Privacy Policy - Carpet Cleaners SW10

Carpet Cleaners SW10 is committed to protecting the privacy and personal data of all customers in our SW10 service area. This Privacy Policy explains how we collect, use, store, share, and protect personal data when providing carpet cleaning services. It applies to all Carpet Cleaners SW10 customers in the area, including private households, landlords, tenants, and business clients who engage our services.

This policy is designed to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. It should help you understand what data we collect, why we use it, how long we keep it, who may process it on our behalf, and what rights you have over it.

1. Personal Data We Collect

We collect only the personal data necessary to provide our carpet cleaning services and manage our business properly. Depending on how you interact with us, we may collect the following categories of data:

Identity data: name, title, and any other information needed to identify you.
Contact data: address within the SW10 area, email address, telephone number, and preferred communication details.
Service data: property access instructions, details about the cleaning service requested, appointment times, and notes relevant to the work.
Payment data: billing details, payment status, and transaction records. We do not intentionally store full card details where a secure payment provider is used.
Communication data: messages, enquiries, complaints, booking requests, and service feedback.
Technical data: limited information that may be collected when you contact us electronically, such as device or email metadata where relevant to security and administration.

We do not collect more information than is reasonably required for operational, legal, and administrative purposes. We also do not seek to collect special category data unless you voluntarily provide it and it is necessary for a specific service-related reason, such as access or safety considerations.

2. How We Use Your Data

We use your personal data only for legitimate business and service purposes. These may include:

handling enquiries and providing quotations;
booking and delivering carpet cleaning appointments;
communicating about service changes, access arrangements, or follow-up matters;
processing payments and managing invoices;
keeping internal records for accounting, administration, and quality control;
responding to complaints, feedback, or legal claims;
maintaining security and preventing fraud or misuse;
meeting legal and regulatory obligations.

We will only use your data in a way that is compatible with the purposes for which it was collected. If we ever need to use it for a new purpose, we will ensure there is a lawful basis and, where required, notify you.

3. Lawful Basis for Processing

Under GDPR, we must have a lawful basis for each processing activity. Carpet Cleaners SW10 relies on the following lawful bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes taking bookings, arranging access, carrying out cleaning services, issuing invoices, and managing payments.

Legal Obligation

We may process and retain certain information where required to comply with accounting, tax, insurance, or other legal obligations.

Legitimate Interests

We may process data where it is necessary for our legitimate business interests, provided your interests and rights do not override those interests. Examples include maintaining internal records, service quality management, fraud prevention, and responding to customer queries.

Consent

In limited situations, we may rely on your consent, for example where you voluntarily agree to receive certain marketing communications. You may withdraw consent at any time if it has been used as the basis for processing.

Important: We do not depend on consent where another lawful basis is more appropriate for providing carpet cleaning services.

4. Data Sharing and Processors

We may share personal data with trusted third parties, but only where necessary and with appropriate safeguards. These third parties may act as data processors on our behalf or as independent controllers in specific circumstances. Examples include:

Payment processors: to handle secure payment transactions.
Booking or scheduling tools: to organise appointments and service records.
Accounting or bookkeeping providers: to manage invoices, tax records, and financial administration.
IT and cloud storage providers: to store and protect business records.
Professional advisers: such as insurers, legal advisers, or auditors where required.

All processors are required to handle personal data securely, only under our instructions, and in accordance with data protection law. We do not sell personal data. We do not share customer information for unrelated marketing purposes without a lawful basis.

Where data must be disclosed to public authorities, courts, or regulators, we will do so only when legally required or otherwise permitted by law.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and service administration requirements. Retention periods may vary depending on the type of data and the reason for holding it.

Customer service records: retained for the duration of the business relationship and for a reasonable period afterwards to manage disputes, repeat services, or follow-up issues.
Financial and tax records: retained for the period required by law.
Communication records: retained as long as needed to resolve enquiries, complaints, or service matters.
Consent-based marketing records: retained until consent is withdrawn or the data is no longer needed.

When data is no longer required, we take reasonable steps to delete, destroy, or anonymise it securely. We do not keep data indefinitely.

6. Data Security

We use appropriate technical and organisational measures to safeguard personal data against accidental loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, password protection, and limiting data access to authorised personnel only.

Although no system can be guaranteed to be completely secure, we continuously review our procedures and aim to keep your information protected in line with the sensitivity of the data held.

7. Your Rights Under GDPR

If we process your personal data, you have several rights under data protection law. These rights may apply depending on the circumstances and legal basis for processing.

Right of access: you can request a copy of the personal data we hold about you.
Right to rectification: you can ask us to correct inaccurate or incomplete data.
Right to erasure: you may request deletion of data in certain circumstances.
Right to restriction: you may ask us to limit how we use your data in certain situations.
Right to object: you may object to processing based on legitimate interests or direct marketing.
Right to data portability: in some cases, you may request that data be provided in a structured, commonly used format.
Right to withdraw consent: where processing is based on consent, you can withdraw it at any time.

We will respond to valid requests within the time limits set by law. If a request is manifestly unfounded or excessive, we may be entitled to refuse or charge a reasonable fee where permitted by law.

8. Children’s Data

Our services are directed at adults who arrange carpet cleaning for homes or businesses. We do not knowingly collect personal data from children as a primary purpose. If information relating to a child is incidentally provided, for example in connection with access arrangements, it will be handled only where necessary and in accordance with this policy.

9. International Transfers

Where any processor or service provider stores or accesses data outside the UK, we will ensure that appropriate safeguards are in place. This may include using jurisdictions approved for adequate protection or contractual protections recognised under GDPR.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements, or data handling practices. Any updated version will apply from the date it is made available. We encourage customers in the SW10 area to review this policy periodically so they remain informed about how we protect their information.

11. Scope of This Policy

This policy applies to all Carpet Cleaners SW10 customers in the area, regardless of whether they book a one-off clean, a repeat service, or an arrangement made on behalf of a third party. By using our services, you acknowledge that your personal data may be processed in the ways described above and that we are committed to handling it responsibly, lawfully, and transparently.

In summary: we collect only necessary data, use it for legitimate service and legal purposes, retain it for appropriate periods, share it only with trusted processors when needed, and respect your rights under GDPR.