Sutton Cleaners Privacy Policy
This Privacy Policy explains how Sutton Cleaners collects, uses, stores and protects personal data relating to our customers in our service area. It also explains your rights under the UK General Data Protection Regulation and related data protection laws. Sutton Cleaners is committed to handling your personal data lawfully, fairly and transparently.
Scope and who this policy applies to
This Privacy Policy applies to all individual customers of Sutton Cleaners within our service area, including visitors to our premises and individuals who contact us by any communication method. By using our services, you acknowledge that you have read and understood this Privacy Policy.
Data controller
Sutton Cleaners is the data controller for the personal data that we collect and process about you in connection with the provision of our cleaning and related services. As data controller, we decide why and how your personal data is processed and are responsible for ensuring that such processing complies with applicable data protection laws.
Personal data we collect
We may collect and process the following categories of personal data about you, depending on how you use our services:
Identification and contact details, such as your name, home or business address, collection and delivery addresses, and other contact information you provide to us.
Service and order details, such as records of the services you request or purchase, items we clean for you, dates and times of collection and delivery, order notes you provide, and your preferences regarding services.
Payment and transaction information, such as records of payments made, payment method type, and related billing information. We do not store full card details where payments are processed through a third-party payment processor.
Communication records, such as enquiries, complaints, feedback and other correspondence between you and Sutton Cleaners, including notes of conversations and information you provide when you contact us.
Website and usage information, where relevant, such as basic technical information that your browser sends when you visit our website, and information about how you interact with our online content, to the extent this is collected in accordance with applicable law.
How we collect your personal data
We collect personal data directly from you when you contact or engage with Sutton Cleaners. This includes when you place an order, drop off or collect items, request a quotation, communicate with us, or complete any forms we provide. We may also receive limited personal data from third parties, for example where a business or organisation arranges cleaning services on your behalf and provides your contact details for collection or delivery.
Lawful bases for processing
We process your personal data only where we have a lawful basis to do so under data protection law. Depending on the circumstances, we rely on one or more of the following lawful bases:
Contract. We process your personal data because it is necessary to enter into and perform a contract with you. This includes taking steps at your request before entering into a contract, such as providing a quotation, as well as managing and fulfilling your orders and delivering our services.
Legal obligation. We process some personal data because we are legally required to do so. This includes retaining certain transaction, tax and accounting records for specified periods under applicable laws and regulations.
Legitimate interests. We process personal data where it is necessary for our legitimate interests, or those of a third party, and where your interests and fundamental rights do not override those interests. This includes managing and improving our services, handling customer enquiries, safeguarding our premises, preventing and detecting fraud or misuse, and defending our legal rights.
Consent. In a small number of cases, we may rely on your consent, for example for certain types of direct marketing that require consent under applicable law. Where we rely on consent, you are free to withdraw it at any time, and we will explain how you can do this when we obtain your consent.
How we use your personal data
We use your personal data for the following purposes:
To provide our services to you, including accepting and managing your orders, cleaning your items, and arranging collection and delivery where requested.
To communicate with you about your orders and our services, including confirming bookings, notifying you when items are ready, responding to enquiries, and dealing with complaints or service issues.
To manage our business operations, including record keeping, accounting and auditing, monitoring service performance, staff training, and internal reporting.
To comply with legal and regulatory requirements, including tax and financial reporting obligations, and to cooperate with regulators and law enforcement where required.
To protect our legitimate interests, including preventing fraud and misuse, protecting our property and staff, and establishing, exercising or defending legal claims.
To inform you about updates relating to Sutton Cleaners services, where this is permitted by law and, where required, where you have provided your consent. You can object to receiving such communications at any time.
Data sharing and processors
We do not sell your personal data. We may share your personal data with limited categories of recipients where this is necessary for the purposes set out in this Privacy Policy and where we have a lawful basis to do so.
We may share personal data with service providers who act as data processors on our behalf. These may include payment processing providers, information technology and system support providers, secure data storage providers, and professional advisors such as accountants. These processors are only permitted to process personal data in accordance with our instructions and must implement appropriate security measures to protect it.
We may also share personal data with third parties acting as independent data controllers where required by law, such as regulatory authorities, law enforcement agencies, or tax authorities, or where we need to protect our legal rights.
If we are involved in a reorganisation, merger or business transfer, we may share personal data with prospective or actual purchasers or their advisors, subject to appropriate safeguards and only to the extent permitted by law.
International transfers
Our primary processing of personal data takes place within the United Kingdom. If we use service providers or systems located outside the United Kingdom or the European Economic Area, and this involves the transfer of your personal data to a country that does not provide the same level of data protection, we will ensure that appropriate safeguards are in place. These may include the use of standard contractual clauses or other lawful transfer mechanisms recognised by data protection law.
Data retention
We keep your personal data only for as long as is necessary to fulfil the purposes for which it was collected and to meet any legal, accounting or reporting requirements. The specific retention period will depend on the type of data and the applicable legal obligations.
In general, customer and transaction records are retained for a period that allows us to manage our relationship with you, respond to any queries or complaints, and comply with applicable tax and accounting rules. When personal data is no longer needed for these purposes, we will securely delete or anonymise it.
Data security
We take appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing and against accidental loss, destruction or damage. These measures are designed to provide a level of security appropriate to the risks presented by the processing. Access to personal data is restricted to staff and service providers who need access for legitimate business purposes and who are subject to confidentiality obligations.
Your data protection rights
Under data protection law, you have various rights in relation to your personal data, subject to certain conditions and exemptions. These rights include:
Right of access. You have the right to request confirmation as to whether we process personal data about you and, if so, to request access to that personal data and certain related information.
Right to rectification. You have the right to request that we correct any inaccurate personal data that we hold about you and to have incomplete data completed.
Right to erasure. In certain circumstances, you have the right to request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected or where you withdraw consent and there is no other lawful basis for processing.
Right to restriction of processing. You have the right to request that we restrict the processing of your personal data in certain situations, such as while we verify the accuracy of the data or consider an objection you have raised.
Right to object. You have the right to object to our processing of your personal data where we rely on legitimate interests as the lawful basis, including profiling based on those interests. You also have the absolute right to object at any time to processing of your personal data for direct marketing purposes.
Right to data portability. Where the processing is based on your consent or a contract and is carried out by automated means, you may have the right to receive personal data you have provided to us in a structured, commonly used and machine-readable format and to transmit it to another controller where technically feasible.
Right to withdraw consent. Where we rely on your consent to process personal data, you have the right to withdraw that consent at any time. This does not affect the lawfulness of processing carried out before withdrawal.
You can exercise your rights by contacting Sutton Cleaners using the contact details made available through our usual communication channels. We may need to verify your identity before we respond to your request and may be entitled to refuse or limit your request in certain circumstances in accordance with applicable law.
Complaints
If you have concerns about how we handle your personal data, we encourage you to contact us in the first instance so that we can try to resolve the issue. You also have the right to lodge a complaint with the UK supervisory authority for data protection if you believe that your rights have been infringed.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements or other reasons. When we make changes, we will update the date of the policy and make the revised version available. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.