Privacy Policy - Carpetcleaning SE24

This Privacy Policy explains how Carpetcleaning SE24 collects, uses, stores, shares, and protects personal data relating to our customers and website visitors in the SE24 area. It applies to all Carpetcleaning SE24 customers in the area, including individuals who request quotations, make bookings, receive cleaning services, or communicate with us in connection with our services. We are committed to handling personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

Carpetcleaning SE24 provides professional carpet cleaning services in the SE24 area. For the purpose of data protection law, we act as the data controller when we decide how and why personal data is processed. This means we are responsible for ensuring that personal data is collected and used lawfully, fairly, and transparently.

2. Personal Data We Collect

We may collect and process the following categories of personal data:

Identity data: name, title, and any information you provide when identifying yourself.
Contact data: address, email address, telephone number, and service location details.
Service data: details about the cleaning services requested, appointment dates, preferences, and service history.
Payment data: payment status, billing records, and transaction details. We do not store card details unless required for secure processing through a payment provider.
Communication data: messages, enquiries, complaints, feedback, and records of correspondence.
Technical data: limited device and browsing information if you interact with digital services or forms, such as IP address and browser type.
Special category data: we do not normally collect special category data. If such data is accidentally provided, it will be handled with extra care and only where a lawful reason exists.

We aim to collect only the data that is necessary for the delivery of our services and the proper management of our business.

3. How We Collect Data

We may collect personal data directly from you when you:

request a quote or make a booking;
contact us by phone, email, or other communication methods;
provide service instructions or access details;
make a payment or request an invoice;
submit feedback, complaints, or service enquiries.

We may also receive data from third parties where necessary, such as payment processors, referral partners, or service platforms used to support our operations. Where personal data is obtained from a third party, we will ensure it is processed in a lawful and fair manner.

4. Lawful Basis for Processing

Under data protection law, we must have a lawful basis for processing your personal data. Carpetcleaning SE24 relies on the following lawful bases:

Contract

We process data where it is necessary to enter into or perform a contract with you, such as providing a quotation, confirming a booking, delivering carpet cleaning services, issuing invoices, and managing service-related communications.

Legal obligation

We may process and retain certain data to comply with legal and regulatory obligations, including tax records, accounting requirements, and business recordkeeping duties.

Legitimate interests

We may process personal data where it is necessary for our legitimate business interests, provided your rights and freedoms do not override those interests. This may include managing customer relationships, improving our services, handling queries, preventing fraud, and keeping proper internal records.

Consent

In limited situations, we may rely on your consent, for example where consent is required for certain optional communications or non-essential processing. Where we rely on consent, you may withdraw it at any time.

5. How We Use Personal Data

We use personal data for the following purposes:

to provide cleaning services and manage bookings;
to communicate with you before, during, and after a service;
to prepare quotations, invoices, and receipts;
to maintain accurate customer and service records;
to respond to enquiries, complaints, and feedback;
to comply with legal, tax, and accounting obligations;
to improve service quality and operational efficiency;
to protect our business, staff, and customers from fraud or misuse.

We will not use your personal data for purposes that are incompatible with the reasons it was originally collected, unless we have a lawful basis to do so.

6. Data Sharing and Processors

We may share personal data with trusted third parties who act as processors on our behalf or, in some cases, as independent controllers. These third parties may only process your personal data according to our instructions or for their own lawful purposes where applicable.

Examples of processors and service providers may include:

IT and cloud service providers: for secure storage, email hosting, and administrative systems;
payment processors: for handling card or electronic payments;
accounting or bookkeeping providers: for financial administration and tax compliance;
customer management tools: for booking records and service scheduling;
professional advisers: such as accountants or legal advisers, where necessary.

We require processors to implement appropriate technical and organisational measures to protect your data. We do not sell personal data.

7. International Transfers

If any processor stores or accesses personal data outside the United Kingdom, we will take steps to ensure that adequate safeguards are in place. This may include using approved contractual protections or ensuring that the recipient country provides an appropriate level of data protection.

8. Data Retention

We keep personal data only for as long as necessary for the purposes for which it was collected, including any legal, accounting, or reporting requirements. Retention periods may vary depending on the type of data and the purpose of processing.

In general:

customer service records: retained for the duration of the customer relationship and for a reasonable period afterwards;
financial and tax records: retained for the period required by law, commonly up to six years;
communications and enquiries: retained for as long as needed to resolve the matter and maintain business records;
consent-based data: retained until consent is withdrawn or the data is no longer needed.

When data is no longer required, we will securely delete, anonymise, or otherwise dispose of it.

9. Data Security

We take appropriate security measures to protect personal data from unauthorised access, alteration, disclosure, loss, or destruction. These measures may include access controls, password protection, secure storage, and limiting access to data to authorised persons only. While no system can be guaranteed completely secure, we work to maintain a level of protection appropriate to the risks involved.

10. Your Rights

Under UK GDPR, you have certain rights regarding your personal data. These rights include:

Right of access: you may request a copy of the personal data we hold about you;
Right to rectification: you may ask us to correct inaccurate or incomplete data;
Right to erasure: in some cases, you may request deletion of your personal data;
Right to restriction: you may request that we limit the processing of your data in certain situations;
Right to object: you may object to processing based on legitimate interests or direct marketing;
Right to data portability: you may request that certain data be provided in a structured, commonly used format;
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time;
Right to complain: you may lodge a complaint with the relevant data protection authority if you believe your rights have been infringed.

These rights are subject to certain legal conditions and exemptions. Not every request will always be possible to fulfil in every circumstance, but we will review each request carefully and respond in line with legal requirements.

11. How to Exercise Your Rights

If you wish to exercise any of your rights, we may ask you to provide sufficient information to verify your identity and understand your request. This helps us protect your data and ensure we only disclose personal information to the correct person. We will respond within the time limits set by law, usually within one month, unless the request is complex or numerous.

12. Children’s Data

Our services are generally intended for adults. We do not knowingly collect personal data from children unless it is necessary in relation to a service booking or household arrangement and provided by an adult with authority to do so. If we become aware that personal data has been collected inappropriately, we will take steps to delete it where appropriate.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data handling practices. Any updates will take effect when published or otherwise communicated. We encourage customers to review this policy periodically so they remain informed about how their personal data is handled.

14. Summary of Our Commitment

Carpetcleaning SE24 is committed to processing personal data fairly, lawfully, and transparently. We collect only the information needed to provide our services, use it for clear and legitimate purposes, retain it only as long as necessary, and protect it through appropriate security measures. We also respect and support your rights under data protection law.

This Privacy Policy applies to all Carpetcleaning SE24 customers in the area.