Privacy Policy - Carpet Cleaners W12

This Privacy Policy explains how Carpet Cleaners W12 collects, uses, stores, shares, and protects personal data when providing services to customers in the W12 area. It applies to all Carpet Cleaners W12 customers in the area, including residential and commercial clients, prospective customers, and anyone who communicates with us in connection with our services. We are committed to handling personal data in a lawful, fair, transparent, and secure manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

We only collect personal data that is necessary for running our business and delivering carpet cleaning services effectively. The information we may collect includes:

Identity details such as your name and title.
Contact details such as your telephone number, email address, and service address.
Booking and service details including appointment dates, service preferences, instructions, and access information.
Payment information such as billing records, payment confirmation, and transaction references. We do not store card details unless explicitly required by a secure payment provider.
Communication records including emails, messages, complaint notes, and any feedback you provide.
Property and cleaning details such as carpet type, stain descriptions, room sizes, and pre-service conditions, where needed to provide an accurate and safe service.
Technical data where applicable, such as basic logs from our systems that help with security, fraud prevention, and service quality.

We do not intentionally collect special category data unless it is provided by you and is strictly necessary for a specific service, such as information relevant to accessibility, health, or safety. If such data is provided, we will only process it where a lawful basis applies and where appropriate safeguards are in place.

2. How We Use Personal Data

We use personal data to operate our services and manage customer relationships. Typical uses include:

processing enquiries and bookings;
providing quotes and service confirmations;
delivering carpet cleaning, stain treatment, and related services;
sending appointment reminders and service updates;
handling payments, refunds, and accounting records;
responding to complaints, disputes, or requests;
maintaining security, preventing fraud, and protecting against misuse;
improving our service quality and customer experience;
meeting legal, regulatory, and tax obligations.

We only use personal data for the purposes for which it was collected, unless we reasonably determine that another compatible purpose applies and that such use is permitted by law.

3. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for each type of processing. Carpet Cleaners W12 relies on the following lawful bases:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes managing bookings, carrying out cleaning services, preparing invoices, and handling payment-related administration.

Legitimate Interests

We may process personal data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include improving service quality, managing internal records, preventing fraud, maintaining security, and responding to customer complaints. Where we rely on legitimate interests, we consider the impact on individuals and use appropriate safeguards.

Legal Obligation

We may process and retain certain personal data to comply with legal obligations, including accounting, tax, consumer protection, and record-keeping requirements.

Consent

In limited circumstances, we may rely on your consent, for example for certain optional communications or where special category data is provided and consent is the most appropriate basis. Where consent is used, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

4. Sharing and Processors

We may share personal data with trusted third parties who help us provide our services. These parties act as processors or, in some cases, as independent controllers. We only share data where necessary and require appropriate contractual protections.

Examples of processors may include:

IT and hosting providers that store and maintain our systems securely;
email and communication service providers that help us send confirmations and updates;
payment processing providers that handle secure transactions;
accounting and bookkeeping providers that support invoicing and tax compliance;
customer management software providers that help organise bookings and service records;
professional advisers such as accountants, legal advisers, or insurers where needed.

We may also disclose personal data if required by law, by a court order, or to protect our rights, customers, staff, or property. If business operations are restructured, merged, or transferred, personal data may be shared as part of that process, subject to legal safeguards.

Where a processor handles personal data on our behalf, they are only permitted to act under our instructions and must keep the data secure, confidential, and protected against unauthorised access or use.

5. Data Retention

We keep personal data only for as long as necessary for the purpose for which it was collected, and for any additional period required by law. Retention periods depend on the type of information and the reason it is held.

Booking and service records are usually retained for a reasonable period after the service has been completed, so we can manage queries, complaints, and repeat services.
Accounting and tax records are retained for the period required by UK law.
Communication records may be kept for as long as needed to resolve customer issues and maintain business records.
Consent-based records are kept only until you withdraw consent or the purpose ends.

When personal data is no longer needed, we securely delete, anonymise, or archive it in line with our retention procedures. We regularly review stored information to ensure it is not kept longer than necessary.

6. Data Security

We use appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration, or disclosure. These measures may include access controls, secure storage, staff confidentiality obligations, and regular review of our systems and processes. While no method of transmission or storage can be completely secure, we work to maintain a high standard of protection.

7. Your Rights

As a data subject, you have several rights under data protection law. These rights may apply depending on the legal basis used and the nature of the request.

Right of access - you can request a copy of the personal data we hold about you.
Right to rectification - you can ask us to correct inaccurate or incomplete information.
Right to erasure - you can request deletion of your data in certain circumstances.
Right to restriction - you can ask us to limit how we use your data in some cases.
Right to object - you can object to processing based on legitimate interests or direct marketing.
Right to data portability - you can request certain data in a structured, commonly used format where applicable.
Right to withdraw consent - where processing is based on consent, you may withdraw it at any time.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you are unhappy with how your personal data is handled. We encourage you to raise concerns with us first so we can try to resolve the matter promptly and fairly.

8. International Transfers

Where personal data is transferred outside the UK, we will ensure appropriate safeguards are in place to protect it. These safeguards may include adequacy regulations, standard contractual clauses, or equivalent lawful transfer mechanisms approved under data protection law.

9. Children's Data

Our services are not directed at children, and we do not knowingly collect personal data from children unless it is provided by an adult customer in connection with household services. If we become aware that we have collected data from a child without a valid reason or legal basis, we will take steps to delete it as appropriate.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or service operations. Any updated version will apply from the date it is published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their data is handled.

11. Summary of Our Commitment

Carpet Cleaners W12 is committed to respecting privacy and protecting personal data. We collect only what is necessary, use it for clear and lawful purposes, retain it only as long as needed, and share it only with trusted processors under proper safeguards. By maintaining transparent data practices, we aim to deliver a reliable and secure service for all customers in the W12 area.