Carpet Cleaning SE24 Privacy Policy
This Privacy Policy explains how Carpet Cleaning SE24 collects, uses, stores and protects personal information relating to customers in the SE24 area. It also explains your rights under applicable data protection laws, including the UK General Data Protection Regulation and the Data Protection Act 2018. By using our services, you acknowledge that you have read and understood this Privacy Policy.
Scope of this Privacy Policy
This Privacy Policy applies to all Carpet Cleaning SE24 customers and prospective customers located in the SE24 area who contact us, request a quotation, book a service, or otherwise interact with us in relation to our carpet cleaning and associated services. It covers personal data we collect directly from you, as well as data we may receive from third parties acting on your behalf.
Data Controller
Carpet Cleaning SE24 acts as the data controller for the personal data described in this Privacy Policy. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing complies with applicable data protection laws.
Personal Data We Collect
We collect and process different types of personal data, depending on how you interact with us and which services you use. This may include:
Identification and contact details: name, address, service address, billing address, and other basic contact information you provide when you make an enquiry or booking.
Communication details: information provided in your messages, such as enquiries about services, feedback, complaints or other correspondence.
Service details: information about the property or premises where we provide services, such as property type, number of rooms, access arrangements and any specific instructions relevant to the service.
Booking and transaction data: dates and times of appointments, chosen services, prices, discounts and payment status. Payment card details are processed in line with PCI-DSS requirements and are not stored by us beyond what is strictly necessary to complete the transaction.
Technical and usage data: limited technical information related to your use of our website or online booking tools, such as approximate location derived from your IP address and basic device or browser details, where this is necessary to ensure the security and proper functioning of our online services.
Lawful Bases for Processing
We process your personal data only where we have a lawful basis under data protection law. Depending on the context, this may be:
Contract: to take steps at your request before entering into a contract and to perform our contract with you, for example to provide quotations, confirm bookings, deliver carpet cleaning services and manage payments.
Legal obligation: to comply with legal and regulatory requirements, such as maintaining proper accounting and tax records, and responding to lawful requests from authorities.
Legitimate interests: to pursue our legitimate business interests in a way that does not override your rights and freedoms, for example to manage our day-to-day operations, schedule appointments efficiently, improve our services, handle customer queries, prevent fraud and ensure security.
Consent: in certain limited situations, we may rely on your consent, for example if you ask us to keep your details on file for future services where this is not strictly necessary for our contract, or if you choose to receive optional marketing communications. Where processing is based on consent, you can withdraw your consent at any time.
How We Use Your Personal Data
We use personal data for the following purposes:
To respond to enquiries, provide quotations and discuss your service requirements.
To confirm bookings, manage appointments and deliver carpet cleaning and related services at your property.
To process payments, issue invoices and keep appropriate financial and service records.
To communicate with you about changes to appointments, service updates, follow-up visits and related customer service matters.
To manage our business operations, including planning routes, staffing and inventory.
To monitor and improve the quality, safety and efficiency of our services.
To fulfil legal obligations, resolve disputes and enforce our agreements.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including satisfying legal, accounting and reporting requirements.
Customer and transaction records related to the provision of services are generally retained for up to seven years after the end of the relevant financial year, in line with legal and tax obligations.
Operational data such as booking records and service notes are usually kept for as long as needed to manage our relationship with you and to address any queries, complaints or potential claims.
Information held solely for marketing purposes or based solely on your consent will be retained until you withdraw your consent or request deletion, unless we are required to retain certain data for a longer period under law.
When personal data is no longer required, we will delete it securely or anonymise it so that it can no longer be associated with you.
Data Processors and Third Parties
We may share your personal data with carefully selected third parties that act as data processors on our behalf. These processors are engaged to perform specific tasks under our instructions and are required to keep your data secure and confidential. Types of processors we may use include:
Payment processing providers who handle card transactions and payment security.
Accounting or bookkeeping service providers who assist with financial records.
IT and hosting providers that support our website, booking tools and data storage.
Scheduling and customer management tools that help us manage bookings and customer communications.
Where necessary, we may also share personal data with independent professional advisers, such as accountants or legal advisers, and with public authorities or regulators where required by law or to protect our rights and the rights of others.
We do not sell your personal data to third parties. If we were to engage a new type of processor or substantially change how we share your data, we would update this Privacy Policy accordingly.
International Data Transfers
Where our service providers or systems involve transfers of personal data outside the United Kingdom, we will ensure that appropriate safeguards are in place to protect your information. These safeguards may include the use of standard contractual clauses or reliance on adequacy regulations, in line with applicable data protection laws.
Data Security
We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction or damage. Measures may include restricted access to personal data, staff training on data protection, secure storage systems and regular review of our security arrangements. While we strive to protect your information, no system can be completely secure, and you are encouraged to take your own precautions when sharing personal data.
Your Data Protection Rights
Under data protection law, you have a number of rights in relation to your personal data, subject to certain conditions and exceptions. These include:
Right of access: you can request confirmation that we process your personal data and obtain a copy of the data we hold about you, together with related information.
Right to rectification: you can ask us to correct inaccurate or incomplete personal data.
Right to erasure: in certain circumstances, you can request deletion of your personal data, for example where it is no longer needed for the purposes for which it was collected and there is no legal reason for us to continue processing it.
Right to restriction: you can ask us to restrict the processing of your personal data in certain situations, for example while we are verifying its accuracy or assessing an objection.
Right to object: you can object to processing based on our legitimate interests, including profiling based on those interests, if you believe your rights and interests outweigh our reasons for processing.
Right to data portability: where processing is based on consent or contract and carried out by automated means, you may request a copy of the personal data you have provided to us in a structured, commonly used and machine-readable format, and you may ask us to transfer it to another controller where technically feasible.
Right to withdraw consent: where we rely on your consent, you can withdraw it at any time. This will not affect the lawfulness of processing based on consent before its withdrawal.
You also have the right to lodge a complaint with the relevant data protection authority if you believe your rights have been infringed.
Children's Data
Our services are aimed at adults responsible for properties in the SE24 area. We do not knowingly collect personal data relating to children for our services, and any such data will be deleted or anonymised if we become aware of it.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal requirements or data protection practices. Any updates will be effective from the date of publication. We encourage you to review this Privacy Policy periodically to stay informed about how we handle your personal data.
