Privacy Policy - Carpetcleaning W13

This Privacy Policy explains how Carpetcleaning W13 collects, uses, stores, shares, and protects personal data. It applies to all Carpetcleaning W13 customers in the area, including anyone who requests a quotation, books a service, receives a cleaning visit, or otherwise interacts with our business. We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our services, you acknowledge that we may process personal data as described in this policy. We only collect information that is necessary for the purposes set out below, and we take reasonable steps to keep that information secure and accurate.

1. Information We Collect

We may collect and process the following categories of personal data:

Identity details such as your name and, where relevant, business name.
Contact details such as your telephone number, email address, and service address.
Booking and service information including appointment dates, service preferences, property access notes, and instructions relating to the cleaning work.
Payment-related information such as payment status, invoices, and transaction records. We do not store full card details where payments are processed through secure payment providers.
Communication records including messages, complaints, feedback, and notes of telephone or email correspondence.
Technical data where relevant, such as basic website or device information if you interact with digital systems we use for administration. This may include IP address, browser type, and usage logs.
Service history including previous appointments, quotations, and customer preferences.

We generally collect information directly from you when you request a quote, place a booking, complete a form, contact us, or provide details during service delivery. In limited cases, we may receive data from third parties such as payment processors, booking systems, or referral sources.

2. How We Use Your Personal Data

We use personal data only where we have a valid lawful basis. Our uses include:

responding to enquiries and providing quotations;
managing bookings and delivering carpet cleaning services;
processing payments, issuing invoices, and keeping financial records;
contacting you about appointments, changes, or service-related issues;
handling complaints, disputes, and customer support;
maintaining internal records and service history;
meeting legal, tax, accounting, and insurance obligations;
improving service quality, operational efficiency, and customer experience;
preventing fraud, misuse, or unlawful activity.

We will not use your personal data for purposes that are incompatible with the reasons it was collected unless we have a lawful basis to do so and, where required, we inform you.

3. Lawful Basis for Processing

Under data protection law, we must identify a lawful basis for processing your personal data. Carpetcleaning W13 relies on the following bases, depending on the context:

Contract

We process personal data where it is necessary to enter into or perform a contract with you. This includes providing quotes at your request, confirming bookings, performing cleaning services, and managing payments.

Legal Obligation

We may process and retain certain information where required to comply with legal obligations, including tax rules, accounting requirements, and record-keeping duties.

Legitimate Interests

We may process data where it is necessary for our legitimate interests and where those interests are not overridden by your rights and freedoms. This can include managing our business operations, maintaining service records, improving our services, protecting against fraud, and handling customer communication.

Consent

In limited circumstances, we may rely on your consent, for example where it is needed for specific optional communications or particular uses of data not covered by other lawful bases. Where consent is used, you have the right to withdraw it at any time.

4. Data Sharing and Processors

We may share personal data with trusted third parties that act as processors or independent controllers, only where necessary for our business operations and service delivery. These may include:

Payment processors that handle secure card or electronic payments;
Accounting and bookkeeping providers that help manage invoices, tax records, and financial administration;
Booking and scheduling systems used to organise appointments and service records;
IT and cloud service providers that store or support our business data systems;
Insurance or legal advisers where disclosure is necessary to resolve claims, disputes, or compliance matters;
Regulatory or public authorities where disclosure is required by law.

Where a third party acts as a processor, it processes personal data only on our instructions and under appropriate contractual safeguards. We require processors to use suitable technical and organisational measures to protect data. We do not sell your personal data.

If data is transferred outside the UK, we will ensure that appropriate safeguards are in place in accordance with data protection law. These safeguards may include adequacy regulations, standard contractual clauses, or other approved transfer mechanisms.

5. Data Retention

We keep personal data only for as long as necessary to fulfil the purpose for which it was collected, including any legal, accounting, or reporting requirements. Retention periods vary depending on the type of data and the purpose of processing.

Quotation and booking data may be kept for a reasonable period to manage customer relations and business administration.
Service records may be retained to support repeat services, quality control, and dispute resolution.
Financial and tax records are retained for the period required by law.
Communication records may be retained for customer service, training, and complaint handling.

When personal data is no longer needed, we will delete it, anonymise it, or securely archive it where appropriate. In some cases, information may be retained for longer if it is required for legal claims, insurance matters, or regulatory compliance.

6. Data Security

We take the security of your personal data seriously. We use appropriate measures designed to protect information against unauthorised access, accidental loss, misuse, alteration, or disclosure. These measures may include access controls, secure storage, password protection, limited staff access, and careful vetting of third-party processors.

Although we work to protect your data, no system can be guaranteed completely secure. We therefore encourage customers to share only the information necessary for the provision of our services.

7. Your Rights

As a data subject under UK GDPR, you have several rights in relation to your personal data. Subject to legal conditions and exemptions, these may include:

The right of access to obtain a copy of the personal data we hold about you;
The right to rectification to request correction of inaccurate or incomplete data;
The right to erasure in certain circumstances, also known as the right to be forgotten;
The right to restrict processing in certain situations;
The right to object to processing based on legitimate interests, including direct marketing where applicable;
The right to data portability for information processed by automated means on the basis of consent or contract, where applicable;
The right to withdraw consent where processing is based on consent;
The right not to be subject to solely automated decision-making that has legal or similarly significant effects, where applicable.

To exercise any of these rights, you should make a request using the appropriate channels provided by our business processes. We may need to verify your identity before responding. We aim to respond within the time periods required by law.

8. Marketing and Communications

We may send service-related communications that are necessary for bookings, confirmations, reminders, or updates. Where we send any optional marketing messages, we will do so only in accordance with applicable law and, where required, with your consent. You can opt out of marketing communications at any time.

Important: service messages that are needed to complete or manage your booking are not marketing and may still be sent where necessary.

9. Children’s Data

Our services are directed to adult customers and property occupants rather than children. We do not knowingly collect personal data from children except where it is incidentally included in service-related communications or access notes provided by an adult customer. If we become aware that we have collected such data without a valid basis, we will take appropriate steps to delete it.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in the law, our services, or our internal practices. Any revised version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how we handle personal data.

11. Summary of Our Commitment

Carpetcleaning W13 is committed to protecting the privacy of all customers in the area. We collect only the data needed to provide our services, rely on lawful bases for processing, keep information only as long as necessary, use trusted processors under contract, and respect your rights under data protection law. We aim to ensure that all personal data is handled with care, accountability, and respect.

This policy applies to all Carpetcleaning W13 customers in area.