Carpet Cleaners NW8 Privacy Policy
This Privacy Policy explains how Carpet Cleaners NW8 collects, uses, stores, and protects personal data relating to our customers and prospective customers in the NW8 area. We are committed to complying with the UK General Data Protection Regulation and the Data Protection Act 2018, and to processing personal data in a lawful, fair, and transparent manner.
This Privacy Policy applies to all Carpet Cleaners NW8 customers and users of our services in the NW8 area, including anyone who contacts us to request a quote, make a booking, or communicate with us about our carpet cleaning and related services.
Data Controller
Carpet Cleaners NW8 is the data controller in respect of the personal data that we collect and process in connection with our services. As data controller, we determine the purposes and means of processing your personal data and are responsible for ensuring that such processing is carried out in accordance with applicable data protection laws.
Personal Data We Collect
We collect only the personal data that is necessary for us to provide our services and manage our relationship with you. The types of personal data we may collect include:
Identification and contact details, such as your name and your contact preferences where provided.
Service and address information, such as the property address where services are to be carried out, access details, property type, and any relevant notes required to perform the cleaning safely and effectively.
Booking and transaction information, such as dates and times of appointments, services requested, prices agreed, payment status, and basic invoicing information.
Communication records, such as notes from phone calls, and records of messages or forms you send us when you request a quote, provide instructions, or give feedback.
Technical and usage information where applicable, such as basic device or browser details and interactions with our online content, to the extent this is necessary for security, service improvement, or understanding how customers find and use our services.
Lawful Bases for Processing
We will only process your personal data when we have a lawful basis to do so under the UK GDPR. Depending on the context, we may rely on the following lawful bases:
Contractual necessity. We process your personal data to take steps at your request before entering into a contract and to perform our contract with you. This includes processing to provide quotes, confirm bookings, carry out cleaning services, manage payments, and respond to your service-related enquiries.
Legal obligations. We process certain personal data to comply with legal and regulatory obligations, including record-keeping, accounting, and obligations in relation to tax, insurance, or responding to lawful requests from public authorities.
Legitimate interests. In some cases, we process personal data where it is necessary for our legitimate business interests and where your interests and fundamental rights do not override those interests. These interests include managing our relationship with customers, improving and developing our services, protecting our business and property, and handling queries, complaints, or disputes.
Consent. On occasion, we may rely on your consent, for example for optional marketing communications that go beyond what is necessary for our existing customer relationship. When we rely on consent, you are free to withdraw it at any time, and this will not affect the lawfulness of processing based on consent before it was withdrawn.
How We Use Your Personal Data
We use personal data for the following purposes:
To provide our services, including arranging and carrying out carpet cleaning and related services at your property and communicating with you about your booking.
To handle enquiries and quotes, including responding to requests for information, providing approximate pricing, and advising on the most suitable services for your needs.
To manage payments and accounts, including raising invoices, recording payments, and maintaining financial records as required by law.
To manage customer relationships, including following up on work carried out, handling feedback or complaints, and maintaining service history to assist with future bookings.
To ensure safety and quality, including documenting any relevant information about site access, property conditions, and risks so that we can plan and deliver services safely and professionally.
To improve our services, including reviewing how customers use our services, considering feedback, and developing new or enhanced services.
To protect our business, including preventing and investigating potential fraud, misuse, or security incidents, and handling or defending legal claims where necessary.
Data Sharing and Processors
We do not sell your personal data. We may share your personal data with carefully selected third parties where necessary and lawful, including:
Service providers acting as data processors who provide operational services such as payment processing, booking and scheduling tools, accounting and invoicing systems, IT hosting or support, and secure data storage. These providers process data on our instructions and are contractually required to protect your data and use it only for the services they deliver to us.
Professional advisers, such as accountants, legal advisers, or insurance providers, to the extent necessary for the services they provide and in accordance with confidentiality and data protection obligations.
Public authorities or law enforcement, where we are under a legal duty to disclose or share your data, or where such disclosure is necessary to protect our rights, property, or the safety of our staff or customers.
Any potential buyer or successor, in the context of a business sale, merger, or reorganisation, where personal data may need to be disclosed under appropriate safeguards as part of due diligence or business transfer, subject to the requirements of data protection law.
International Transfers
Where any of our processors or service providers are located outside the United Kingdom, we will ensure that your personal data is protected by appropriate safeguards. These may include the use of adequacy regulations or standard contractual clauses approved by relevant authorities, together with additional measures where required by law. We will only transfer personal data internationally in compliance with applicable data protection laws.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements.
In general, we retain core customer and transaction records for the duration of our relationship with you and for a period afterwards that reflects applicable limitation periods for legal claims and legal record-keeping requirements. Factors that influence retention periods include the type of data, the nature of our relationship with you, the potential risk of harm from unauthorised use or disclosure, and our legal and regulatory obligations.
When personal data is no longer required, we will take reasonable steps to delete or anonymise it securely.
Your Data Protection Rights
Under data protection law, individuals have a number of rights in relation to their personal data. Subject to certain conditions and exemptions, you may have the right to:
Access your personal data and receive information about how it is processed.
Rectify inaccurate or incomplete personal data we hold about you.
Erase your personal data in certain circumstances, for example where it is no longer necessary for the purposes for which it was collected or where you withdraw consent and there is no other legal basis for processing.
Restrict the processing of your personal data in certain circumstances, such as while we verify its accuracy or consider an objection you have raised.
Object to processing that is based on our legitimate interests, on grounds relating to your particular situation. We will then stop processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or where processing is required for the establishment, exercise, or defence of legal claims.
Data portability, in certain cases, allowing you to receive personal data you have provided to us in a structured, commonly used, and machine-readable format and to transmit that data to another controller where technically feasible.
Withdraw consent where we rely on consent as the lawful basis for processing your personal data. Withdrawal will not affect the lawfulness of any processing carried out before consent was withdrawn.
You are also entitled to lodge a complaint with the relevant data protection supervisory authority if you are concerned about how we handle your personal data. We encourage you to contact us first so that we can try to resolve your concerns directly.
Security of Your Personal Data
We take appropriate technical and organisational measures to protect personal data against unauthorised or unlawful processing and against accidental loss, destruction, or damage. These measures include limiting access to personal data to those staff and processors who need it for legitimate business purposes, using secure systems for storage and transmission where appropriate, and keeping our procedures and safeguards under review.
Updates to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or data protection guidance. Any changes will take effect when the updated policy is made available. We recommend that you review this Privacy Policy periodically to stay informed about how we process your personal data.
