Westminster Cleaners Privacy Policy
This Privacy Policy explains how Westminster Cleaners collects, uses, stores, and protects personal data relating to customers within our service area. It also outlines your rights under the United Kingdom General Data Protection Regulation and the Data Protection Act 2018. By using our services, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all customers and prospective customers of Westminster Cleaners within our service area, including those who use our services in person, over the phone, or through any online contact method we make available. It covers personal data collected before, during, and after the provision of our dry cleaning, laundry, and related services.
Data Controller
Westminster Cleaners is the data controller for the personal data we collect and process about you in connection with our services. As data controller, we determine the purposes and means of processing your personal information and are responsible for ensuring that such processing complies with applicable data protection laws.
Personal Data We Collect
We may collect the following categories of personal data when you engage with Westminster Cleaners:
Identification and contact information, such as your full name, postal address, and any other contact details you choose to provide when you book or use our services.
Service and order details, such as items you ask us to clean, special instructions, collection and delivery preferences, order history, and payment status information.
Payment-related information, such as partial card details or transaction references processed through secure payment providers. We do not store full card numbers or security codes.
Communication data, such as information contained in enquiries, complaints, feedback, or any other correspondence with us.
Usage and technical information, to the extent you use any online tools we may offer, such as information about how you access and use such tools, device identifiers, and basic diagnostic information generated by our systems.
How We Collect Your Data
We collect personal data directly from you when you provide it to us in person at our premises, when you contact us by phone, or when you communicate with us using any online methods we may offer. We may also receive limited information from third parties such as payment service providers when you pay for our services, or delivery partners when we coordinate collections and deliveries.
Lawful Basis for Processing
We process your personal data only where we have a lawful basis under the UK GDPR. Depending on the context, we rely on one or more of the following legal grounds:
Performance of a contract. We process your data when it is necessary to enter into or perform a contract with you, such as when you place an order, request a collection or delivery, or ask us to carry out cleaning services.
Compliance with legal obligations. We may process and retain certain information to meet our legal obligations, such as accounting, tax, and record keeping requirements, or to comply with lawful requests from authorities.
Legitimate interests. We may process your personal data where it is necessary for our legitimate business interests and where your interests and fundamental rights do not override those interests. This may include managing and improving our services, handling queries and complaints, preventing fraud, and ensuring the security of our premises, staff, and customers.
Consent. In specific situations where consent is required by law, such as certain types of marketing communications, we will seek your explicit consent before processing your personal data for that purpose. You have the right to withdraw your consent at any time.
How We Use Your Personal Data
We use the personal data we collect for the following purposes:
To provide and manage our cleaning and related services, including taking bookings, identifying your orders, following your instructions, and returning your items to you.
To manage payments, process refunds where necessary, and maintain financial records in accordance with our legal and accounting obligations.
To communicate with you regarding your orders, delivery schedules, queries, complaints, and feedback, and to provide customer support.
To operate, maintain, and improve our business operations and any online tools we may offer, including internal administration, staff training, and quality control.
To protect our business, our staff, and our customers, including fraud prevention, security measures, and the enforcement of our terms of service.
Where permitted and appropriate, to send you information about our services that may be of interest to you, subject to your preferences and any consent requirements.
Data Sharing and Processors
We do not sell your personal data. We may share your personal data with trusted third parties who act as data processors on our behalf and who are bound by contractual obligations to keep your information confidential and secure. These may include:
Payment service providers who process card or electronic payments on our behalf.
IT and system support providers who assist with the operation, security, and maintenance of our systems.
Delivery and logistics partners who help us provide collection and delivery services.
Professional advisers, such as accountants or legal advisers, where necessary for our business operations or to protect our legal interests.
We may also share personal data with law enforcement, regulators, or other authorities where we are required to do so by law or where it is necessary in connection with legal claims.
International Transfers
Where our service providers or their systems are located outside the United Kingdom, your personal data may be transferred internationally. In such cases, we will ensure that appropriate safeguards are in place in accordance with data protection laws, such as using standard contractual clauses or relying on adequacy regulations, to ensure that your personal data continues to receive a level of protection essentially equivalent to that in the United Kingdom.
Data Retention
We retain your personal data only for as long as it is reasonably necessary for the purposes described in this Privacy Policy and to meet any legal, accounting, or reporting requirements. In general:
Order and service records are retained for a period that allows us to handle queries, complaints, and repeat orders, and to meet our tax and accounting obligations.
Payment-related records are retained for the period required by law and industry standards.
Communication data is kept for as long as needed to resolve your enquiry or complaint and to maintain appropriate business records.
When personal data is no longer required, we will delete or anonymise it in a secure manner.
Your Data Protection Rights
Under the UK GDPR, you have a number of rights in relation to your personal data. Subject to certain conditions and exemptions, you have the right to:
Access your personal data and receive a copy of the information we hold about you.
Request correction of any inaccurate or incomplete personal data.
Request erasure of your personal data where there is no good reason for us to continue processing it, subject to our legal obligations to retain certain records.
Object to the processing of your personal data where we rely on legitimate interests and you believe that your rights and interests override ours.
Request restriction of processing while we consider a request you have made in relation to your data.
Request the transfer of your personal data to you or to a third party in a commonly used, machine readable format, where the processing is based on consent or contract and carried out by automated means.
Withdraw consent at any time where we rely on your consent to process your personal data for a specific purpose. Withdrawal of consent will not affect the lawfulness of processing carried out before you withdrew your consent.
If you wish to exercise any of these rights, you can contact us using the details provided on our main customer communications and documentation. We may need to verify your identity before responding to your request.
Security of Your Personal Data
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These measures include access controls, staff training, secure handling of payment information, and regular review of our security procedures. While we strive to protect your personal data, no system can be completely secure, and we cannot guarantee absolute security of information transmitted to or by us.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, applicable laws, or data protection guidance. Any significant changes will be communicated by updating the version on our customer facing materials. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.
Contact and Complaints
If you have any questions about this Privacy Policy or how Westminster Cleaners processes your personal data, you can contact us using the contact details made available on our customer documentation or at our premises. You also have the right to lodge a complaint with the Information Commissioner's Office if you are concerned about how your personal data is being handled. We would, however, appreciate the opportunity to address your concerns directly before you approach the supervisory authority.