protection law, we act as the data controller for the personal data we collect and use in connection with our services.

We determine why and how your personal data is processed when you request, receive, or enquire about our cleaning services.

2. Personal Data We Collect

We only collect personal data that is necessary for providing and managing our services, complying with legal obligations, and improving our operations. The categories of data we may collect include:

Identity details such as your name, title, and business or household name where relevant.
Contact details such as email address, telephone number, and service address.
Service information such as booking details, cleaning preferences, requested dates, property access instructions, and notes about the job.
Billing and payment information such as invoice details and payment status. We do not intentionally store full card details unless necessary for a transaction handled securely by a payment provider.
Communications such as messages, complaints, feedback, and records of correspondence.
Technical and usage data if you interact with our digital systems, which may include IP address, device information, and basic activity logs.
Health or access-related information only where it is necessary for safe service delivery, such as allergy considerations, mobility needs, or access restrictions. Where this type of data is provided, we treat it with additional care.

We do not seek to collect unnecessary sensitive information. If you provide special category data voluntarily, we will only process it where there is a lawful basis and where it is relevant to the service.

3. How We Use Your Data

We use personal data for the following purposes:

To manage enquiries and provide quotations.
To schedule, confirm, and deliver cleaning services.
To communicate with you about your booking, changes, or service-related matters.
To issue invoices, process payments, and maintain accounting records.
To handle complaints, disputes, or service follow-up.
To maintain records for quality assurance, training, and business administration.
To meet legal, tax, insurance, and regulatory obligations.
To improve our service standards and internal processes.

We will never use your personal data for purposes that are incompatible with those described in this policy unless we inform you and have a valid legal basis to do so.

4. Lawful Basis for Processing

We process personal data only where a lawful basis under UK GDPR applies. Depending on the context, our lawful bases may include:

Contract – when processing is necessary to provide a service you have requested, such as booking, performing cleaning work, or handling payment-related administration.
Legal obligation – when processing is required to comply with tax, accounting, employment, health and safety, or other legal requirements.
Legitimate interests – when processing is necessary for our legitimate business interests, such as managing operations, preventing fraud, maintaining service records, or responding to customer enquiries, provided that your rights and freedoms do not override those interests.
Consent – where required, for example for certain optional marketing communications or the processing of specific data that needs your clear agreement.
Vital interests – in rare circumstances where processing is needed to protect someone’s life or physical safety.

Where we rely on consent, you may withdraw it at any time. This will not affect the lawfulness of processing carried out before withdrawal.

5. Sharing Your Data and Processors

We may share personal data with trusted third parties who assist us in delivering our services. These parties act as processors when they process data on our behalf under written instructions and appropriate confidentiality and security measures.

Examples of processors and service providers may include:

Booking and scheduling providers used to manage appointments and service records.
Payment processors used to handle transactions securely.
Accounting and invoicing providers used for financial administration.
IT and cloud storage providers used to securely store business records and communications.
Customer communication tools used for email, telephone, or message delivery.
Professional advisers such as accountants, insurers, or legal advisers where necessary.

We may also disclose data where required by law, court order, or lawful request from a public authority. If our business is sold, merged, or reorganised, personal data may be transferred as part of that process, subject to applicable legal protections.

We do not sell your personal data.

6. Retention of Personal Data

We retain personal data only for as long as necessary for the purposes for which it was collected, including for legal, accounting, and reporting requirements. The retention period depends on the type of information and the reason it is held.

Typical retention periods

Booking and service records: kept for as long as necessary to manage the customer relationship and address any follow-up issues.
Invoice and payment records: kept for the period required by tax and accounting law.
Communication records: retained for a reasonable period to manage service quality, complaints, and business administration.
Technical logs: retained for a limited period for security, troubleshooting, and operational purposes.

When data is no longer needed, we will securely delete, anonymise, or archive it in line with our retention procedures.

7. Data Security

We take the security of personal data seriously and use appropriate technical and organisational measures to protect it from unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures may include restricted access controls, secure storage, password protection, staff confidentiality obligations, and regular review of our information-handling practices.

However, no method of transmission or storage is completely secure, and while we strive to protect your data, we cannot guarantee absolute security.

8. International Transfers

Where personal data is transferred outside the UK, we will ensure that appropriate safeguards are in place to protect it, such as adequacy regulations or approved contractual safeguards. We only transfer data where necessary and where suitable protections exist.

9. Your Rights

Under data protection law, you have several rights in relation to your personal data. These rights may be subject to conditions or exemptions depending on the circumstances.

Right of access – you can request a copy of the personal data we hold about you.
Right to rectification – you can ask us to correct inaccurate or incomplete information.
Right to erasure – you can request deletion of your data in certain circumstances.
Right to restriction – you can ask us to limit how we use your data in certain situations.
Right to object – you can object to processing based on legitimate interests or direct marketing.
Right to data portability – you can request transfer of certain data in a structured, commonly used format where applicable.
Right to withdraw consent – where we rely on consent, you may withdraw it at any time.
Right to lodge a complaint – you may complain to the relevant data protection authority if you believe your rights have been infringed.

We encourage you to contact us first so we can address any concern promptly and professionally. We will respond to valid requests within the timeframes required by law.

10. Children’s Data

Our services are not directed at children, and we do not knowingly collect personal data from children except where it is incidentally provided by an adult customer in connection with a service arrangement. If we become aware that we have collected data from a child without appropriate permission or legal basis, we will take steps to delete it where required.

11. Marketing Communications

We may send service updates or relevant communications where this is necessary for our relationship with you. If we send optional marketing messages, we will do so only where permitted by law and, where required, with your consent or under the soft opt-in rules. You may opt out of marketing at any time.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or our data-handling practices. The updated version will apply from the date it is published or otherwise communicated to you. We encourage you to review this policy periodically to stay informed.

13. Summary of Our Commitment

Deep Cleaning Canarywharf is committed to protecting personal data and respecting privacy. We collect only the information we need, use it for clear and lawful purposes, retain it only as long as necessary, and share it only with trusted processors or where the law requires it. We also recognise and respect your rights over your personal data.

This policy applies to all Deep Cleaning Canarywharf customers in the Canary Wharf area.

By using our services, you acknowledge that you have read and understood this Privacy Policy.