Privacy Policy - Carpet Cleaners SE1

This Privacy Policy explains how Carpet Cleaners SE1 collects, uses, stores, shares, and protects personal data in connection with our carpet cleaning services. It applies to all Carpet Cleaners SE1 customers in the area, including individuals who request quotations, make bookings, receive services, or otherwise interact with us in relation to our cleaning services.

We are committed to handling personal data in a lawful, fair, and transparent manner under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. This policy is written to help customers understand what data we collect, why we collect it, how long we keep it, who may process it on our behalf, and what rights individuals have over their personal information.

1. Personal Data We Collect

We collect only the personal data necessary to provide and manage our carpet cleaning services. The categories of data we may collect include:

Identity data: name, title, and where relevant, company or household details.
Contact data: address, email address, telephone number, and service location.
Booking and service data: appointment details, service preferences, carpet type, cleaning requirements, and notes relevant to the job.
Payment data: payment status, transaction references, and limited billing information.
Communication data: records of emails, messages, calls, and complaints or feedback.
Technical data: basic online identifiers, such as IP address or device information, where relevant to website or system security.

We do not intentionally collect special category data unless it is strictly necessary and you have provided it voluntarily, or where another legal basis applies. We also do not seek to collect unnecessary information about children.

2. How We Use Personal Data

We use personal data only where it is necessary for legitimate business and service purposes. These purposes may include:

Providing carpet cleaning quotes and confirming appointments.
Delivering cleaning services at the requested location.
Managing customer accounts, records, and service history.
Processing payments and maintaining accounting records.
Responding to questions, complaints, and follow-up requests.
Maintaining service quality, internal administration, and staff training.
Protecting against fraud, misuse, or security incidents.
Meeting legal, tax, insurance, and regulatory obligations.

We use a data minimisation approach, meaning we only collect and retain information that is relevant and reasonably necessary for the purposes described above.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each use of personal data. Carpet Cleaners SE1 may rely on one or more of the following lawful bases:

Contract

We process personal data where it is needed to enter into or perform a contract with you. This includes handling bookings, carrying out carpet cleaning services, and taking payment-related steps.

Legitimate Interests

We may process data for our legitimate interests where those interests are not overridden by your rights and freedoms. This may include improving our services, managing customer relationships, preventing fraud, and keeping appropriate business records.

Legal Obligation

We may process and retain certain data to comply with legal obligations, such as tax recordkeeping, accounting requirements, insurance matters, and other applicable laws.

Consent

Where required by law, we will ask for your consent before processing your data for certain optional purposes. If consent is used, you have the right to withdraw it at any time. Withdrawal will not affect the lawfulness of processing carried out before consent was withdrawn.

4. Data Sharing and Processors

We may share personal data with trusted third parties that help us operate our services. These organisations act as processors when they handle data on our behalf and under our instructions. Examples may include:

Booking and scheduling systems.
Payment service providers.
Accounting and invoicing tools.
IT support, cloud storage, and data backup providers.
Customer communications platforms.

Where processors are used, we require them to protect personal data and process it only for the agreed purpose. They are not permitted to use it for their own unrelated purposes.

We may also disclose data where necessary to:

Comply with legal or regulatory obligations.
Respond to lawful requests from public authorities.
Establish, exercise, or defend legal claims.
Protect the rights, property, or safety of our business, customers, or others.

We do not sell personal data. Any sharing is limited to what is necessary for service delivery, compliance, or legitimate business operations.

5. International Transfers

Some processors may store or access data outside the United Kingdom. If this happens, we take steps to ensure appropriate safeguards are in place so that personal data remains protected to a standard consistent with UK GDPR requirements. These safeguards may include approved contractual protections or other lawful transfer mechanisms.

6. Data Retention

We keep personal data only for as long as it is necessary for the purposes for which it was collected, including meeting legal, accounting, tax, and operational requirements. Retention periods may vary depending on the type of information and the reason it was collected.

In general:

Customer service and booking records are kept for as long as needed to manage the service relationship and resolve issues.
Financial and invoice records are usually retained for the period required by tax and accounting law.
Complaint and correspondence records may be retained for a reasonable period to support service improvement and dispute resolution.
Data no longer needed is securely deleted, anonymised, or archived where appropriate.

We review retained data periodically to ensure it is still necessary. When it is no longer needed, we dispose of it in a secure manner.

7. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, alteration, or disclosure. These measures may include access controls, staff confidentiality requirements, secure storage, and careful management of data-sharing arrangements.

While no system can be guaranteed completely secure, we take reasonable steps to reduce risks and to respond appropriately to potential incidents.

8. Your Rights

Individuals whose data we process have rights under data protection law. Subject to certain conditions and exemptions, these rights may include:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to ask us to correct inaccurate or incomplete data.
Right to erasure: to request deletion of your data in certain circumstances.
Right to restriction: to ask us to limit how we use your data in certain cases.
Right to object: to object to processing based on legitimate interests or direct marketing.
Right to data portability: to request transfer of certain data in a structured format where applicable.
Right to withdraw consent: where processing is based on consent.

We will respond to valid requests within the time limits set by law. In some cases, we may need to verify your identity before taking action on a request. This helps us protect your information from unauthorised access.

9. Complaints and Further Rights

If you believe your data has been handled incorrectly, you have the right to raise a concern with the relevant data protection authority. You may also contact us directly to discuss any concerns, and we will aim to address them promptly and fairly.

We encourage customers to contact us first so that we can try to resolve any issue in a constructive and efficient way.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. When we make changes, the updated policy will apply from the date it is revised. We encourage customers to review this policy periodically to stay informed about how personal data is protected.

This Privacy Policy is intended to provide clear and transparent information about how Carpet Cleaners SE1 handles personal data for customers in the area. Our aim is to respect privacy, keep information secure, and use data only where there is a valid legal reason to do so.