Privacy Policy
Sutton Cleaners Privacy Policy and Data Protection
This Privacy Policy explains how Sutton Cleaners collects, uses, stores, and protects the personal data of its customers. It applies to all Sutton Cleaners customers within the Sutton area, including those who visit our premises, use our services in person, by phone, or through any online or digital channels we may offer. Sutton Cleaners is committed to handling your personal data lawfully, transparently, and securely in accordance with the UK General Data Protection Regulation and applicable data protection laws.
Scope and Data Controller
This Privacy Policy applies to all services provided by Sutton Cleaners to customers in the Sutton area. Sutton Cleaners is the data controller for the personal data described in this policy. This means we decide how and why your personal data is processed when you use our services.
Types of Personal Data We Collect
We may collect and process the following categories of personal data about you when you use Sutton Cleaners services or interact with us:
Identification and contact details, such as your name, postal address, and general contact details you choose to provide. We also process details relating to your orders and collection arrangements so we can provide our cleaning and related services.
Service and order information, such as details of garments, household items or other materials you provide for cleaning, alterations, repairs or related services, including special instructions, delivery and collection preferences, and transaction history.
Payment and billing data, such as records of payments made for our services and basic billing information necessary to process those payments. We do not store full payment card details where processed through third party payment providers.
Communication records, such as enquiries, complaints, feedback, or other communications you send to us, and any responses we provide, whether in person, by post, or through digital channels.
Technical and usage data, where applicable, such as basic information generated when you use any online services we may operate, including approximate location data, device or browser type, and basic analytics derived from your interactions with those services. This is collected only to the extent necessary to operate and improve our services.
How We Collect Your Personal Data
We collect personal data directly from you when you use our services, visit our premises, contact us by post or through any digital channels we may offer, or when you otherwise choose to provide information to us. We may also generate personal data internally, for example by creating records of your orders, payments, and service preferences.
Lawful Basis for Processing Personal Data
We process your personal data only where we have a lawful basis under the UK General Data Protection Regulation. Depending on the context, we rely on the following lawful grounds:
Performance of a contract. We process personal data to provide our services to you, including receiving and processing items for cleaning or related services, managing your orders, taking payment, arranging collection or delivery, and addressing any issues with the services you have requested.
Compliance with legal obligations. We may process your data to meet our legal and regulatory obligations, such as accounting, tax, or record keeping requirements, and to respond to lawful requests from authorities where required.
Legitimate interests. We may process personal data where it is necessary for our legitimate business interests and where your interests and fundamental rights do not override those interests. This may include keeping basic records of customers, improving our services and operations, preventing fraud or misuse of our services, and handling queries or complaints.
Consent. In limited cases we may rely on your consent, for example for certain forms of direct marketing or optional communications. Where we rely on consent, you have the right to withdraw it at any time without affecting the lawfulness of processing carried out before your withdrawal.
How We Use Your Personal Data
We use the personal data we collect for the following purposes:
To register you as a customer, accept garments or items for cleaning or related services, manage your orders, and return items to you.
To process payments, issue receipts, and maintain accurate financial records regarding the services we provide.
To communicate with you about your orders, including order confirmations, updates on availability of items, collection or delivery arrangements, and any issues affecting your items or services.
To manage our relationship with you, including responding to your questions, handling complaints, or processing feedback to improve our services.
To manage and protect our business, including maintaining security at our premises and systems, preventing misuse of services, and ensuring proper record keeping.
To comply with our legal obligations, resolve disputes, and enforce our agreements.
Data Sharing and Use of Processors
We do not sell your personal data. We may share your personal data with trusted third parties who act as data processors on our behalf, under written contracts that require them to protect your data and use it only as instructed by us. These may include:
Service providers, such as payment processing providers, IT or systems support, and companies that help us with administrative or operational tasks necessary to provide our services.
Professional advisers, such as accountants or legal advisers, where necessary to obtain professional services and meet our legal obligations.
Public authorities or law enforcement bodies, where required by law or to protect our rights, property, or the safety of our customers and staff.
Any processors we use are only permitted to use your personal data to provide services to Sutton Cleaners and must keep it secure and confidential.
Data Retention
We keep your personal data only for as long as is reasonably necessary for the purposes described in this Privacy Policy and to comply with legal, regulatory, accounting, or reporting requirements.
In general, basic customer and order records are retained for a period that allows us to manage ongoing services, handle queries or complaints, and meet our legal obligations relating to tax and accounting. When personal data is no longer needed, we will securely delete or anonymise it so that you can no longer be identified from it.
International Transfers
Where we use service providers located outside the United Kingdom or the European Economic Area, we will ensure that appropriate safeguards are in place to protect your personal data in accordance with data protection laws. This may include relying on adequacy regulations or using standard contractual clauses approved by relevant authorities.
Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing, accidental loss, destruction, or damage. These measures may include secure storage systems, access controls, staff training, and procedures to respond to potential data incidents. While no system can be completely secure, we work to keep your information protected in line with legal requirements and industry practice.
Your Data Protection Rights
Under data protection laws, you have a number of rights in relation to your personal data held by Sutton Cleaners. These rights apply to all customers in the Sutton area to whom this policy applies, subject to certain legal conditions and exemptions:
Right of access. You have the right to request confirmation that we process your personal data and to obtain a copy of that data, along with certain information about how we use it.
Right to rectification. You have the right to ask us to correct inaccurate or incomplete personal data we hold about you.
Right to erasure. In certain circumstances, you may have the right to request that we delete your personal data, for example where it is no longer needed for the purposes for which it was collected, or where you have withdrawn consent and there is no other lawful basis for processing.
Right to restriction of processing. You may request that we restrict the processing of your personal data in certain situations, such as while we are considering an objection you have raised.
Right to object. You may object to our processing of your personal data where we rely on legitimate interests as our lawful basis. We will stop processing unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or where processing is needed for legal claims.
Right to data portability. Where our processing is based on your consent or on a contract and carried out by automated means, you may have the right to receive the personal data you provided to us in a structured, commonly used, and machine readable format and to request that we transmit it to another controller where technically feasible.
You also have the right to lodge a complaint with the relevant supervisory authority if you believe that your personal data has not been handled in accordance with applicable data protection laws. We encourage you to contact us first so we can address any concerns directly.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or how we process personal data. Any changes will be effective from the date of publication of the updated policy. We recommend that you review this Privacy Policy periodically so you remain informed about how we protect your personal data.
