Privacy Policy - Carpet Cleaners SW17

This Privacy Policy explains how Carpet Cleaners SW17 collects, uses, stores, shares, and protects personal data in connection with our carpet cleaning services. It applies to all Carpet Cleaners SW17 customers in the area, including anyone who requests a quotation, makes a booking, receives a service, communicates with us, or otherwise interacts with our business. We are committed to handling personal information in a lawful, fair, and transparent manner in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

For the purposes of data protection law, Carpet Cleaners SW17 is the data controller for the personal information we collect and use in the course of providing our services. This means we decide how and why your personal data is processed. We only process data that is relevant and necessary for delivering our services, managing customer relationships, complying with legal obligations, and improving our operations.

2. Personal Data We Collect

We may collect and process several categories of personal information depending on how you interact with us. The data we collect may include:

Identity information such as your name.
Contact details such as your address, email address, and phone number.
Service information such as property access details, cleaning preferences, service history, and notes relevant to the job.
Billing and payment information such as invoice details, transaction records, and payment confirmations.
Communication records such as messages, call notes, complaints, feedback, and appointment changes.
Technical information where relevant, such as IP address or device-related information if you submit forms or interact with our digital systems.
Special category data only where necessary and provided by you, for example if access arrangements, allergies, or mobility concerns require us to take extra care. We do not seek this data unless it is genuinely required for service delivery.

We only collect data that is adequate, relevant, and limited to what is necessary for the purposes described in this Policy. We do not intentionally collect more data than is needed.

3. How We Use Your Personal Data

We use personal data for the following purposes:

To provide carpet cleaning and related services.
To prepare quotes, confirm bookings, and manage appointments.
To communicate with customers about service details, updates, and scheduling.
To process payments, issue invoices, and maintain financial records.
To respond to enquiries, feedback, or complaints.
To maintain internal records and improve service quality.
To comply with legal, tax, accounting, and regulatory obligations.
To protect our business, customers, and staff from fraud, misuse, or security incidents.

We may also use aggregated or anonymised information for internal reporting and service improvement. This information does not identify individual customers.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis to process personal data. Depending on the context, Carpet Cleaners SW17 relies on one or more of the following lawful bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes booking services, delivering cleaning work, handling payments, and managing customer support connected to the service.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. Examples include managing service quality, maintaining customer records, preventing fraud, improving operations, and resolving disputes. We always consider whether the processing is proportionate and whether it could reasonably be expected.

Legal Obligation

We process certain information when required to comply with legal duties, such as keeping tax records, meeting accounting rules, or responding to lawful requests from public authorities.

Consent

Where we rely on your consent, we will make this clear at the time of collection. Consent may be used in limited situations, and you may withdraw it at any time. Withdrawal of consent will not affect the lawfulness of processing carried out before the withdrawal.

Important: We do not use personal data for unrelated purposes without a lawful basis. We do not sell personal information.

5. Retention of Personal Data

We keep personal data only for as long as necessary for the purpose for which it was collected, or as required by law. Retention periods may vary depending on the type of data and the reason it was collected. Typical retention practices may include:

Customer and service records: kept for the duration of the customer relationship and for a reasonable period afterwards.
Financial and tax records: retained for the period required by accounting and tax laws.
Communication records: retained as needed to manage enquiries, resolve disputes, and maintain service history.
Complaint and incident records: retained for an appropriate period to support resolution and legal compliance.

When personal data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you. Retention decisions are reviewed regularly to ensure we do not keep information longer than necessary.

6. Data Processors and Third Parties

We may use trusted third-party service providers to help us operate efficiently and deliver our services. These parties act as processors or, in some cases, independent controllers, depending on their role. We only share personal data where it is necessary and where appropriate safeguards are in place.

Examples of processors may include:

Payment processing providers.
Accounting or bookkeeping service providers.
IT and cloud storage providers.
Appointment scheduling or customer management systems.
Administrative support providers.

Where processors handle personal data on our behalf, they are required to act only on our instructions, maintain confidentiality, and implement appropriate security measures. We do not authorise processors to use your data for their own marketing purposes.

We may also disclose data if necessary to comply with legal obligations, enforce agreements, or protect our rights, customers, or staff. If data is transferred outside the UK, we will ensure appropriate safeguards are in place in accordance with applicable law.

7. Data Security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or damage. These measures may include access controls, secure storage, staff confidentiality obligations, and regular review of our internal processes. While no system can be guaranteed to be completely secure, we take reasonable steps to reduce risk and protect the information entrusted to us.

8. Your Rights

Under data protection law, you have several rights in relation to your personal data. These rights may apply depending on the circumstances and any legal exemptions. They include:

Right of access – you may request a copy of the personal data we hold about you.
Right to rectification – you may ask us to correct inaccurate or incomplete data.
Right to erasure – in certain cases, you may request that we delete your data.
Right to restriction – you may ask us to limit how we use your data in specific situations.
Right to object – you may object to processing based on legitimate interests.
Right to data portability – in some cases, you may request your data in a structured, commonly used format.
Right to withdraw consent – where processing is based on consent, you may withdraw it at any time.

If you wish to exercise any of these rights, we will respond in accordance with legal requirements and within the applicable time limits. We may need to verify your identity before taking action to protect your information.

9. Complaints and Supervisory Authority

If you believe your data protection rights have been infringed, you have the right to raise a concern with the UK Information Commissioner’s Office (ICO), the supervisory authority for data protection matters in the United Kingdom. We would also appreciate the opportunity to address your concerns directly where possible.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in law, our services, or our data handling practices. Any updated version will apply from the date it is published. Please review this Policy periodically so that you remain informed about how we handle personal data.

11. Applicability

This Privacy Policy applies to all Carpet Cleaners SW17 customers in area, including current, former, and prospective customers whose personal data we process in connection with our carpet cleaning services. By using our services or interacting with us, you acknowledge that your personal data will be handled in accordance with this Policy and applicable data protection law.

Summary principle: We collect only what we need, use it for defined purposes, keep it securely, retain it only as long as necessary, and respect your rights.