Privacy Policy - Carpet Cleaners SE8

This Privacy Policy explains how Carpet Cleaners SE8 collects, uses, stores, shares, and protects personal data. It applies to all Carpet Cleaners SE8 customers in the area, including current, past, and prospective customers who request services, receive quotations, make enquiries, or otherwise interact with us. We are committed to handling personal data in a lawful, fair, and transparent manner in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who this policy applies to

This policy applies to individuals in the SE8 area who use or enquire about our carpet cleaning services, as well as people acting on behalf of a household, business, landlord, tenant, property manager, or other organisation. Where a customer provides personal data about another person, the customer must ensure they have the authority or appropriate permission to do so.

2. Data we collect

We only collect personal data that is necessary for providing carpet cleaning services, managing customer relationships, processing payments, and meeting legal obligations. The types of data we may collect include:

Identity data: name, title, and any relevant customer identifier.
Contact data: address, email address, telephone number, and service location details.
Service data: information about carpet type, stain concerns, room layout, access arrangements, preferred appointment times, and cleaning requirements.
Transaction data: records of quotations, invoices, payments, refunds, and service history.
Communication data: messages, calls, complaints, feedback, and notes from conversations.
Technical data: limited information such as device or browser details where our systems record it during online interactions.
Marketing preferences: choices about receiving promotional or service-related updates, where applicable.

We do not seek to collect special category data unless it is strictly necessary and you choose to provide it. For example, if you voluntarily tell us about a health-related issue relevant to access or scheduling, we will only use that information for the specific purpose for which it was shared.

3. How we use personal data

Personal data is used for legitimate operational and administrative purposes, including:

responding to enquiries and providing quotes;
booking, delivering, and managing carpet cleaning services;
processing payments and issuing receipts;
communicating service updates, reminders, or changes;
handling complaints, disputes, and customer support requests;
maintaining accurate business and financial records;
improving service quality, training, and internal processes;
meeting legal, tax, insurance, and regulatory obligations;
protecting against fraud, misuse, or unauthorised access.

We only use personal data for the purpose for which it was collected, unless we reasonably determine that a compatible purpose applies or a new lawful basis is available.

4. Lawful basis for processing

Under data protection law, we must have a lawful basis to process personal data. Depending on the circumstances, Carpet Cleaners SE8 may rely on one or more of the following:

Contract

We process personal data when it is necessary to enter into or perform a contract with you. This includes taking bookings, delivering services, sending quotes, processing payments, and managing after-service matters.

Legitimate interests

We may process personal data where it is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms. Examples include improving our services, maintaining service records, managing customer communications, and preventing fraud or misuse.

Legal obligation

We may process personal data where required to comply with the law, such as accounting rules, tax obligations, record-keeping requirements, or lawful requests from authorities.

Consent

Where required by law, we will rely on your consent, for example for certain forms of marketing communication. If consent is used, you may withdraw it at any time.

Vital interests

In rare cases, we may process personal data to protect someone’s vital interests, such as if emergency information is needed during a service appointment.

5. Sharing personal data and processors

We may share personal data only when necessary and only with trusted third parties acting on our behalf or where the law requires it. These third parties are known as processors when they handle data under our instructions. Processors may include:

Payment processors for taking and recording payments securely;
Booking and scheduling systems for arranging appointments;
IT and cloud service providers for data storage, email, and system support;
Accounting and invoicing services for financial record management;
Customer communication tools for sending service-related messages;
Professional advisers such as accountants, insurers, or legal advisers where necessary;
Public authorities where disclosure is required by law or to protect rights and safety.

All processors are expected to implement appropriate security measures and to process personal data only for specified purposes. We do not sell personal data.

6. Data retention

We keep personal data only for as long as necessary to fulfil the purposes described in this policy, including to meet legal, accounting, and reporting requirements. Retention periods may vary depending on the type of data and the reason it was collected.

Customer and service records are generally retained for the period needed to manage the customer relationship and resolve any post-service issues.
Financial and tax records are kept for the period required by law.
Communication records may be retained for a reasonable period to support customer service, complaint handling, and business administration.
Marketing preferences are retained until you update or withdraw your preference.

When data is no longer required, we will delete it securely or anonymise it so that it can no longer identify you.

7. Data security

We use appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or alteration. These measures may include access controls, secure storage, staff awareness, and restricted use of personal data on a need-to-know basis. While no system can be guaranteed completely secure, we take reasonable steps to safeguard information throughout its lifecycle.

8. International transfers

Where personal data is processed outside the United Kingdom, we will only do so where appropriate safeguards are in place. These safeguards may include adequacy regulations, standard contractual clauses, or equivalent legal protections designed to keep your information secure and protected.

9. Your rights

As a data subject, you have several rights under GDPR. Subject to legal limits and exemptions, you may have the right to:

access the personal data we hold about you;
rectify inaccurate or incomplete data;
erase your data in certain circumstances;
restrict how we process your data in certain situations;
object to processing based on legitimate interests or direct marketing;
data portability for information you provided to us where processing is based on consent or contract and carried out by automated means;
withdraw consent at any time where processing relies on consent;
complain to the Information Commissioner’s Office if you believe your rights have been infringed.

We may need to verify your identity before responding to a rights request. We aim to respond within the time limits set by law.

10. Marketing preferences

If we send service updates or marketing messages, you may opt out where the law allows. Where consent is required, we will not send marketing unless you have clearly agreed. You may change your preferences at any time, and we will respect your choices.

11. Children’s data

Our services are intended for adults and household or business customers. We do not knowingly collect personal data from children unless it is provided by an adult customer as part of arranging a service. If we learn that data has been collected inappropriately, we will take steps to delete it where required.

12. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in law, service practices, or operational needs. The latest version will apply to your use of our services. We encourage customers in the SE8 area to review this policy periodically so they remain informed about how their data is handled.

13. Summary of our commitment

Carpet Cleaners SE8 respects your privacy and handles personal data responsibly. We collect only what we need, use it for clear purposes, retain it only for as long as necessary, and protect it with appropriate safeguards. We also ensure that customers in the SE8 area can exercise their rights under data protection law.